← Ana sayfa

CISA KEV Listesi

Bilinen istismar edilmiş zafiyetler.

API
CVEBaşlıkVendorSeverityCVSSEPSSYayın
CVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPalo Alto NetworksYüksek--29.05.2026
CVE-2026-48027Nx Console Embedded Malicious Code VulnerabilityNxYüksek--27.05.2026
CVE-2026-45321TanStack Unspecified VulnerabilityTanStackYüksek--27.05.2026
CVE-2026-8398Daemon Tools Lite Embedded Malicious Code VulnerabilityDaemonYüksek--27.05.2026
CVE-2026-48172LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityLiteSpeedYüksek--26.05.2026
CVE-2026-9082Drupal Core SQL Injection VulnerabilityDrupalYüksek--22.05.2026
CVE-2025-34291Langflow Origin Validation Error VulnerabilityLangflowYüksek--21.05.2026
CVE-2026-34926Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityTrend MicroYüksek--21.05.2026
CVE-2008-4250Microsoft Windows Buffer Overflow VulnerabilityMicrosoftYüksek--20.05.2026
CVE-2009-1537Microsoft DirectX NULL Byte Overwrite VulnerabilityMicrosoftYüksek--20.05.2026
CVE-2009-3459Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityAdobeYüksek--20.05.2026
CVE-2010-0249Microsoft Internet Explorer Use-After-Free VulnerabilityMicrosoftYüksek--20.05.2026
CVE-2010-0806Microsoft Internet Explorer Use-After-Free VulnerabilityMicrosoftYüksek--20.05.2026
CVE-2026-41091Microsoft Defender Link Following VulnerabilityMicrosoftYüksek--20.05.2026
CVE-2026-45498Microsoft Defender Denial of Service VulnerabilityMicrosoftYüksek--20.05.2026
CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting VulnerabilityMicrosoftYüksek--15.05.2026
CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCiscoYüksek--14.05.2026
CVE-2026-42208BerriAI LiteLLM SQL Injection VulnerabilityBerriAIYüksek--08.05.2026
CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityIvantiYüksek--07.05.2026
CVE-2026-0300Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityPalo Alto NetworksYüksek--06.05.2026
CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityLinuxYüksek--01.05.2026
CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityWebProsYüksek--30.04.2026
CVE-2024-1708ConnectWise ScreenConnect Path Traversal VulnerabilityConnectWiseYüksek--28.04.2026
CVE-2026-32202Microsoft Windows Protection Mechanism Failure VulnerabilityMicrosoftYüksek--28.04.2026
CVE-2025-29635D-Link DIR-823X Command Injection VulnerabilityD-LinkYüksek--24.04.2026
CVE-2024-7399Samsung MagicINFO 9 Server Path Traversal VulnerabilitySamsungYüksek--24.04.2026
CVE-2024-57728SimpleHelp Path Traversal VulnerabilitySimpleHelp Yüksek--24.04.2026
CVE-2024-57726SimpleHelp Missing Authorization VulnerabilitySimpleHelp Yüksek--24.04.2026
CVE-2026-39987Marimo Remote Code Execution VulnerabilityMarimoYüksek--23.04.2026
CVE-2026-33825Microsoft Defender Insufficient Granularity of Access Control VulnerabilityMicrosoftYüksek--22.04.2026
CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityCiscoYüksek--20.04.2026
CVE-2026-20133Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCiscoYüksek--20.04.2026
CVE-2025-2749Kentico Xperience Path Traversal VulnerabilityKenticoYüksek--20.04.2026
CVE-2023-27351PaperCut NG/MF Improper Authentication VulnerabilityPaperCutYüksek--20.04.2026
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilitySynacorYüksek--20.04.2026
CVE-2026-20128Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityCiscoYüksek--20.04.2026
CVE-2025-32975Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityQuestYüksek--20.04.2026
CVE-2024-27199JetBrains TeamCity Relative Path Traversal VulnerabilityJetBrainsYüksek--20.04.2026
CVE-2026-34197Apache ActiveMQ Improper Input Validation VulnerabilityApacheYüksek--16.04.2026
CVE-2009-0238Microsoft Office Remote Code ExecutionMicrosoftYüksek--14.04.2026
CVE-2026-32201Microsoft SharePoint Server Improper Input Validation VulnerabilityMicrosoftYüksek--14.04.2026
CVE-2012-1854Microsoft Visual Basic for Applications Insecure Library Loading VulnerabilityMicrosoftYüksek--13.04.2026
CVE-2025-60710Microsoft Windows Link Following VulnerabilityMicrosoftYüksek--13.04.2026
CVE-2023-21529Microsoft Exchange Server Deserialization of Untrusted Data VulnerabilityMicrosoftYüksek--13.04.2026
CVE-2023-36424Microsoft Windows Out-of-Bounds Read VulnerabilityMicrosoftYüksek--13.04.2026
CVE-2020-9715Adobe Acrobat Use-After-Free VulnerabilityAdobeYüksek--13.04.2026
CVE-2026-21643Fortinet FortiClient EMS SQL Injection VulnerabilityFortinetYüksek--13.04.2026
CVE-2026-34621Adobe Acrobat and Reader Prototype Pollution VulnerabilityAdobeYüksek--13.04.2026
CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityIvantiYüksek--08.04.2026
CVE-2026-35616Fortinet FortiClient EMS Improper Access Control VulnerabilityFortinetYüksek--06.04.2026