CVE-2026-101781 yüksek mysql: mysql: Server takeover via Group Replication GCS en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-101775 yüksek mysql: mysql: unauthorized data modification via replication component en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-101773 yüksek mysql: MySQL: Denial of Service via the Group Replication plugin en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-101772 yüksek mysql: mysql: unauthorized server takeover en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-101771 yüksek mysql: mysql: complete service takeover via network access en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-101770 yüksek mysql: mysql: System takeover via client programs en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-101679 yüksek mysql: mysql: Denial of Service via multiple protocols en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-111758 yüksek markdown-it: markdown-it: Denial of Service via unclosed link reference definitions en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113869 yüksek thunderbird: thunderbird: Use-after-free via S/MIME decryption password prompt en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113725 yüksek virtualenv: virtualenv: arbitrary code execution via crafted environment name en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113723 yüksek virtualenv: virtualenv: Arbitrary code execution via malicious prompt text en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113722 yüksek virtualenv: virtualenv: arbitrary code execution via improperly quoted interpreter paths in script launchers en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113709 yüksek github.com/argoproj/argo-cd/v3: github.com/argoproj/argo-cd/v2: argo-cd: argocd: A Kustomize Helm config home can run commands in the repo-server en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113708 yüksek github.com/argoproj/argo-cd/v3: github.com/argoproj/argo-cd/v2: argo-cd: A Kustomize remote ref can run commands in the repo-server en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-111767 yüksek @modelcontextprotocol/sdk: @modelcontextprotocol/sdk: Unauthorized cross-session task access via taskStore en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113711 yüksek ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113672 yüksek argo-cd: github.com/argoproj/argo-cd/v3: github.com/argoproj/argo-cd/v2: argo-cd: A Jsonnet import can read files from the repo-server en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113666 yüksek ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-111756 yüksek follow-redirects: follow-redirects: Information disclosure via array-formatted headers during cross-origin redirects en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113658 yüksek ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-111765 yüksek A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-111764 yüksek A2A Java SDK has a fail-open default task authorization en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-95168 yüksek thefuck: thefuck: Arbitrary code execution via insecure rule loading en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-112943 yüksek launch-editor: launch-editor: Arbitrary code execution via improper argument escaping on Windows en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-112942 yüksek launch-editor: launch-editor: Command injection via improper file path validation en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-101296 yüksek tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realm en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-105941 yüksek kroxylicious-kms-provider-azure-key-vault-kms: Streams for Apache Kafka Kroxylicious: Azure Key Vault SSRF exfiltrates bearer token via untrusted EDEK vaultName en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-105949 yüksek cruise-control: Streams for Apache Kafka Cruise Control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-105312 yüksek console-operator: Streams for Apache Kafka Console: tenant-controlled container image on ClusterRole-bound pod enables namespace-to-cluster privilege escalation en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-105311 yüksek console-operator: Streams for Apache Kafka Console: cross-namespace KafkaUser Secret exfiltration via confused deputy en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-113356 yüksek dokuwiki: dokuwiki: Arbitrary code execution via insecure draft deserialization en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-112177 yüksek ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8 en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-86922 yüksek webkitgtk: WebKitGTK: Arbitrary code execution via type confusion en geç 24 Eki 2026 07:11 UTC derlemesi 20 Eki 2026 CVE-2026-53995 yüksek mlflow: mlflow: Arbitrary file write via FileStore path traversal en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112896 yüksek pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112895 yüksek pillow: pillow: Denial of service via crafted PDF during append operations en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112894 yüksek pillow: pillow: Denial of Service via crafted multi-frame image conversion en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112893 yüksek pillow: Pillow: Denial of Service via invalid pointer free during font rendering en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112892 yüksek pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112406 yüksek pillow: pillow: Denial of Service via infinite loop during PDF page rewriting en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112405 yüksek pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112404 yüksek pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112402 yüksek pillow: pillow: Denial of service via double free during image transformation en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112400 yüksek pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112399 yüksek pillow: pillow: Denial of service via crafted APNG image en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112397 yüksek pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112392 yüksek pillow: pillow: Denial of Service via zero-size images in rank filters en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112261 yüksek gimp: gimp: use-after-free in XCF loader via PROP_SELECTED_PATH en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112257 yüksek gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033) en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 CVE-2026-112391 yüksek pillow: Pillow: Denial of Service via unbounded recursion in PDF parser en geç 24 Eki 2026 07:11 UTC derlemesi 19 Eki 2026 