Dünyada hər 3 dəqiqədən bir yeni boşluq qeydə alınır.

• CVE-2026-28336KRİTİK9.9—SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentica…
• CVE-2026-109593KRİTİK9.1—An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing se…
• CVE-2026-121260KRİTİK9.1—A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. This issue affects the function loadstring of the file usr/lib/lua/luci/controller/api/…
• CVE-2026-28335YÜKSƏK8.4—SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.
• CVE-2026-28327YÜKSƏK8.2—SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local mac…
• CVE-2026-119675YÜKSƏK8.6—MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafte…
• CVE-2026-115714YÜKSƏK7.4—Improper Certificate Validation (CWE-295) in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat…
• CVE-2026-115294YÜKSƏK7.3—Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to unauthorized resource deletion via Path Traversal…
• CVE-2026-115290YÜKSƏK7.5—Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An unauthenticated attack…
• CVE-2026-73328YÜKSƏK7.2—Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenticated users to upload PHP files via the…
• CVE-2026-65168YÜKSƏK7.0—NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.
• CVE-2026-121561YÜKSƏK7.7—Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read interna…

3194 boşluq · son 7 gün