Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98857
yüksek
kernel: ipvs: bound LBLCR and LBLC cache growth01:25 UTC derlemesi
CVE-2026-98853
yüksek
kernel: net: gso: limit recursive IP-in-IP segmentation01:25 UTC derlemesi
CVE-2026-98769
yüksek
kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd01:25 UTC derlemesi
CVE-2026-98725
yüksek
kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()01:25 UTC derlemesi
CVE-2026-98718
yüksek
kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state01:25 UTC derlemesi
CVE-2026-98715
yüksek
kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN01:25 UTC derlemesi
CVE-2026-98639
yüksek
kernel: KVM: riscv: Fix NACL hfence entry update order01:25 UTC derlemesi
CVE-2026-98621
yüksek
kernel: net: gue: reject invalid REMCSUM offsets01:25 UTC derlemesi
CVE-2026-98614
yüksek
kernel: sctp: avoid livelock while updating retransmit path01:25 UTC derlemesi
CVE-2026-98466
yüksek
kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-201:25 UTC derlemesi
CVE-2026-110752
yüksek
perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selector01:25 UTC derlemesi
CVE-2026-92262
yüksek
mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.01:25 UTC derlemesi
CVE-2026-85746
yüksek
mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections01:25 UTC derlemesi
CVE-2026-104715
yüksek
cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass01:25 UTC derlemesi
CVE-2026-98417
yüksek
kernel: net: xfrm: reject unrepresentable espintcp transport headers01:25 UTC derlemesi
CVE-2026-86476
yüksek
gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize01:25 UTC derlemesi
CVE-2026-106062
yüksek
gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file01:25 UTC derlemesi
CVE-2019-25777
yüksek
perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment01:25 UTC derlemesi
CVE-2017-20285
yüksek
perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document01:25 UTC derlemesi
CVE-2026-103226
yüksek
ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data01:25 UTC derlemesi
CVE-2026-109411
yüksek
samba: Access control bypass via vfs_ceph_rgw case-insensitive open01:25 UTC derlemesi
GHSA-qpg5-fx6p-8cq3
yüksek
Using port forwarding silently enables server access to the local SSH agent01:25 UTC derlemesi
GHSA-vxj5-fg65-x765
yüksek
net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295)01:25 UTC derlemesi
CVE-2026-116191
yüksek
github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV service19:14 UTC derlemesi
CVE-2026-116189
yüksek
github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass19:14 UTC derlemesi
CVE-2026-68476
yüksek
kernel: ipvs: reload ip header after head reallocation19:14 UTC derlemesi
CVE-2026-14803
yüksek
Mojo::JSON: Mojo::JSON: Denial of Service via unbounded recursion in JSON decoder19:14 UTC derlemesi
GHSA-h7x6-9mqf-vgmx
yüksek
Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning)19:14 UTC derlemesi
GHSA-vxc9-rm8f-p56j
yüksek
Ransack has a memory-exhaustion DoS via unbounded attribute position field in query params19:14 UTC derlemesi
openSUSE-SU-2026:12261-1
yüksek
git-bug-0.11.0-3.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:12262-1
yüksek
istioctl-1.31.3-1.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:12264-1
yüksek
okteto-3.24.1-1.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:22158-1
yüksek
Security update for docker19:14 UTC derlemesi
openSUSE-SU-2026:22159-1
yüksek
Security update for mozilla-nss, MozillaFirefox19:14 UTC derlemesi
openSUSE-SU-2026:22167-1
yüksek
Security update for the Linux Kernel19:14 UTC derlemesi
CVE-2026-116179
yüksek
vllm: vLLM: Denial of Service via video frame limit bypass07:15 UTC derlemesi
CVE-2026-116177
yüksek
vllm: vllm: Denial of Service via unconstrained image decompression07:15 UTC derlemesi
CVE-2026-116176
yüksek
vllm: vllm: Information disclosure via SSRF in X-Request-Id header07:15 UTC derlemesi
CVE-2026-116149
yüksek
ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images07:15 UTC derlemesi
CVE-2026-97206
yüksek
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contain ...01:20 UTC derlemesi
CVE-2026-108985
yüksek
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-boun ...01:20 UTC derlemesi
CVE-2026-99064
yüksek
kernel: cipso: adjust cached option offsets when removing CIPSO19:10 UTC derlemesi
CVE-2026-99056
yüksek
kernel: strparser: make sure __strp_recv isn't running before tearing down the parser19:10 UTC derlemesi
CVE-2026-99032
yüksek
In the Linux kernel, the following vulnerability has been resolved: n ...19:10 UTC derlemesi
CVE-2026-99030
yüksek
In the Linux kernel, the following vulnerability has been resolved: n ...19:10 UTC derlemesi
CVE-2026-99018
yüksek
In the Linux kernel, the following vulnerability has been resolved: r ...19:10 UTC derlemesi
CVE-2026-99013
yüksek
In the Linux kernel, the following vulnerability has been resolved: B ...19:10 UTC derlemesi
CVE-2026-99012
yüksek
In the Linux kernel, the following vulnerability has been resolved: B ...19:10 UTC derlemesi
CVE-2026-99006
yüksek
In the Linux kernel, the following vulnerability has been resolved: d ...19:10 UTC derlemesi
CVE-2026-98982
yüksek
In the Linux kernel, the following vulnerability has been resolved: n ...19:10 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.