Report an incident

Patch Released

The Surnet Threat Intelligence team compiles critical vulnerabilities and active attack campaigns that may affect organisations in Türkiye and publishes them with recommended actions. Filter by severity, system type and patch status.

4 results
Patch Released

File-upload flaw in a popular form plugin

A widely used form plugin for an open-source CMS lets attackers bypass extension checks and upload a web shell.

CVE ID
CVE-2026-30415
Severity
High
CVSS score
8.8 /10
Published
18 October 2026
Patch status
Patch available
View
Patch Released

DLL side-loading in a corporate VPN client

The VPN client installer loads a DLL from an untrusted directory, enabling local privilege escalation.

CVE ID
CVE-2026-26391
Severity
Medium
CVSS score
6.7 /10
Published
8 October 2026
Patch status
Patch available
View
Patch Released

SSRF in enterprise wiki software

The preview feature lets server-side requests reach the cloud metadata service.

CVE ID
CVE-2026-31590
Severity
High
CVSS score
8.1 /10
Published
27 September 2026
Patch status
Patch available
View

Suspect something? We are right here

For ransomware, account takeover or suspected data leaks call our 24/7 emergency response line.

Report incident +90 212 555 71 30
WhatsApp +90 212 555 71 30 iletisim@surnet.com.tr