Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-110856
yüksek		GitPython: GitPython: Denial of Service via regular expression backtracking in date parsing07:11 UTC derlemesi
CVE-2026-110854
yüksek		Parse Server before 8.6.97 and 9.10.2 Denial of Service via Unhandled Email Error07:11 UTC derlemesi
CVE-2026-110839
yüksek		freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion07:11 UTC derlemesi
CVE-2026-110838
yüksek		freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch07:11 UTC derlemesi
CVE-2026-110837
yüksek		freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding07:11 UTC derlemesi
CVE-2026-110833
yüksek		freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly07:11 UTC derlemesi
CVE-2026-110830
yüksek		freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling07:11 UTC derlemesi
CVE-2026-55787
yüksek		flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf07:11 UTC derlemesi
CVE-2026-55786
yüksek		flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`07:11 UTC derlemesi
CVE-2026-53999
yüksek		Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)07:11 UTC derlemesi
CVE-2026-86848
yüksek		dpdk: dpdk: Time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto07:11 UTC derlemesi
CVE-2026-86567
yüksek		dpdk: dpdk: VDUSE handler fails to invalidate vring pointers when IOTLB is invalidated, leading to use-after-unmap07:11 UTC derlemesi
CVE-2026-109527
yüksek		mcp: mcp: Denial of Service via unbounded HTTP request body buffering07:11 UTC derlemesi
CVE-2026-107350
yüksek		pgbouncer: pgbouncer: Privilege escalation via secondary startup message during SCRAM authentication07:11 UTC derlemesi
CVE-2026-107349
yüksek		pgbouncer: pgbouncer: Denial of Service via empty parameter name in startup options07:11 UTC derlemesi
CVE-2026-100413
yüksek		SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments07:11 UTC derlemesi
CVE-2026-86565
yüksek		dpdk: dpdk: Guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write07:11 UTC derlemesi
CVE-2026-86563
yüksek		dpdk: dpdk: Double offset bug in vhost log mapping calculation07:11 UTC derlemesi
CVE-2026-86562
yüksek		dpdk: dpdk: Control-queue descriptor double-fetch overflows host heap in DPDK vhost (VDUSE)07:11 UTC derlemesi
CVE-2026-77524
yüksek		github.com/kedacore/keda: KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication07:11 UTC derlemesi
CVE-2026-59951
yüksek		mcp: mcp: Denial of Service via session memory exhaustion in streamable HTTP servers07:11 UTC derlemesi
CVE-2026-100236
yüksek		dpdk: dpdk: heap out-of-bounds read/write in GSO header copy07:11 UTC derlemesi
CVE-2026-91159
yüksek		Discourse: Stored oEmbed HTML injection via allowed iframe07:11 UTC derlemesi
CVE-2026-91157
yüksek		Discourse: Media uploads remain publicly accessible after category permissions are restricted07:11 UTC derlemesi
CVE-2026-91156
yüksek		Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users07:11 UTC derlemesi
CVE-2026-53615
yüksek		util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser07:11 UTC derlemesi
CVE-2026-53614
yüksek		util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT207:11 UTC derlemesi
CVE-2026-103929
yüksek		mise permits untrusted local configuration to override default shell arguments07:11 UTC derlemesi
CVE-2026-102695
yüksek		OmniFaces: Forged combined-resource IDs and related output/push boundaries07:11 UTC derlemesi
CVE-2026-101896
yüksek		Angular is a development platform for building mobile and desktop web ...07:11 UTC derlemesi
CVE-2026-97205
yüksek		nginx: NGINX ngx_http_core_module vulnerability07:11 UTC derlemesi
CVE-2026-96615
yüksek		NGINX Gateway Fabric vulnerability07:11 UTC derlemesi
CVE-2026-93479
yüksek		nginx: NGINX map directive and regex matching vulnerability07:11 UTC derlemesi
CVE-2026-91184
yüksek		NGINX Gateway Fabric vulnerability07:11 UTC derlemesi
CVE-2026-53613
yüksek		util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path07:11 UTC derlemesi
CVE-2026-53612
yüksek		util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes07:11 UTC derlemesi
CVE-2026-15176
yüksek		nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename07:11 UTC derlemesi
CVE-2026-110642
yüksek		xhtml2pdf: xhtml2pdf: Arbitrary command execution via crafted file names07:11 UTC derlemesi
CVE-2026-101895
yüksek		Angular is a development platform for building mobile and desktop web ...07:11 UTC derlemesi
CVE-2017-20286
yüksek		DevIL: DevIL: Arbitrary code execution via crafted GIF image07:11 UTC derlemesi
CVE-2026-104795
yüksek		insights-runtime-extractor: insights-runtime-extractor: Container Escape via Privileged Binary Execution07:11 UTC derlemesi
CVE-2026-90954
yüksek		busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush07:11 UTC derlemesi
CVE-2026-92392
yüksek		curl: curl: HTTP/2 upload Use-After-Free07:11 UTC derlemesi
CVE-2026-94370
yüksek		qt-mcu: Qt: Memory corruption via improper string handling in Qt Quick Ultralite07:11 UTC derlemesi
CVE-2026-92817
yüksek		Ignition: Ignition: Arbitrary code execution via improper session privilege validation07:11 UTC derlemesi
CVE-2026-94453
yüksek		libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP07:11 UTC derlemesi
CVE-2026-110172
yüksek		chromium-browser: Use after free in Media07:11 UTC derlemesi
CVE-2026-110171
yüksek		chromium-browser: Use after free in Media07:11 UTC derlemesi
CVE-2026-110170
yüksek		chromium-browser: Use after free in Bindings07:11 UTC derlemesi
CVE-2026-110169
yüksek		chromium-browser: Use after free in V807:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.