İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2026: sömürülen ve yeni ciddi CVE kayıtları

3.408 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 34 / 35

  • CVE-2026-65982
    34İzleyin

    NULL-pointer dereference (DoS) in nginx-http-flv-module

    YüksekCVSS 8,7İstismar yok

    winshining · nginx-http-flv-moduleBugün

  • CVE-2026-111521
    28İzleyin

    Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.4.0.17, contain a Time-of-check Time-of-use (TOCTOU) Condition vulne

    YüksekCVSS 7,0İstismar yok

    dell · display and peripheral manager (ddpm windows)Bugün

  • CVE-2026-121528
    32İzleyin

    A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through

    YüksekCVSS 8,1İstismar yok

    fortinet · fortiosBugün

  • CVE-2026-126144
    35İzleyin

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 throu

    YüksekCVSS 8,8İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126145
    28İzleyin

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 throu

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126146
    28İzleyin

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 throu

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126147
    39İzleyin

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, Fo

    KritikCVSS 9,8İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126148
    39İzleyin

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 throu

    KritikCVSS 9,8İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126149
    30İzleyin

    A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 thr

    YüksekCVSS 7,5İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126150
    36İzleyin

    A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMai

    KritikCVSS 9,1İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126151
    30İzleyin

    A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.

    YüksekCVSS 7,5İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126152
    30İzleyin

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, F

    YüksekCVSS 7,6İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126153
    30İzleyin

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, Fo

    YüksekCVSS 7,5İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126154
    30İzleyin

    A out-of-bounds write vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8,

    YüksekCVSS 7,5İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126155
    36İzleyin

    A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.

    KritikCVSS 9,1İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126156
    36İzleyin

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, F

    KritikCVSS 9,1İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126157
    36İzleyin

    A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.

    KritikCVSS 9,1İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126158
    28İzleyin

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 throu

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126159
    30İzleyin

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, F

    YüksekCVSS 7,5İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126160
    32İzleyin

    A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.

    YüksekCVSS 8,2İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126161
    30İzleyin

    A uncontrolled resource consumption vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0

    YüksekCVSS 7,5İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126162
    34İzleyin

    A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow

    YüksekCVSS 8,7İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126163
    32İzleyin

    A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow a remote unauthenticated atta

    YüksekCVSS 8,1İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126164
    37İzleyin

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0

    KritikCVSS 9,4İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126165
    30İzleyin

    A memory allocation with excessive size value vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiM

    YüksekCVSS 7,5İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126166
    28İzleyin

    A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126167
    28İzleyin

    A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126168
    28İzleyin

    A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126169
    28İzleyin

    A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-126170
    39İzleyin

    A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, Fo

    KritikCVSS 9,8İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126171
    28İzleyin

    A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7,

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126175
    35İzleyin

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through

    YüksekCVSS 8,8İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126176
    32İzleyin

    A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer

    YüksekCVSS 8,1İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126177
    32İzleyin

    A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer

    YüksekCVSS 8,1İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126178
    28İzleyin

    A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126179
    28İzleyin

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0,

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126180
    33İzleyin

    A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiMan

    YüksekCVSS 8,4İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126181
    32İzleyin

    A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7

    YüksekCVSS 8,0İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126182
    28İzleyin

    A improper control of generation of code ('code injection') vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 t

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126183
    34İzleyin

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.

    YüksekCVSS 8,7İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126184
    32İzleyin

    A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAna

    YüksekCVSS 8,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126185
    28İzleyin

    A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126211
    28İzleyin

    A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 through 7.6.7, FortiAnalyze

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126212
    28İzleyin

    A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126213
    28İzleyin

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through

    YüksekCVSS 7,1İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126214
    28İzleyin

    A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAna

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126215
    32İzleyin

    A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.

    YüksekCVSS 8,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126217
    34İzleyin

    A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.

    YüksekCVSS 8,7İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126218
    32İzleyin

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.

    YüksekCVSS 8,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126219
    28İzleyin

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyze

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126220
    28İzleyin

    A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiManager

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126221
    28İzleyin

    A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiAnalyzer

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126222
    28İzleyin

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126223
    28İzleyin

    A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126224
    28İzleyin

    A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAna

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126225
    28İzleyin

    A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, FortiAnalyzer Cloud 8.0.0 through

    YüksekCVSS 7,1İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126226
    28İzleyin

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0,

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126227
    28İzleyin

    A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 thro

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126228
    28İzleyin

    A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 th

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126229
    36İzleyin

    A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through

    KritikCVSS 9,1İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126230
    28İzleyin

    A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7,

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126231
    28İzleyin

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0,

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126232
    30İzleyin

    A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnaly

    YüksekCVSS 7,5İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126233
    28İzleyin

