Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-95502
orta
grafana: grafana: Denial of Service via oversized Git Sync responses01:25 UTC derlemesi
CVE-2026-107819
orta
mariadb-connector-c: mariadb-connector-c: Information disclosure via improper TLS hostname verification01:25 UTC derlemesi
CVE-2026-107817
orta
mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json plugin01:25 UTC derlemesi
CVE-2026-106061
orta
gimp: GIMP: heap buffer over-read in X cursor (XMC) thumbnail loader on crafted file01:25 UTC derlemesi
CVE-2026-80048
orta
sssd: sssd-kcm: Local Denial of Service via excessive memory preallocation01:25 UTC derlemesi
CVE-2026-104046
orta
sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests01:25 UTC derlemesi
CVE-2026-106063
orta
GIMP: GIMP: heap buffer overflow in DICOM export on oversized image dimensions01:25 UTC derlemesi
CVE-2026-104047
orta
sssd: sssd: Information disclosure via query injection in Entra ID lookups01:25 UTC derlemesi
CVE-2026-98359
orta
kernel: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed01:25 UTC derlemesi
CVE-2026-98169
orta
kernel: smb: client: fix potential OOB read in smb3_enum_snapshots()01:25 UTC derlemesi
CVE-2026-92821
orta
sssd: SSSD: Access control bypass via premature LDAP access rule evaluation01:25 UTC derlemesi
CVE-2026-104038
orta
sssd: sssd: Denial of Service via missing SID extension in certificate mapping01:25 UTC derlemesi
CVE-2026-104036
orta
sssd: sssd: Denial of service via out-of-bounds write in NFS idmap plugin01:25 UTC derlemesi
CVE-2026-104034
orta
sssd: SSSD: Denial of Service via use-after-free in KCM ticket renewal01:25 UTC derlemesi
CVE-2026-104032
orta
sssd: sssd: Denial of Service via unprivileged autofs cache invalidation01:25 UTC derlemesi
CVE-2026-104031
orta
sssd: SSSD: Denial of Service via memory exhaustion in autofs responder01:25 UTC derlemesi
CVE-2026-104030
orta
sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing01:25 UTC derlemesi
CVE-2026-103531
orta
opensc: opensc: Arbitrary code execution via stack-based buffer overflow in card-setcos01:25 UTC derlemesi
CVE-2026-103242
orta
rpm: Heap-based buffer overflow write in hex2binv() via a mistyped RPMTAG_FILESIGNATURES header tag01:25 UTC derlemesi
CVE-2026-95520
orta
rpm: rpm: integer overflow in iterReadArchiveNext() leads to heap-based buffer overflow when parsing untrusted RPM packages01:25 UTC derlemesi
CVE-2026-98120
orta
kernel: netfs: Fix subreq ref leak01:25 UTC derlemesi
CVE-2026-98119
orta
kernel: netfs: break unbuffered write when netfs_alloc_subrequest() fails01:25 UTC derlemesi
CVE-2026-88383
orta
libical: libical: Denial of Service via crafted iCalendar property parsing01:25 UTC derlemesi
CVE-2026-49919
orta
freetype: Integer overflow in FreeType tt_face_colr_blend_layer() leads to heap buffer overflow during COLR font rendering01:25 UTC derlemesi
CVE-2026-116196
orta
github.com/rclone/rclone: rclone: Information disclosure via HTTP redirects in B2 backend19:14 UTC derlemesi
CVE-2026-116195
orta
github.com/rclone/rclone: rclone: Path traversal via link suffix trimming19:14 UTC derlemesi
CVE-2026-116194
orta
github.com/rclone/rclone: rclone: Sensitive data disclosure via CSRF in pCloud OAuth callback19:14 UTC derlemesi
CVE-2026-116192
orta
github.com/rclone/rclone: rclone: Information disclosure via Server-Side Request Forgery in rc-serve19:14 UTC derlemesi
CVE-2026-116187
orta
github.com/rclone/rclone: rclone: Cross-tenant upload tampering via authorization bypass in S3 authentication proxy19:14 UTC derlemesi
CVE-2026-80785
orta
kernel: fbdev: serialize mode sysfs access with lock_fb_info()19:14 UTC derlemesi
CVE-2026-74690
orta
kernel: s390/ism: Fix UAF of sba and ieq during ism_dev_exit()19:14 UTC derlemesi
CVE-2026-63862
orta
kernel: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found19:14 UTC derlemesi
CVE-2026-116470
orta
keycloak-services: keycloak-services: SCIM user listing endpoint returns full PII without per-user VIEW authorization check19:14 UTC derlemesi
GHSA-x65r-p6hf-94hv
orta
Missing authorization on Avo association show endpoint exposes related records19:14 UTC derlemesi
openSUSE-SU-2026:12259-1
orta
MozillaFirefox-158.0.1-1.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:12260-1
orta
buildpacks-cli-0.40.10-1.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:12263-1
orta
nvidia-open-driver-G06-signed-check-580.196.07-1.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:12265-1
orta
python313-wyoming-1.10.2-1.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:12266-1
orta
libvips-devel-8.18.7-1.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:22163-1
orta
Security update for rabbitmq-server19:14 UTC derlemesi
openSUSE-SU-2026:22165-1
orta
Security update for libmodplug19:14 UTC derlemesi
CVE-2026-112768
orta
Parse Server before 8.6.99 and 9.x before 9.10.3 Information Disclosure via User Update14:38 UTC derlemesi
CVE-2026-116181
orta
vllm: vllm: Denial of Service via unvalidated stop token identifiers07:15 UTC derlemesi
CVE-2026-116180
orta
vllm: vLLM: Denial of Service via uninitialized log probability tensors07:15 UTC derlemesi
CVE-2026-116178
orta
vllm: vLLM: Denial of Service via inconsistent multimodal metadata07:15 UTC derlemesi
CVE-2026-116175
orta
vllm: vllm: Denial of Service via audio decompression bomb in chat completions07:15 UTC derlemesi
CVE-2026-116174
orta
vllm: vllm: Denial of Service via invalid prompt token IDs in gRPC service07:15 UTC derlemesi
CVE-2026-116173
orta
vllm: vllm: Denial of Service via excessive candidate token IDs in gRPC interface07:15 UTC derlemesi
CVE-2026-116172
orta
vllm: vLLM: Denial of Service via improper input validation in Rust gRPC interface07:15 UTC derlemesi
CVE-2026-116155
orta
ImageMagick: ImageMagick: Denial of Service via crafted XMP profile memory leak07:15 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.