The Surnet Threat Intelligence team compiles critical vulnerabilities and active attack campaigns that may affect organisations in Türkiye and publishes them with recommended actions. Filter by severity, system type and patch status.
Authentication can be bypassed on the management interface of corporate SSL-VPN gateways; attackers are actively scanning.
CVE-2026-31842Unauthenticated remote code execution on on-premises mail servers; reported in targeted attacks.
CVE-2026-29977A widely used form plugin for an open-source CMS lets attackers bypass extension checks and upload a web shell.
CVE-2026-30415A memory error in a kernel networking subsystem gives a local user root privileges.
CVE-2026-28803The web interface of factory HMI panels does not require authentication by default; no vendor patch yet.
CVE-2026-31120The VPN client installer loads a DLL from an untrusted directory, enabling local privilege escalation.
CVE-2026-26391A masking bug in build logs can expose keys defined as environment variables.
CVE-2026-30022The preview feature lets server-side requests reach the cloud metadata service.
CVE-2026-31590A buffer overflow in the network printer’s print-protocol parser; the device may crash or run attacker code.
CVE-2026-30871For ransomware, account takeover or suspected data leaks call our 24/7 emergency response line.