M
Üretici güvenlik profili1 aktif sömürülen CVE
maven
Ürün portföyü, yama kanıtları ve sömürü sinyalleri tek güvenlik karnesinde
Veriler CVE Programı, NVD, CISA KEV ve üretici güvenlik bültenlerinden birleştirilir.
Toplam CVE423
Kritik74
CISA KEV1
Public exploit57
Yama oranı%55
Ort. CVSS7.2
12 aylık açık hızı
0
2
3
2
4
7
12
134
67
75
70
22
CVE KEV
CVE önem dağılımı
423toplam CVE
Kritik74 (17%)
Yüksek176 (42%)
Orta161 (38%)
Düşük10 (2%)
Belirsiz2 (0%)
Yama ve sömürü görünümü
%55
Doğrulanmış yama
%0
CISA KEV
%13
Public exploit
230Yama var
1Kısmi
3Geçici çözüm
0Üretici: yama yok
189Bilinmiyor
Son güvenlik açıkları
9.3
CVE-2026-107726
Hazelcast: Arbitrary member memory access by low-privileged client
H
Yama durumu bilinmiyorEPSS %0
8.7
CVE-2026-107725
Hazelcast: Authorization bypass in IMap Predicates API
H
Yama durumu bilinmiyorEPSS %0
6.8
CVE-2026-107226
AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS
M
Yama durumu bilinmiyor
5.9
CVE-2026-107285
AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel
A
Yama durumu bilinmiyorEPSS %0
3.7
CVE-2026-107283
AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source
A
Yama durumu bilinmiyorEPSS %0
9.4
CVE-2026-107282
AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host
A
Yama durumu bilinmiyorEPSS %0
6.9
CVE-2026-107280
AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk
A
Yama durumu bilinmiyorEPSS %0
8.7
CVE-2026-107231
AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext
A
Yama durumu bilinmiyorEPSS %0
7.4
CVE-2026-107230
AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins
A
Yama durumu bilinmiyorEPSS %0
6.8
CVE-2026-107228
AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)
A
Yama durumu bilinmiyorEPSS %0