Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC

27kritik, son 7 gün 324yüksek, son 7 gün 661orta, son 7 gün 104düşük, son 7 gün

ID	Zafiyet	Bu seviyede olduğu tarih	Yayın
CVE-2026-79608 orta	xen: xen: Information disclosure via inverted conditional in Zenbleed workaround	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-54700 orta	ConnectBot SSH Client Library: Unbounded SSH field lengths can cause excessive memory allocation	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-54697 orta	ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-49265 orta	oauthlib: oauthlib: Timing attack vulnerability in PKCE code_verifier/code_challenge comparison allows authorization code recovery	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-49264 orta	oauthlib: oauthlib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-102832 orta	jupyterlab: JupyterLab: Improper trust assignment via active document switching	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-102699 orta	xen: xen: Denial of Service via integer underflow during cache flushing	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-102672 orta	Electron: Local race condition in Squirrel.Mac update installation on macOS	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-101899 orta	axios: Axios: Information disclosure via improper CIDR proxy bypass handling	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-77375 orta	SFTPGo: Denial of service via malformed SSH channel request	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-106108 orta	Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-103028 orta	SFTPGo source-side file-pattern filter bypass during copy operations	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-102603 orta	Gotify: Insufficiently Protected Password Change endpoint	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-102342 orta	ammonia: ammonia: Stored cross-site scripting via SVG animation elements	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-77362 orta	obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-77361 orta	obsidian-tc : Symlink read-ACL scope bypass via lexical path checks	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109964 orta	ImageMagick: ImageMagick: Arbitrary code execution via crafted PICT image	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109956 orta	nltk: nltk: Arbitrary file write via path traversal in WekaClassifier	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109955 orta	hono: hono: Security bypass via double path decoding	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109953 orta	FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected crede ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109952 orta	The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selecte ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109951 orta	FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerab ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109950 orta	FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vu ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109949 orta	freerdp: FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109948 orta	freerdp: FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109947 orta	FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource al ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109946 orta	FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109945 orta	FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerabili ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109944 orta	freerdp: FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109943 orta	freerdp: FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109942 orta	freerdp: FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109941 orta	FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerabili ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109940 orta	freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109939 orta	freerdp: FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109938 orta	freerdp: FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109680 orta	freerdp: FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109679 orta	FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109678 orta	freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109677 orta	freerdp: FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109676 orta	FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulne ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109833 orta	gnome-remote-desktop: Heap buffer overflow in gnome-remote-desktop VNC TLS peek buffer handling allows remote denial of service	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109783 orta	Mitigation bypass in the File Handling component. This vulnerability w ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109782 orta	Mitigation bypass in the File Handling component. This vulnerability w ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109781 orta	Denial-of-service in the Printing: Output component. This vulnerabilit ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109780 orta	Mitigation bypass in the DOM: Core & HTML component. This vulnera ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109779 orta	Race condition in the Networking: DNS component. This vulnerabili ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109778 orta	Privilege escalation in the WebExtensions component. This vulnerabilit ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109777 orta	Information disclosure in the Storage: IndexedDB component. This vulne ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109776 orta	Race condition in the XPCOM component. This vulnerability was fixed in ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109775 orta	Denial-of-service in the WebRTC component. This vulnerability was fixe ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.