Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98223
düşük		kernel: mm: filemap: retain mapped dropbehind folios07:11 UTC derlemesi
CVE-2026-98208
düşük		kernel: mmc: sdio_uart: fix xmit_fifo leak when the port table is full07:11 UTC derlemesi
CVE-2026-98203
düşük		kernel: Input: soc_button_array - check btns_desc->package.count07:11 UTC derlemesi
CVE-2026-98202
düşük		kernel: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound07:11 UTC derlemesi
CVE-2026-98191
düşük		kernel: wifi: wlcore: release runtime PM ref on regdomain config failure07:11 UTC derlemesi
CVE-2026-98182
düşük		kernel: wifi: mac80211: refuse to make a monitor active when it has no queue07:11 UTC derlemesi
CVE-2026-98179
düşük		kernel: drm/amdgpu: fix rmmio iounmap skipped on device removal07:11 UTC derlemesi
CVE-2026-98178
düşük		kernel: drm/amdgpu: Skip KFD mapping clear before initialization07:11 UTC derlemesi
CVE-2026-98177
düşük		kernel: drm/amdkfd: Avoid integer underflow in EOP ring size calculation07:11 UTC derlemesi
CVE-2026-98176
düşük		kernel: drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc07:11 UTC derlemesi
GHSA-6688-9rhm-gjv2
düşük		DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes07:11 UTC derlemesi
CVE-2026-105752
düşük		vllm: vLLM: Cross-tenant information disclosure via missing cache salt in tool continuations07:11 UTC derlemesi
CVE-2026-105748
düşük		docling: Docling: Information disclosure via local image file references07:11 UTC derlemesi
CVE-2026-105683
düşük		Ghost: Path Traversal Vulnerability in Ghost ImageSize Service07:11 UTC derlemesi
CVE-2026-105682
düşük		Ghost: Server-Side Request Forgery in Webhook Trigger07:11 UTC derlemesi
CVE-2026-105652
düşük		Ghost: Password Hash Ordering Disclosure in Ghost Admin API07:11 UTC derlemesi
CVE-2026-105326
düşük		cups: cups: argument injection in mailto notifier via notify-recipient-uri07:11 UTC derlemesi
CVE-2026-104994
düşük		github.com/aquasecurity/trivy: Trivy: Information disclosure via directory traversal in Terraform filesystem functions07:11 UTC derlemesi
GHSA-6g2r-675j-hx59
düşük		xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release07:11 UTC derlemesi
CVE-2026-104415
düşük		Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API07:11 UTC derlemesi
CVE-2026-56449
düşük		httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html07:11 UTC derlemesi
CVE-2026-48005
düşük		httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest07:11 UTC derlemesi
CVE-2026-47360
düşük		httpd: httpd: Information disclosure via session cookie leakage during internal redirects07:11 UTC derlemesi
CVE-2026-42356
düşük		httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects07:11 UTC derlemesi
GHSA-wf3x-273g-mvxv
düşük		devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated07:11 UTC derlemesi
CVE-2026-94220
düşük		Apache APISIX: session fixation issue in feishu-auth and dingtalk-auth plugin07:11 UTC derlemesi
GHSA-p98j-92pf-mc4p
düşük		DOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DOM XSS07:11 UTC derlemesi
CVE-2026-103012
düşük		claude-code: claude-code: Security policy bypass via improper credential prioritization07:11 UTC derlemesi
CVE-2026-102587
düşük		Moodle: user list filters bypass profile field visibility07:11 UTC derlemesi
CVE-2026-102583
düşük		Moodle: incorrect capability check in ai generate image web service07:11 UTC derlemesi
CVE-2026-102330
düşük		chromium-browser: chromium-browser: Incorrect authorization in SiteIsolation07:11 UTC derlemesi
CVE-2026-102314
düşük		chromium-browser: chromium-browser: UI misrepresentation in TabStrip07:11 UTC derlemesi
CVE-2026-102825
düşük		russh: russh: Authentication attempt limit bypass via unenforced maximum authentication attempts07:11 UTC derlemesi
CVE-2026-102822
düşük		russh: russh: Denial of Service via improper MAC negotiation with block ciphers07:11 UTC derlemesi
CVE-2026-95385
düşük		chromium-browser: Inappropriate implementation in PlatformIntegration07:11 UTC derlemesi
CVE-2026-95380
düşük		chromium-browser: Type confusion in V807:11 UTC derlemesi
CVE-2026-95368
düşük		chromium-browser: Incorrect authorization in DevTools07:11 UTC derlemesi
CVE-2026-95367
düşük		chromium-browser: Information leak in DataTransfer07:11 UTC derlemesi
CVE-2026-95364
düşük		chromium-browser: Improper input validation in Passwords07:11 UTC derlemesi
CVE-2026-95361
düşük		chromium-browser: Confused deputy in DevTools07:11 UTC derlemesi
CVE-2026-95352
düşük		chromium-browser: Incorrect authorization in DevTools07:11 UTC derlemesi
CVE-2026-95342
düşük		chromium-browser: Missing authorization in V807:11 UTC derlemesi
CVE-2026-95340
düşük		chromium-browser: Incorrect authorization in PictureInPicture07:11 UTC derlemesi
CVE-2026-95334
düşük		chromium-browser: Incorrect reference resolution in WebProtect07:11 UTC derlemesi
CVE-2026-95328
düşük		chromium-browser: Confused deputy in Mobile07:11 UTC derlemesi
CVE-2026-95327
düşük		chromium-browser: Information leak in Networking07:11 UTC derlemesi
CVE-2026-95326
düşük		chromium-browser: Incomplete cleanup in Bluetooth07:11 UTC derlemesi
CVE-2026-95319
düşük		chromium-browser: Use after free in Printing07:11 UTC derlemesi
CVE-2026-95316
düşük		chromium-browser: Unchecked return value in Performance07:11 UTC derlemesi
CVE-2026-95309
düşük		chromium-browser: UI misrepresentation in Mobile07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.