Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 24.933 CVE, 0 KEV kaydı · son NVD senkronu 02.11.2026 22:18. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-73291 | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream ETag and Content-Type response headers to build a cache filename for the unauthen | 7.1 | 12.08.2026 |
| CVE-2026-73264 | Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user with Lighthouse provider configuration access could supply an unvalidated base_url for the openai_compatible provider through POST /api/v1/lighthouse/providers and POST /api/v1/lighth | 7.6 | 12.08.2026 |
| CVE-2026-73262 | Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resource_tags, assembled by unroll_dict and parse_html_string, into generated reports without HTML escaping, allowing a | 5.4 | 12.08.2026 |
| CVE-2026-73263 | Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfig_content containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfig_contains_exec_auth in api/src/backend/a | 9.9 | 12.08.2026 |
| CVE-2026-68754 | A repository publisher without delete permission may modify protected package content under specific conditions. | 6.5 | 12.08.2026 |
| CVE-2026-68755 | A bundle writer may create misleading release promotion information under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-68756 | A party with write access to stored session data may affect JFrog Artifactory under specific conditions. | 6.6 | 12.08.2026 |
| CVE-2026-68757 | A user with access to a valid SAML response may impersonate another user under specific conditions. | 7.5 | 12.08.2026 |
| CVE-2026-68760 | An unauthenticated user may bypass authentication under specific cache conditions. | 5.3 | 12.08.2026 |
| CVE-2026-67286 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name. | 6.3 | 12.08.2026 |
| CVE-2026-67287 | Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input. | 6.3 | 12.08.2026 |
| CVE-2026-68752 | A Project Resource Manager may gain broader administrative privileges under specific conditions. | 7.2 | 12.08.2026 |
| CVE-2026-68753 | An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way. | 5.3 | 12.08.2026 |
| CVE-2026-66381 | A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions. | 5.3 | 12.08.2026 |
| CVE-2026-66382 | An authenticated user may write files outside the intended Artifactory work directory under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-66375 | A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions. | 8.1 | 12.08.2026 |
| CVE-2026-66376 | Credentials for a deleted user may remain valid for a short period under specific conditions. | 5.4 | 12.08.2026 |
| CVE-2026-66377 | An unauthenticated user may access restricted repository information under specific conditions. | 5.3 | 12.08.2026 |
| CVE-2026-66378 | An authenticated user without repository read permission may access private NuGet metadata under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-66379 | An authenticated user may view private Puppet module metadata without repository read access. | 4.3 | 12.08.2026 |
| CVE-2026-66380 | An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-50561 | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In affected versions, the system does not sufficiently validate the identity | 9.4 | 12.08.2026 |
| CVE-2026-49262 | In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding. A Time-of-Check to Time-of-Use (TOCTOU) race condition exists b | 3.0 | 12.08.2026 |
| CVE-2026-18171 | Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory stays writable at its | 5.7 | 12.08.2026 |
| CVE-2026-14478 | A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, | 7.8 | 12.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.