Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-103279
yüksek		Ghost 3.10.0 before 6.34.0 Session Invalidation Bypass07:11 UTC derlemesi
CVE-2026-103278
yüksek		Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe07:11 UTC derlemesi
CVE-2026-103277
yüksek		Ghost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbed07:11 UTC derlemesi
CVE-2026-103272
yüksek		Ghost 2.10.0 before 6.63.0 Staff Enumeration via Content API07:11 UTC derlemesi
CVE-2026-103271
yüksek		Ghost 4.0.0 before 6.63.0 Restricted Content Bypass07:11 UTC derlemesi
CVE-2026-103268
yüksek		Ghost 1.0.0 before 6.62.0 Suspension Bypass via Password Reset07:11 UTC derlemesi
CVE-2026-103266
yüksek		Ghost 5.2.0 before 6.62.0 Unauthenticated Stripe Checkout Account Modification07:11 UTC derlemesi
CVE-2026-103262
yüksek		tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient07:11 UTC derlemesi
CVE-2026-96577
yüksek		oc-mirror__release-4.21: Embedded local cache registry listens on all interfaces without authentication, with delete enabled07:11 UTC derlemesi
CVE-2026-83589
yüksek		oauth-proxy: Open Redirect via /\ and /\t Bypass in Post-Login Redirect07:11 UTC derlemesi
CVE-2026-103431
yüksek		collectl: collectl: colmux does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances07:11 UTC derlemesi
GHSA-chx6-46f5-w4vp
yüksek		tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM07:11 UTC derlemesi
GHSA-c2m8-h5v5-343r
yüksek		Tornado: StaticFileHandler follows symlinks outside static root (path traversal)07:11 UTC derlemesi
CVE-2026-103000
yüksek		pypdf: pypdf: Denial of Service via large alphabetical page labels07:11 UTC derlemesi
CVE-2026-102999
yüksek		pypdf: pypdf: Denial of Service via crafted PDF with numerous embedded files07:11 UTC derlemesi
CVE-2026-102998
yüksek		pypdf: pypdf: Denial of Service via crafted PDF form fields07:11 UTC derlemesi
CVE-2026-102997
yüksek		pypdf: pypdf: Denial of Service via crafted FlateDecode stream07:11 UTC derlemesi
CVE-2026-102996
yüksek		pypdf: pypdf: Denial of Service via excessive memory consumption during font parsing07:11 UTC derlemesi
CVE-2026-102995
yüksek		pypdf: pypdf: Denial of Service via excessive memory consumption in font mapping07:11 UTC derlemesi
CVE-2026-102994
yüksek		pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files07:11 UTC derlemesi
CVE-2026-102993
yüksek		pypdf: pypdf: Denial of Service via crafted Roman page labels07:11 UTC derlemesi
CVE-2026-102992
yüksek		piscina: piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env07:11 UTC derlemesi
CVE-2026-102990
yüksek		basic-ftp: basic-ftp: Denial of Service via crafted Unix directory listings07:11 UTC derlemesi
CVE-2026-55224
yüksek		MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall07:11 UTC derlemesi
CVE-2026-55177
yüksek		CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard07:11 UTC derlemesi
CVE-2026-19553
yüksek		python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()07:11 UTC derlemesi
CVE-2026-19445
yüksek		python: Use-after-free of a server-side SSLContext when sni_callback switches contexts07:11 UTC derlemesi
CVE-2026-103241
yüksek		A flaw has been found in vllm-project vLLM up to 0.26.0.07:11 UTC derlemesi
CVE-2026-47602
yüksek		nvidia-driver: nvidia-driver: Denial of Service via untrusted pointer dereference07:11 UTC derlemesi
CVE-2026-47601
yüksek		nvidia-driver: nvidia-driver: Privilege escalation via improper memory access permissions in DMA-BUF import07:11 UTC derlemesi
CVE-2026-47600
yüksek		nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource07:11 UTC derlemesi
CVE-2026-47599
yüksek		nvidia: nvidia: Privilege escalation via improper memory permissions during DMA mapping07:11 UTC derlemesi
CVE-2026-47597
yüksek		nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in Resource Server07:11 UTC derlemesi
CVE-2026-47596
yüksek		nvidia-driver: nvidia-driver: Privilege escalation via unpreserved memory permissions07:11 UTC derlemesi
CVE-2026-47595
yüksek		nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via write to read-only memory07:11 UTC derlemesi
CVE-2026-47594
yüksek		nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via use-after-free driver commands07:11 UTC derlemesi
CVE-2026-47592
yüksek		nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds read in kernel mode layer07:11 UTC derlemesi
CVE-2026-47591
yüksek		nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via read-only memory protection bypass07:11 UTC derlemesi
CVE-2026-47590
yüksek		nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via crafted driver commands07:11 UTC derlemesi
CVE-2026-47589
yüksek		nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free07:11 UTC derlemesi
CVE-2026-47588
yüksek		nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free07:11 UTC derlemesi
CVE-2026-47587
yüksek		nvidia-driver: nvidia-driver: Privilege escalation via use-after-free07:11 UTC derlemesi
CVE-2026-47583
yüksek		nvidia-driver: nvidia-driver: Privilege escalation via type confusion in the kernel module07:11 UTC derlemesi
CVE-2026-47574
yüksek		nvidia-vgpu: nvidia-vgpu: Arbitrary code execution via incorrect resource transfer between spheres07:11 UTC derlemesi
CVE-2026-47572
yüksek		nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via kernel-mode type confusion07:11 UTC derlemesi
CVE-2026-47569
yüksek		nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via handle recycling race condition07:11 UTC derlemesi
CVE-2026-47563
yüksek		xorg-x11-drv-nvidia: xorg-x11-drv-nvidia: Privilege escalation via NULL pointer dereference in kernel mode layer07:11 UTC derlemesi
CVE-2026-47561
yüksek		nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: privilege escalation via unvalidated ioctl buffer size07:11 UTC derlemesi
CVE-2026-47560
yüksek		nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in kernel mode layer07:11 UTC derlemesi
CVE-2026-47559
yüksek		nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unauthorized cross-process memory access07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.