Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-111382
yüksek		freerdp: freerdp: Arbitrary code execution via crafted display frames07:11 UTC derlemesi
CVE-2026-111381
yüksek		freerdp: freerdp: Arbitrary code execution via crafted persistent cache file07:11 UTC derlemesi
CVE-2026-111380
yüksek		freerdp: FreeRDP: Arbitrary code execution via integer overflow in audio input buffer calculation07:11 UTC derlemesi
CVE-2026-111379
yüksek		freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file07:11 UTC derlemesi
CVE-2026-111378
yüksek		freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser07:11 UTC derlemesi
CVE-2026-111373
yüksek		freerdp: FreeRDP: Denial of Service via zero-length WebSocket ping07:11 UTC derlemesi
CVE-2026-110922
yüksek		chromium-browser: Use after free in Prerender07:11 UTC derlemesi
CVE-2026-110921
yüksek		chromium-browser: Use after free in V807:11 UTC derlemesi
CVE-2026-110920
yüksek		chromium-browser: Memory corruption in V807:11 UTC derlemesi
CVE-2026-110919
yüksek		chromium-browser: Use after free in V807:11 UTC derlemesi
CVE-2026-110918
yüksek		chromium-browser: Memory corruption in Core07:11 UTC derlemesi
CVE-2026-110917
yüksek		chromium-browser: Memory corruption in SVG07:11 UTC derlemesi
CVE-2026-110913
yüksek		chromium-browser: Memory corruption in DOM07:11 UTC derlemesi
CVE-2026-109468
yüksek		dotnet: ASP.NET Core: Denial of Service via unthrottled resource allocation07:11 UTC derlemesi
CVE-2026-97370
yüksek		Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction07:11 UTC derlemesi
CVE-2026-87029
yüksek		undici: undici: Denial of Service via unhandled exception in decompress interceptor07:11 UTC derlemesi
CVE-2026-87018
yüksek		undici: undici: Denial of Service via TLS renegotiation with mismatched certificate07:11 UTC derlemesi
CVE-2026-111125
yüksek		cfitsio: cfitsio: Denial of Service via heap-based out-of-bounds read in HCOMPRESS tile decoder07:11 UTC derlemesi
CVE-2026-111124
yüksek		cfitsio: cfitsio: Denial of Service via out-of-bounds read during image decompression07:11 UTC derlemesi
CVE-2026-109932
yüksek		undici: undici: Denial of Service via unbounded WebSocket PONG buffering07:11 UTC derlemesi
CVE-2026-109924
yüksek		undici: undici: Denial of Service via memory exhaustion in EventSource client07:11 UTC derlemesi
CVE-2026-109869
yüksek		undici: undici: Denial of Service via unhandled stream error on excessive content encodings07:11 UTC derlemesi
CVE-2026-109841
yüksek		undici: undici: Subresource Integrity bypass via non-lowercase algorithm tokens07:11 UTC derlemesi
CVE-2026-108334
yüksek		github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: Crafted HTTPRoute match values can bypass Gateway policy overrides07:11 UTC derlemesi
CVE-2026-104827
yüksek		react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS07:11 UTC derlemesi
CVE-2026-104150
yüksek		http-server: http-server: Denial of Service via inefficient regular expression in slug route matcher07:11 UTC derlemesi
CVE-2026-102946
yüksek		joserfc: joserfc: Signature verification bypass via empty signatures array07:11 UTC derlemesi
CVE-2026-55453
yüksek		cups: cups: Arbitrary code execution via newline injection in printer status messages07:11 UTC derlemesi
CVE-2026-85634
yüksek		wildfly-core: wildfly-core: Deployer RBAC role privilege escalation via path traversal in deployment name07:11 UTC derlemesi
CVE-2026-100409
yüksek		OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths07:11 UTC derlemesi
CVE-2026-100354
yüksek		github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation07:11 UTC derlemesi
CVE-2026-100353
yüksek		github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding07:11 UTC derlemesi
CVE-2026-97394
yüksek		github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in openapi3filter07:11 UTC derlemesi
CVE-2026-92982
yüksek		ansible-operator-plugins: Ansible Operator Plugins: Arbitrary Code Execution via Jinja2 Template Injection07:11 UTC derlemesi
CVE-2026-100352
yüksek		github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values07:11 UTC derlemesi
CVE-2026-100351
yüksek		github.com/getkin/kin-openapi: kin-openapi: Authentication bypass via URL path decoding discrepancy07:11 UTC derlemesi
CVE-2026-100349
yüksek		github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil pointer dereference in response validation07:11 UTC derlemesi
CVE-2026-9703
yüksek		Viewer role can create, modify and delete Loki alerting rules07:11 UTC derlemesi
CVE-2026-104024
yüksek		peazip: PeaZip: Arbitrary command execution via incomplete dangerous file extension list07:11 UTC derlemesi
CVE-2026-99999
yüksek		kernel: ipv4: validate checksum_start before completing checksum07:11 UTC derlemesi
CVE-2026-104025
yüksek		peazip: PeaZip: Arbitrary code execution via path traversal in archive preview07:11 UTC derlemesi
CVE-2026-18660
yüksek		org.eclipse.jetty/jetty-server: org.eclipse.jetty/jetty-proxy: Eclipse Jetty: Access control bypass via case-sensitive host filtering07:11 UTC derlemesi
CVE-2026-77711
yüksek		org.eclipse.jetty/jetty-client: jetty-client: Information disclosure via improper proxy authentication handling07:11 UTC derlemesi
CVE-2026-109855
yüksek		undici: undici: Denial of Service via failed HTTP/2 WebSocket handshake07:11 UTC derlemesi
CVE-2024-22031
yüksek		Rancher users who can create Projects can gain access to arbitrary projects07:11 UTC derlemesi
CVE-2023-32198
yüksek		Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks07:11 UTC derlemesi
CVE-2026-110869
yüksek		nodemailer: nodemailer: Denial of Service via regular expression backtracking in SMTP authentication parsing07:11 UTC derlemesi
CVE-2026-110865
yüksek		renovate: Renovate: HTTP header injection via shared configuration presets07:11 UTC derlemesi
CVE-2026-110859
yüksek		GitPython: GitPython: Arbitrary file read via argument injection in branch checkout07:11 UTC derlemesi
CVE-2026-110857
yüksek		GitPython: GitPython: Arbitrary code execution via unsafe URL protocol handling07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.