Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 12.460 CVE, 0 KEV kaydı. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-68755 | A bundle writer may create misleading release promotion information under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-68756 | A party with write access to stored session data may affect JFrog Artifactory under specific conditions. | 6.6 | 12.08.2026 |
| CVE-2026-68757 | A user with access to a valid SAML response may impersonate another user under specific conditions. | 7.5 | 12.08.2026 |
| CVE-2026-68760 | An unauthenticated user may bypass authentication under specific cache conditions. | 5.3 | 12.08.2026 |
| CVE-2026-67286 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name. | 6.3 | 12.08.2026 |
| CVE-2026-67287 | Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input. | 6.3 | 12.08.2026 |
| CVE-2026-68752 | A Project Resource Manager may gain broader administrative privileges under specific conditions. | 7.2 | 12.08.2026 |
| CVE-2026-68753 | An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way. | 5.3 | 12.08.2026 |
| CVE-2026-66381 | A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions. | 5.3 | 12.08.2026 |
| CVE-2026-66382 | An authenticated user may write files outside the intended Artifactory work directory under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-66375 | A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions. | 8.1 | 12.08.2026 |
| CVE-2026-66376 | Credentials for a deleted user may remain valid for a short period under specific conditions. | 5.4 | 12.08.2026 |
| CVE-2026-66377 | An unauthenticated user may access restricted repository information under specific conditions. | 5.3 | 12.08.2026 |
| CVE-2026-66378 | An authenticated user without repository read permission may access private NuGet metadata under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-66379 | An authenticated user may view private Puppet module metadata without repository read access. | 4.3 | 12.08.2026 |
| CVE-2026-66380 | An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-50561 | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In affected versions, the system does not sufficiently validate the identity | 9.4 | 12.08.2026 |
| CVE-2026-49262 | In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding. A Time-of-Check to Time-of-Use (TOCTOU) race condition exists b | 3.0 | 12.08.2026 |
| CVE-2026-18171 | Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory stays writable at its | 5.7 | 12.08.2026 |
| CVE-2026-14478 | A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, | 7.8 | 12.08.2026 |
| CVE-2026-14479 | A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerabilit | 5.5 | 12.08.2026 |
| CVE-2026-67285 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system. | 9.2 | 12.08.2026 |
| CVE-2026-16999 | Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17. | 6.3 | 12.08.2026 |
| CVE-2026-70467 | A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiS | 3.8 | 12.08.2026 |
| CVE-2026-70468 | A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7. | 8.1 | 12.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.