<![CDATA[DayBreach — Kritik Güvenlik Açıkları (High & Critical)]]> https://enginteksut.com.tr = 7.0) güvenlik açıklarının RSS akışı.]]> tr-TR Sun, 11 Oct 2026 17:46:02 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108883: JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig]]> https://enginteksut.com.tr/cve/CVE-2026-108883 https://enginteksut.com.tr/cve/CVE-2026-108883 Sun, 11 Oct 2026 14:33:43 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108865: AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize]]> https://enginteksut.com.tr/cve/CVE-2026-108865 https://enginteksut.com.tr/cve/CVE-2026-108865 Sun, 11 Oct 2026 13:26:10 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108863: Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface]]> https://enginteksut.com.tr/cve/CVE-2026-108863 https://enginteksut.com.tr/cve/CVE-2026-108863 Sun, 11 Oct 2026 13:26:09 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108860: BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key]]> https://enginteksut.com.tr/cve/CVE-2026-108860 https://enginteksut.com.tr/cve/CVE-2026-108860 Sun, 11 Oct 2026 13:26:07 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108859: mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering]]> https://enginteksut.com.tr/cve/CVE-2026-108859 https://enginteksut.com.tr/cve/CVE-2026-108859 Sun, 11 Oct 2026 13:26:06 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108853: UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/app]]> https://enginteksut.com.tr/cve/CVE-2026-108853 https://enginteksut.com.tr/cve/CVE-2026-108853 Sun, 11 Oct 2026 13:26:02 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108699: hyper-mcp through 0.8.3 Improper Signature Verification of OCI WebAssembly Plugins]]> https://enginteksut.com.tr/cve/CVE-2026-108699 https://enginteksut.com.tr/cve/CVE-2026-108699 Sun, 11 Oct 2026 13:25:59 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108698: hyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race Condition]]> https://enginteksut.com.tr/cve/CVE-2026-108698 https://enginteksut.com.tr/cve/CVE-2026-108698 Sun, 11 Oct 2026 13:25:58 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108913: CVE-2026-108913]]> https://enginteksut.com.tr/cve/CVE-2026-108913 https://enginteksut.com.tr/cve/CVE-2026-108913 Sun, 11 Oct 2026 13:16:31 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108760: LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces]]> https://enginteksut.com.tr/cve/CVE-2026-108760 https://enginteksut.com.tr/cve/CVE-2026-108760 Sun, 11 Oct 2026 12:19:57 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108759: mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistralrs-code-exec]]> https://enginteksut.com.tr/cve/CVE-2026-108759 https://enginteksut.com.tr/cve/CVE-2026-108759 Sun, 11 Oct 2026 12:19:56 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108758: Easy!Appointments through 1.6.0 Authorization Bypass via booking/register Endpoint]]> https://enginteksut.com.tr/cve/CVE-2026-108758 https://enginteksut.com.tr/cve/CVE-2026-108758 Sun, 11 Oct 2026 12:19:55 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108757: Nexting pinclaw through 0.3.0 Missing Authentication via POST /pinclaw/send]]> https://enginteksut.com.tr/cve/CVE-2026-108757 https://enginteksut.com.tr/cve/CVE-2026-108757 Sun, 11 Oct 2026 12:19:55 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108753: Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose]]> https://enginteksut.com.tr/cve/CVE-2026-108753 https://enginteksut.com.tr/cve/CVE-2026-108753 Sun, 11 Oct 2026 12:19:52 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108746: Vearch 3.5.2 through 3.5.9 Incorrect Authorization via Role.HasPermissionForResources]]> https://enginteksut.com.tr/cve/CVE-2026-108746 https://enginteksut.com.tr/cve/CVE-2026-108746 Sun, 11 Oct 2026 12:19:48 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108744: pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop Sync]]> https://enginteksut.com.tr/cve/CVE-2026-108744 https://enginteksut.com.tr/cve/CVE-2026-108744 Sun, 11 Oct 2026 12:19:46 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108740: GoatCounter through 2.7.0 Privilege Escalation via /user/pref Mass Assignment]]> https://enginteksut.com.tr/cve/CVE-2026-108740 https://enginteksut.com.tr/cve/CVE-2026-108740 Sun, 11 Oct 2026 12:19:44 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108739: OpenAgents Workspace through launcher-v1.0.17 Unauthenticated Credential Exposure via /v1/workspaces]]> https://enginteksut.com.tr/cve/CVE-2026-108739 https://enginteksut.com.tr/cve/CVE-2026-108739 Sun, 11 Oct 2026 12:19:44 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108737: Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose Confusion]]> https://enginteksut.com.tr/cve/CVE-2026-108737 https://enginteksut.com.tr/cve/CVE-2026-108737 Sun, 11 Oct 2026 12:19:42 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108729: Corteza through 2024.9.10 Unauthenticated Attachment Access via Compose Attachment Endpoints]]> https://enginteksut.com.tr/cve/CVE-2026-108729 https://enginteksut.com.tr/cve/CVE-2026-108729 Sun, 11 Oct 2026 12:19:37 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108728: Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook]]> https://enginteksut.com.tr/cve/CVE-2026-108728 https://enginteksut.com.tr/cve/CVE-2026-108728 Sun, 11 Oct 2026 12:19:36 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108718: Rill 0.77.0 through 0.90.5 OAuth Missing Authorization via Dynamic Client Registration]]> https://enginteksut.com.tr/cve/CVE-2026-108718 https://enginteksut.com.tr/cve/CVE-2026-108718 Sun, 11 Oct 2026 12:19:30 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108714: MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket]]> https://enginteksut.com.tr/cve/CVE-2026-108714 https://enginteksut.com.tr/cve/CVE-2026-108714 Sun, 11 Oct 2026 12:19:27 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108710: NornicDB through 1.4.1 Missing Authorization via Vector Search Endpoints]]> https://enginteksut.com.tr/cve/CVE-2026-108710 https://enginteksut.com.tr/cve/CVE-2026-108710 Sun, 11 Oct 2026 12:19:24 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108905: Use of hard-coded credentials]]> https://enginteksut.com.tr/cve/CVE-2026-108905 https://enginteksut.com.tr/cve/CVE-2026-108905 Sun, 11 Oct 2026 12:16:56 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108902: Path traversal]]> https://enginteksut.com.tr/cve/CVE-2026-108902 https://enginteksut.com.tr/cve/CVE-2026-108902 Sun, 11 Oct 2026 12:16:56 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-108576: TOZED X300 IPPingDiagnostics process_ping os command injection]]> https://enginteksut.com.tr/cve/CVE-2026-108576 https://enginteksut.com.tr/cve/CVE-2026-108576 Sun, 11 Oct 2026 12:15:13 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-96227: Piotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File Upload]]> https://enginteksut.com.tr/cve/CVE-2026-96227 https://enginteksut.com.tr/cve/CVE-2026-96227 Sun, 11 Oct 2026 06:00:19 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-91829: Subscribe to Comments < 2.3.3 - Reflected XSS via 'ref' Parameter]]> https://enginteksut.com.tr/cve/CVE-2026-91829 https://enginteksut.com.tr/cve/CVE-2026-91829 Sun, 11 Oct 2026 06:00:19 GMT <![CDATA[[KRİTİK/YÜKSEK] CVE-2026-89302: Post Voting System <= 1.0 - Unauthenticated SQLi via 'id' Parameter]]> https://enginteksut.com.tr/cve/CVE-2026-89302 https://enginteksut.com.tr/cve/CVE-2026-89302 Sun, 11 Oct 2026 06:00:18 GMT