Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-116260
yüksek
libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive07:13 UTC derlemesi
CVE-2026-104849
yüksek
tinypool: Tinypool: Prototype Pollution Gadget to RCE in run() options07:13 UTC derlemesi
CVE-2024-8928
yüksek
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-8928: php: Erroneous p07:13 UTC derlemesi
CVE-2026-116124
yüksek
libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser01:25 UTC derlemesi
CVE-2026-105483
yüksek
nodejs: nodejs: TLS certificate hostname bypass via fullwidth-digit IP hostnames01:25 UTC derlemesi
CVE-2026-55888
yüksek
xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames01:25 UTC derlemesi
CVE-2026-110354
yüksek
haproxy: haproxy: Denial of Service via specially crafted HTTP/1.1 chunked request01:25 UTC derlemesi
CVE-2026-110353
yüksek
haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frame01:25 UTC derlemesi
CVE-2026-98869
yüksek
kernel: bpf: Infer zext_dst based on static register liveness analysis01:25 UTC derlemesi
CVE-2023-7356
yüksek
kernel: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID01:25 UTC derlemesi
CVE-2026-111943
yüksek
crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates01:25 UTC derlemesi
CVE-2026-113812
yüksek
perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates01:25 UTC derlemesi
CVE-2025-71436
yüksek
raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling01:25 UTC derlemesi
CVE-2026-112396
yüksek
pillow: pillow: arbitrary code execution via heap use-after-free during TIFF encoding01:25 UTC derlemesi
CVE-2026-112258
yüksek
gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels01:25 UTC derlemesi
CVE-2026-112395
yüksek
pillow: pillow: Information disclosure via crafted tiled TIFF image01:25 UTC derlemesi
CVE-2026-112394
yüksek
pillow: pillow: Information disclosure via out-of-bounds read in raw decoders01:25 UTC derlemesi
CVE-2026-98857
yüksek
kernel: ipvs: bound LBLCR and LBLC cache growth01:25 UTC derlemesi
CVE-2026-98853
yüksek
kernel: net: gso: limit recursive IP-in-IP segmentation01:25 UTC derlemesi
CVE-2026-98769
yüksek
kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd01:25 UTC derlemesi
CVE-2026-98725
yüksek
kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()01:25 UTC derlemesi
CVE-2026-98718
yüksek
kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state01:25 UTC derlemesi
CVE-2026-98715
yüksek
kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN01:25 UTC derlemesi
CVE-2026-98639
yüksek
kernel: KVM: riscv: Fix NACL hfence entry update order01:25 UTC derlemesi
CVE-2026-98621
yüksek
kernel: net: gue: reject invalid REMCSUM offsets01:25 UTC derlemesi
CVE-2026-98614
yüksek
kernel: sctp: avoid livelock while updating retransmit path01:25 UTC derlemesi
CVE-2026-98466
yüksek
kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-201:25 UTC derlemesi
CVE-2026-110752
yüksek
perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selector01:25 UTC derlemesi
CVE-2026-92262
yüksek
mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.01:25 UTC derlemesi
CVE-2026-85746
yüksek
mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections01:25 UTC derlemesi
CVE-2026-104715
yüksek
cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass01:25 UTC derlemesi
CVE-2026-98417
yüksek
kernel: net: xfrm: reject unrepresentable espintcp transport headers01:25 UTC derlemesi
CVE-2026-86476
yüksek
gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize01:25 UTC derlemesi
CVE-2026-106062
yüksek
gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file01:25 UTC derlemesi
CVE-2019-25777
yüksek
perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment01:25 UTC derlemesi
CVE-2017-20285
yüksek
perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document01:25 UTC derlemesi
CVE-2026-103226
yüksek
ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data01:25 UTC derlemesi
CVE-2026-109411
yüksek
samba: Access control bypass via vfs_ceph_rgw case-insensitive open01:25 UTC derlemesi
GHSA-qpg5-fx6p-8cq3
yüksek
Using port forwarding silently enables server access to the local SSH agent01:25 UTC derlemesi
GHSA-vxj5-fg65-x765
yüksek
net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295)01:25 UTC derlemesi
CVE-2026-116191
yüksek
github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV service19:14 UTC derlemesi
CVE-2026-116189
yüksek
github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass19:14 UTC derlemesi
CVE-2026-68476
yüksek
kernel: ipvs: reload ip header after head reallocation19:14 UTC derlemesi
CVE-2026-14803
yüksek
Mojo::JSON: Mojo::JSON: Denial of Service via unbounded recursion in JSON decoder19:14 UTC derlemesi
GHSA-h7x6-9mqf-vgmx
yüksek
Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning)19:14 UTC derlemesi
GHSA-vxc9-rm8f-p56j
yüksek
Ransack has a memory-exhaustion DoS via unbounded attribute position field in query params19:14 UTC derlemesi
openSUSE-SU-2026:12261-1
yüksek
git-bug-0.11.0-3.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:12262-1
yüksek
istioctl-1.31.3-1.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:12264-1
yüksek
okteto-3.24.1-1.1 on GA media19:14 UTC derlemesi
openSUSE-SU-2026:22158-1
yüksek
Security update for docker19:14 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.