    A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126234
    28İzleyin

    A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer Cloud 8

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126235
    28İzleyin

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126236
    28İzleyin

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 t

    YüksekCVSS 7,2İstismar yok

    fortinet · fortimanagerBugün

  • CVE-2026-126237
    30İzleyin

    A loop with unreachable exit condition ('infinite loop') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticato

    YüksekCVSS 7,5İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126238
    34İzleyin

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allo

    YüksekCVSS 8,6İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126239
    30İzleyin

    A stack-based buffer overflow vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may

    YüksekCVSS 7,5İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126240
    32İzleyin

    A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 th

    YüksekCVSS 8,2İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126241
    35İzleyin

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 th

    YüksekCVSS 8,8İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126242
    29İzleyin

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allo

    YüksekCVSS 7,4İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126243
    28İzleyin

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allo

    YüksekCVSS 7,2İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126244
    30İzleyin

    A allocation of resources without limits or throttling vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator

    YüksekCVSS 7,5İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126245
    32İzleyin

    A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an

    YüksekCVSS 8,1İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126246
    30İzleyin

    A null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may all

    YüksekCVSS 7,5İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126247
    28İzleyin

    A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 thro

    YüksekCVSS 7,2İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126248
    30İzleyin

    A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.

    YüksekCVSS 7,5İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126249
    28İzleyin

    A improper privilege management vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 ma

    YüksekCVSS 7,2İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126250
    32İzleyin

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allo

    YüksekCVSS 8,2İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126251
    36İzleyin

    A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allo

    KritikCVSS 9,1İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126252
    33İzleyin

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 th

    YüksekCVSS 8,3İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126253
    37İzleyin

    A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.

    KritikCVSS 9,3İstismar yok

    fortinet · fortiosBugün

  • CVE-2026-126254
    38İzleyin

    A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12,

    KritikCVSS 9,6İstismar yok

    fortinet · fortiosBugün

  • CVE-2026-126255
    29İzleyin

    A path traversal: '../filedir' vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4

    YüksekCVSS 7,4İstismar yok

    fortinet · fortiosBugün

  • CVE-2026-126256
    29İzleyin

    A out-of-bounds read vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7

    YüksekCVSS 7,4İstismar yok

    fortinet · fortiosBugün

  • CVE-2026-126257
    36İzleyin

    A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may a

    KritikCVSS 9,0İstismar yok

    fortinet · fortiauthenticatorBugün

  • CVE-2026-126258
    30İzleyin

    A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port acc

    YüksekCVSS 7,5İstismar yok

    fortinet · fortiosBugün

  • CVE-2026-126259
    39İzleyin

    A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7

    KritikCVSS 9,8İstismar yok

    fortinet · fortiosBugün

  • CVE-2026-126262
    39İzleyin

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through

    KritikCVSS 9,8İstismar yok

    fortinet · fortianalyzerBugün

  • CVE-2026-126263
    39İzleyin

    A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0

    KritikCVSS 9,8İstismar yok

    fortinet · fortimailBugün

  • CVE-2026-65949
    34İzleyin

    Lenovo XClarity Integrator for WAC: Gateway-Administrator Remote Command Execution

    YüksekCVSS 8,6İstismar yok

    lenovo · xclarity integrator for wacBugün

  • CVE-2026-65971
    30İzleyin

    Livewire PowerGrid: SQL Injection through the public `sortDirection` Livewire property in the `naturalSort` order-by path

    YüksekCVSS 7,6Kavram kanıtı

    power-components · livewire-powergridBugün

  • CVE-2026-67449
    39İzleyin

    Portabase: Unauthenticated path traversal in TUS webhook overwrites AES-256-GCM master key

    KritikCVSS 9,8İstismar yok

    portabase · portabaseBugün

  • CVE-2026-67541
    32İzleyin

    Heym: Missing role gate in team-member management lets any member add/remove members, exposing team-shared credentials

    YüksekCVSS 8,1İstismar yok

    heymrun · heymBugün

  • CVE-2026-67542
    28İzleyin

    Heym: SSRF via POST /api/mcp/fetch-tools: any authenticated user reaches local/private URLs through the SSE and streamable-HTTP transports

    YüksekCVSS 7,1İstismar yok

    heymrun · heymBugün

  • CVE-2026-67543
    35İzleyin

    Heym Unsandboxed skill code execution: skills run via a local backend subprocess without the Docker isolation that Python tools mandate

    YüksekCVSS 8,8İstismar yok

    heymrun · heymBugün

  • CVE-2026-67544
    35İzleyin

    Heym: Playwright Custom Code Backend RCE via `playwrightCode` Field

    YüksekCVSS 8,8İstismar yok

    heymrun · heymBugün

  • CVE-2026-67545
    29İzleyin

    Heym: Server-Side Request Forgery (SSRF) in HTTP Workflow Node

    YüksekCVSS 7,4İstismar yok

    heymrun · heymBugün