Yayın tarihine göre
Kasım 2026: sömürülen ve yeni ciddi CVE kayıtları
811 kayıt · 1 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 9 / 9
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-122319İstismar yok | Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panickyverno · kyverno · CWE-704 | Yüksek8,7 | — | — | Bugün |
33İzleyin | CVE-2026-122320İstismar yok | Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clonekyverno · kyverno · CWE-862 | Yüksek8,3 | — | — | Bugün |
34İzleyin | CVE-2026-122321İstismar yok | Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypasskyverno · kyverno · CWE-367 | Yüksek8,5 | — | — | Bugün |
34İzleyin | CVE-2026-122322İstismar yok | Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompressionkyverno · kyverno · CWE-409 | Yüksek8,7 | — | — | Bugün |
34İzleyin | CVE-2026-122323İstismar yok | Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompressionkyverno · kyverno · CWE-409 | Yüksek8,7 | — | — | Bugün |
36İzleyin | CVE-2026-122992İstismar yok | In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-Mg4klx · dstargateway · CWE-191 | Kritik9,2 | — | — | Bugün |
32İzleyin | CVE-2026-116617İstismar yok | Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameterstylemix · motors – car dealership & classified listings plugin · CWE-22 | Yüksek8,1 | — | — | Bugün |
35İzleyin | CVE-2026-118193İstismar yok | GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameterstellarwp · givewp – donation plugin and fundraising platform · CWE-269 | Yüksek8,8 | — | — | Bugün |
28İzleyin | CVE-2026-123010İstismar yok | @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim.twilio-labs · netlify-okta-auth · CWE-669 | Yüksek7,2 | — | — | Bugün |
28İzleyin | CVE-2026-123012İstismar yok | In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read access was intended, a digogs · gogs · CWE-178 | Yüksek7,1 | — | — | Bugün |
32İzleyin | CVE-2026-93389İstismar yok | LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Cachinglitespeedtech · litespeed cache · CWE-200 | Yüksek8,2 | — | — | Bugün |
- CVE-2026-12231934İzleyin
Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic
YüksekCVSS 8,7İstismar yokkyverno · kyvernoBugün
- CVE-2026-12232033İzleyin
Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone
YüksekCVSS 8,3İstismar yokkyverno · kyvernoBugün
- CVE-2026-12232134İzleyin
Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass
YüksekCVSS 8,5İstismar yokkyverno · kyvernoBugün
- CVE-2026-12232234İzleyin
Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression
YüksekCVSS 8,7İstismar yokkyverno · kyvernoBugün
- CVE-2026-12232334İzleyin
Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression
YüksekCVSS 8,7İstismar yokkyverno · kyvernoBugün
- CVE-2026-12299236İzleyin
In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-M
KritikCVSS 9,2İstismar yokg4klx · dstargatewayBugün
- CVE-2026-11661732İzleyin
Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter
YüksekCVSS 8,1İstismar yokstylemix · motors – car dealership & classified listings pluginBugün
- CVE-2026-11819335İzleyin
GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter
YüksekCVSS 8,8İstismar yokstellarwp · givewp – donation plugin and fundraising platformBugün
- CVE-2026-12301028İzleyin
@twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim.
YüksekCVSS 7,2İstismar yoktwilio-labs · netlify-okta-authBugün
- CVE-2026-12301228İzleyin
In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read access was intended, a di
YüksekCVSS 7,1İstismar yokgogs · gogsBugün
- CVE-2026-9338932İzleyin
LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching
YüksekCVSS 8,2İstismar yoklitespeedtech · litespeed cacheBugün