Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC
27kritik, son 7 gün324yüksek, son 7 gün661orta, son 7 gün104düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-102467
orta		In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implement07:11 UTC derlemesi
CVE-2026-110872
orta		nodemailer: nodemailer: Denial of Service via inefficient SMTP reply parsing07:11 UTC derlemesi
CVE-2026-110871
orta		nodemailer: nodemailer: Denial of Service via inefficient header parsing07:11 UTC derlemesi
CVE-2026-110870
orta		nodemailer: nodemailer: Domain allow-list bypass via improper address comment parsing07:11 UTC derlemesi
CVE-2026-110868
orta		renovate: Renovate: Information disclosure via Server-Side Request Forgery07:11 UTC derlemesi
CVE-2026-110866
orta		renovate: Renovate: Protection mechanism bypass via pull request rebase07:11 UTC derlemesi
CVE-2026-110860
orta		GitPython: GitPython: Arbitrary file relocation via symbolic link traversal in Submodule.move()07:11 UTC derlemesi
CVE-2026-110855
orta		GitPython: GitPython: Information disclosure via environment variable expansion in submodule names07:11 UTC derlemesi
CVE-2026-110836
orta		freerdp: freerdp: Denial of Service via crafted gateway Content-Type header07:11 UTC derlemesi
CVE-2026-110835
orta		freerdp: freerdp: HTTP header injection via crafted proxy routing token07:11 UTC derlemesi
CVE-2026-110834
orta		freerdp: freerdp: Denial of Service via out-of-lifecycle serial requests07:11 UTC derlemesi
CVE-2026-110832
orta		freerdp: freerdp: Denial of Service via memory exhaustion in dynamic virtual channels07:11 UTC derlemesi
CVE-2026-110831
orta		freerdp: FreeRDP: Denial of Service via file handle leak during drive redirection07:11 UTC derlemesi
CVE-2026-110829
orta		freerdp: FreeRDP: Denial of Service via malformed rdpsnd channel fragment07:11 UTC derlemesi
CVE-2026-110816
orta		qs: qs: Denial of Service via unhandled exception during array serialization07:11 UTC derlemesi
CVE-2026-110772
orta		sure: sure: Unauthorized transaction modification via bulk update missing authorization07:11 UTC derlemesi
CVE-2026-102682
orta		Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation07:11 UTC derlemesi
CVE-2026-102460
orta		io.vertx/vertx-web: vertx-web: Authorization bypass via ChainAuthHandler scope validation failure07:11 UTC derlemesi
CVE-2026-86856
orta		dpdk: dpdk: Stack and heap buffer overflow in nfp vDPA driver07:11 UTC derlemesi
CVE-2026-86849
orta		dpdk: dpdk: Integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto07:11 UTC derlemesi
CVE-2026-86847
orta		dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup07:11 UTC derlemesi
CVE-2026-86846
orta		dpdk: dpdk: Guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto07:11 UTC derlemesi
CVE-2026-86845
orta		dpdk: dpdk: Guest-triggered use-after-free and type confusion in vhost-crypto session cleanup07:11 UTC derlemesi
CVE-2026-86566
orta		dpdk: dpdk: Guest with runt RX descriptors underflows copy length in vhost enqueue (split and packed rings)07:11 UTC derlemesi
CVE-2026-110777
orta		evolution-data-server: local file disclosure via ATTACH file:// URIs07:11 UTC derlemesi
CVE-2026-107348
orta		pgbouncer: pgbouncer: Denial of Service via integer overflow in message buffer growth07:11 UTC derlemesi
CVE-2026-103975
orta		Appium: Symlink based Zip Slip in @appium/support ZIP extraction07:11 UTC derlemesi
CVE-2026-96596
orta		erlang: hex_core: hex: rebar3: erl_tar: Denial of Service via crafted GNU sparse TAR archive07:11 UTC derlemesi
CVE-2026-94200
orta		erlang: Erlang: Denial of Service via malformed TLS 1.3 session ticket07:11 UTC derlemesi
CVE-2026-67418
orta		rabbitmq-server: rabbitmq-server: Denial of Service via invalid MQTT PUBLISH property07:11 UTC derlemesi
CVE-2026-105236
orta		erlang: erlang: Authentication bypass via TLS session resumption across virtual hosts07:11 UTC derlemesi
CVE-2026-93683
orta		dpdk: dpdk: Guest-triggered out-of-bounds walk via vhost indirect descriptor length TOCTOU07:11 UTC derlemesi
CVE-2026-86561
orta		dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup07:11 UTC derlemesi
CVE-2026-67416
orta		rabbitmq-server: rabbitmq-server: Denial of Service via improper AMQP message descriptor validation07:11 UTC derlemesi
CVE-2026-67414
orta		rabbitmq-server: rabbitmq-server: Denial of Service via memory exhaustion in AMQP parser07:11 UTC derlemesi
CVE-2026-62858
orta		YOURLS: Unauthenticated File Inclusion07:11 UTC derlemesi
CVE-2026-100394
orta		Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant07:11 UTC derlemesi
CVE-2026-97629
orta		nginx: nginx: Client certificate verification bypass via forged SSL sessions07:11 UTC derlemesi
CVE-2026-95101
orta		nginx: nginx: Data injection in proxied requests via HTTP/3 request buffering07:11 UTC derlemesi
CVE-2026-84471
orta		The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN ...07:11 UTC derlemesi
CVE-2026-59766
orta		Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times`07:11 UTC derlemesi
CVE-2026-110263
orta		org.ow2.asm/asm: OW2 ASM: Denial of Service via uncontrolled recursion in SignatureReader07:11 UTC derlemesi
CVE-2026-110261
orta		org.ow2.asm/asm: OW2 ASM: Denial of Service via crafted class files during frame computation07:11 UTC derlemesi
CVE-2026-110260
orta		org.ow2.asm/asm: OW2 ASM: Denial of Service via crafted class file with overlapping exception handlers07:11 UTC derlemesi
CVE-2026-110258
orta		org.ow2.asm/asm: OW2 ASM: Denial of Service via excessive memory allocation07:11 UTC derlemesi
CVE-2026-110257
orta		org.ow2.asm/asm: OW2 ASM: Denial of Service via excessive memory allocation07:11 UTC derlemesi
CVE-2026-107381
orta		svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences07:11 UTC derlemesi
CVE-2026-98429
orta		kernel: RDMA/efa: Keep EQ resources alive while IRQ is registered07:11 UTC derlemesi
CVE-2026-98428
orta		kernel: ALSA: usb: 6fire: Avoid embedded URBs07:11 UTC derlemesi
CVE-2026-98426
orta		kernel: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.