Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC
27kritik, son 7 gün324yüksek, son 7 gün661orta, son 7 gün104düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-87697
yüksek		dotnet: dotnet: arbitrary code execution via untrusted data deserialization07:11 UTC derlemesi
CVE-2026-86063
yüksek		claude-code: Claude Code: arbitrary code execution via unverified commit hash during plugin installation07:11 UTC derlemesi
CVE-2026-85363
yüksek		dotnet: dotnet: Privilege escalation via integer overflow07:11 UTC derlemesi
CVE-2026-84994
yüksek		Qwik: Crashing any Qwik Server via Resource thenable07:11 UTC derlemesi
CVE-2026-84008
yüksek		dotnet: .NET Denial of Service Vulnerability07:11 UTC derlemesi
CVE-2026-83520
yüksek		dotnet: dotnet: Arbitrary code execution via untrusted data deserialization07:11 UTC derlemesi
CVE-2026-70197
yüksek		dotnet: dotnet: Arbitrary code execution via out-of-bounds write07:11 UTC derlemesi
CVE-2026-70190
yüksek		dotnet: dotnet: Privilege escalation via improper link resolution07:11 UTC derlemesi
CVE-2026-70186
yüksek		dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability07:11 UTC derlemesi
CVE-2026-70183
yüksek		dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability07:11 UTC derlemesi
CVE-2026-70181
yüksek		dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability07:11 UTC derlemesi
CVE-2026-70179
yüksek		dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability07:11 UTC derlemesi
CVE-2026-70175
yüksek		dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability07:11 UTC derlemesi
CVE-2026-70174
yüksek		dotnet: .NET Remote Code Execution Vulnerability07:11 UTC derlemesi
CVE-2026-70161
yüksek		dotnet: dotnet: Privilege escalation via path traversal07:11 UTC derlemesi
CVE-2026-70159
yüksek		dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability07:11 UTC derlemesi
CVE-2026-70035
yüksek		dotnet: dotnet: arbitrary code execution via untrusted data deserialization07:11 UTC derlemesi
CVE-2026-70007
yüksek		dotnet: .NET Framework Remote Code Execution Vulnerability07:11 UTC derlemesi
CVE-2026-69651
yüksek		dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability07:11 UTC derlemesi
CVE-2026-58280
yüksek		dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability07:11 UTC derlemesi
CVE-2026-110247
yüksek		thunderbird: thunderbird: Arbitrary code execution via integer overflow in libmime07:11 UTC derlemesi
CVE-2026-110220
yüksek		github.com/kubeflow/hub: Kubeflow Model Registry: Privilege escalation via Server-Side Request Forgery in InferenceService annotation07:11 UTC derlemesi
CVE-2026-108398
yüksek		dotnet: .NET Framework: Security feature bypass via untrusted search path07:11 UTC derlemesi
CVE-2026-102870
yüksek		dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability07:11 UTC derlemesi
CVE-2026-102869
yüksek		dotnet: .NET and Visual Studio: Privilege escalation via type confusion07:11 UTC derlemesi
CVE-2026-102599
yüksek		engine.io: engine.io: Denial of Service via protocol revision mismatch during transport upgrade07:11 UTC derlemesi
CVE-2026-94603
yüksek		podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation07:11 UTC derlemesi
CVE-2026-85990
yüksek		Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods07:11 UTC derlemesi
CVE-2026-82416
yüksek		FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module07:11 UTC derlemesi
CVE-2026-77459
yüksek		argo-cd: github.com/argoproj/argo-cd/v3: github.com/argoproj/argo-cd/v2: argo-cd: AppProject restrictions bypassed by PreDelete/PostDelete resource hooks07:11 UTC derlemesi
CVE-2026-61642
yüksek		squid: squid: Request Smuggling in HTTP Transfer-Encoding07:11 UTC derlemesi
CVE-2026-54641
yüksek		OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl07:11 UTC derlemesi
CVE-2026-54640
yüksek		OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory07:11 UTC derlemesi
CVE-2026-103030
yüksek		Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`07:11 UTC derlemesi
CVE-2026-79610
yüksek		xen: Xen: Host privilege escalation via stale grant table pointers07:11 UTC derlemesi
CVE-2026-95114
yüksek		libwebsockets: libwebsockets: Denial of Service via out-of-bounds read in LEJP parser07:11 UTC derlemesi
CVE-2026-109954
yüksek		Parse Server 9.0.0 before 9.10.2 Transactional Batch Request Write Interference07:11 UTC derlemesi
CVE-2026-109740
yüksek		firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget07:11 UTC derlemesi
CVE-2026-109732
yüksek		firefox: Use-after-free in the DOM: Streams component07:11 UTC derlemesi
CVE-2026-109729
yüksek		firefox: Use-after-free in the JavaScript Engine: JIT component07:11 UTC derlemesi
CVE-2026-109727
yüksek		firefox: Use-after-free in the Audio/Video component07:11 UTC derlemesi
CVE-2026-109726
yüksek		firefox: Use-after-free in the SVG component07:11 UTC derlemesi
CVE-2026-109719
yüksek		firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component07:11 UTC derlemesi
CVE-2026-109717
yüksek		firefox: Use-after-free in the DOM: Bindings (WebIDL) component07:11 UTC derlemesi
CVE-2026-109714
yüksek		firefox: Incorrect boundary conditions in the Layout component07:11 UTC derlemesi
CVE-2026-109710
yüksek		firefox: thunderbird: Use-after-free in the Graphics: Text component07:11 UTC derlemesi
CVE-2026-109707
yüksek		firefox: Sandbox escape due to use-after-free in the Networking component07:11 UTC derlemesi
CVE-2026-109706
yüksek		firefox: Use-after-free in the Storage: IndexedDB component07:11 UTC derlemesi
CVE-2026-109705
yüksek		firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component07:11 UTC derlemesi
CVE-2026-109832
yüksek		gnome-remote-desktop: Busy-Wait DoS in VNC TLS I/O Handlers (GNUTLS_E_AGAIN / GNUTLS_E_INTERRUPTED)07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.