Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-112946
düşük		vite: Vite: Information disclosure via improper module path handling07:11 UTC derlemesi
CVE-2026-112941
düşük		filelock: filelock: Unauthorized file write via lock directory replacement07:11 UTC derlemesi
CVE-2026-112912
düşük		filelock: filelock: Information disclosure via symbolic link following in SoftFileLock07:11 UTC derlemesi
CVE-2026-88041
düşük		tomcat: tomcat: Information disclosure via incomplete HTTP trailer cleanup07:11 UTC derlemesi
CVE-2026-80353
düşük		tomcat: tomcat: Unauthorized socket access via TOCTOU race condition07:11 UTC derlemesi
CVE-2026-74049
düşük		tomcat: Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)07:11 UTC derlemesi
CVE-2026-74048
düşük		tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failure07:11 UTC derlemesi
CVE-2026-110725
düşük		fast-uri: fast-uri: Cross-site scripting via unescaped colon in relative URI paths07:11 UTC derlemesi
CVE-2026-110095
düşük		fast-uri: fast-uri: Path traversal via improper relative URI normalization07:11 UTC derlemesi
CVE-2026-111766
düşük		markdown-it: markdown-it: Denial of Service via repeated unterminated inline HTML constructs07:11 UTC derlemesi
CVE-2026-111063
düşük		aiohttp: aiohttp: Information disclosure via unenforced Secure attribute on shared cookies07:11 UTC derlemesi
CVE-2026-112310
düşük		docling-core: docling-core: information disclosure via plain filesystem paths in image references07:11 UTC derlemesi
CVE-2026-112026
düşük		cms: light0011 cms: Information disclosure via weak password hashing07:11 UTC derlemesi
CVE-2026-98860
düşük		kernel: HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request07:11 UTC derlemesi
CVE-2026-98851
düşük		kernel: netfilter: nft_flow_offload: drop flowtable reference on init error path07:11 UTC derlemesi
CVE-2026-98831
düşük		kernel: of/overlay: don't leak fragment references when changeset init fails07:11 UTC derlemesi
CVE-2026-98817
düşük		In the Linux kernel, the following vulnerability has been resolved: A ...07:11 UTC derlemesi
CVE-2026-98784
düşük		kernel: drm/amdgpu/gfx6: fix firmware leak on teardown07:11 UTC derlemesi
CVE-2026-98782
düşük		kernel: drm/mediatek: Fix ovl adaptor platform device leak07:11 UTC derlemesi
CVE-2026-98781
düşük		kernel: drm/mediatek: Fix pdev reference leak in mtk_drm_bind()07:11 UTC derlemesi
CVE-2026-98780
düşük		kernel: drm/amdgpu: fix IP instance memory leak on kobject add failure07:11 UTC derlemesi
CVE-2026-98779
düşük		kernel: drm/amdgpu: fix ACP MFD device leak on init failure07:11 UTC derlemesi
CVE-2026-98771
düşük		kernel: usb: storage: sierra_ms: reject short SWoC info transfers07:11 UTC derlemesi
CVE-2026-98755
düşük		kernel: tty: vcc: zero-initialize control packet in vcc_send_ctl()07:11 UTC derlemesi
CVE-2026-98746
düşük		kernel: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()07:11 UTC derlemesi
CVE-2026-98732
düşük		kernel: Bluetooth: btintel: fix buffer over-read in btintel_hw_error()07:11 UTC derlemesi
CVE-2026-98728
düşük		kernel: tpm: fix off-by-four bounds check in tpm2_get_random()07:11 UTC derlemesi
CVE-2026-98710
düşük		kernel: wifi: iwlegacy: 3945: free EEPROM data on remove07:11 UTC derlemesi
CVE-2026-98697
düşük		kernel: USB: serial: fix dynamic id driver deregistration race07:11 UTC derlemesi
CVE-2026-98692
düşük		kernel: thunderbolt: Make the DP tunnel activation callback mandatory07:11 UTC derlemesi
CVE-2026-98690
düşük		kernel: thunderbolt: Fix domain reference leak when DPRX read is canceled07:11 UTC derlemesi
CVE-2026-98686
düşük		kernel: smb: client: discard post-EOF pagecache when extending a file via zero range07:11 UTC derlemesi
CVE-2026-98685
düşük		kernel: smb: client: discard post-EOF pagecache when extending a file via clone range07:11 UTC derlemesi
CVE-2026-98684
düşük		kernel: smb: client: flush and commit data before querying allocated ranges07:11 UTC derlemesi
CVE-2026-98683
düşük		kernel: smb: client: flush dirty data before zeroing a range07:11 UTC derlemesi
CVE-2026-98682
düşük		kernel: smb: client: drain and invalidate before server-side copy/clone07:11 UTC derlemesi
CVE-2026-98680
düşük		kernel: iio: accel: kionix-kx022a: Prevent memory leak and fix state07:11 UTC derlemesi
CVE-2026-98679
düşük		kernel: iio: accel: kxcjk-1013: reject duplicate event disable07:11 UTC derlemesi
CVE-2026-98675
düşük		kernel: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler07:11 UTC derlemesi
CVE-2026-98671
düşük		kernel: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure07:11 UTC derlemesi
CVE-2026-98668
düşük		kernel: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed07:11 UTC derlemesi
CVE-2026-98661
düşük		kernel: iio: light: rohm-bu27034: Fix infinite delay on error07:11 UTC derlemesi
CVE-2026-98659
düşük		kernel: iio: pressure: rohm-bm1390: Return error when read fails07:11 UTC derlemesi
CVE-2026-98655
düşük		kernel: perf: Require kernel access for text poke events07:11 UTC derlemesi
CVE-2026-98633
düşük		kernel: Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()07:11 UTC derlemesi
CVE-2026-98609
düşük		kernel: drm/virtio: fix object leak when drm_gem_handle_create() fails07:11 UTC derlemesi
CVE-2026-98608
düşük		kernel: drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()07:11 UTC derlemesi
CVE-2026-98607
düşük		kernel: drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()07:11 UTC derlemesi
CVE-2026-98604
düşük		kernel: ovpn: replace bind when learning local endpoint07:11 UTC derlemesi
CVE-2026-98603
düşük		kernel: kernel: Denial of service via race condition in ovpn07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.