{"id":2206,"date":"2026-09-21T17:30:00","date_gmt":"2026-09-21T14:30:00","guid":{"rendered":"https:\/\/narhost.com\/destek\/?p=2206"},"modified":"2026-09-21T17:30:00","modified_gmt":"2026-09-21T14:30:00","slug":"sunucuda-guvenlik-acigi-tespit-edilirse-ne-yapmali","status":"publish","type":"post","link":"https:\/\/narhost.com\/destek\/sunucuda-guvenlik-acigi-tespit-edilirse-ne-yapmali\/","title":{"rendered":"Sunucuda G\u00fcvenlik A\u00e7\u0131\u011f\u0131 Tespit Edilirse Ne Yap\u0131lmal\u0131"},"content":{"rendered":"<p class=\"kb-dogrulama\">Son g\u00f6zden ge\u00e7irme: Eyl\u00fcl 2026 \u00b7 Ubuntu 24.04 ve AlmaLinux 9 resm\u00ee dok\u00fcman\u0131na g\u00f6re<\/p>\n<div id=\"hizli-cozum\" class=\"ai-box ai-box--cozum\">\n<p class=\"ai-box-title\">H\u0131zl\u0131 \u00e7\u00f6z\u00fcm<\/p>\n<p><strong>Sunucuda g\u00fcvenlik a\u00e7\u0131\u011f\u0131<\/strong> tespit edilirse s\u0131ra bellidir: \u00f6nce etkilenen hizmeti izole edin, kan\u0131t\u0131 bozmadan durumu kaydedin, a\u00e7\u0131k paketi g\u00fcncel s\u00fcr\u00fcme \u00e7ekin, ard\u0131ndan t\u00fcm parola ve anahtarlar\u0131 yenileyin.<\/p>\n<ol>\n<li>A\u00e7\u0131\u011f\u0131n bulundu\u011fu hizmeti ge\u00e7ici durdurun ya da g\u00fcvenlik duvar\u0131yla eri\u015fimini k\u0131s\u0131tlay\u0131n.<\/li>\n<li>G\u00fcnl\u00fckleri ve mevcut durumu de\u011fi\u015ftirmeden bir kenara al\u0131n (kan\u0131t).<\/li>\n<li>Paketi\/uygulamay\u0131 g\u00fcncelleyin: <code>sudo apt update &amp;&amp; sudo apt upgrade<\/code> (AlmaLinux&#8217;ta <code>sudo dnf upgrade --security<\/code>).<\/li>\n<li>T\u00fcm y\u00f6netici, veritaban\u0131 ve SSH parolalar\u0131n\u0131 s\u0131f\u0131rlay\u0131n, a\u00e7\u0131k oturumlar\u0131 kapat\u0131n.<\/li>\n<li>Kapsam belirsizse destek talebi a\u00e7\u0131n; y\u00f6netimsiz sunucuda karar\u0131 siz verirsiniz.<\/li>\n<\/ol>\n<\/div>\n<table class=\"kb-uyg\">\n<tr>\n<th>Panel<\/th>\n<td>Yok (VPS\/VDS terminali)<\/td>\n<\/tr>\n<tr>\n<th>Sistem<\/th>\n<td>Y\u00f6netimsiz VPS\/VDS (root m\u00fc\u015fteride)<\/td>\n<\/tr>\n<tr>\n<th>Yetki<\/th>\n<td>root ya da sudo yetkili kullan\u0131c\u0131<\/td>\n<\/tr>\n<tr>\n<th>Narhost \u00fcr\u00fcn\u00fc<\/th>\n<td><a href=\"https:\/\/narhost.com\/vps-sunucu\" title=\"VPS Sunucu - Narhost\">VPS Sunucu<\/a><\/td>\n<\/tr>\n<\/table>\n<div class=\"kb-once\">\n<p class=\"label\">Ba\u015flamadan \u00f6nce<\/p>\n<ul>\n<li>Sunucuya konsol ya da SSH ile root\/sudo eri\u015fiminiz olmal\u0131.<\/li>\n<li>A\u00e7\u0131\u011f\u0131n kayna\u011f\u0131n\u0131 bilin: i\u015fletim sistemi paketi mi, bir uygulama (WordPress, panel, k\u00fct\u00fcphane) mi, yoksa zay\u0131f bir parola m\u0131.<\/li>\n<li>M\u00fcdahaleden \u00f6nce m\u00fcmk\u00fcnse bir snapshot (anl\u0131k g\u00f6r\u00fcnt\u00fc) al\u0131n; yama bir \u015feyi bozarsa geri d\u00f6nebilirsiniz.<\/li>\n<li>VPS\/VDS y\u00f6netimsizdir: g\u00fcncelleme, yap\u0131land\u0131rma ve g\u00fcvenlik duvar\u0131 sizin sorumlulu\u011funuzdad\u0131r; Narhost altyap\u0131 ve a\u011f katman\u0131n\u0131 sa\u011flar.<\/li>\n<\/ul>\n<\/div>\n<h2>Sunucuda G\u00fcvenlik A\u00e7\u0131\u011f\u0131 Nedir, Neyi Tehdit Eder<\/h2>\n<p>G\u00fcvenlik a\u00e7\u0131\u011f\u0131 (vulnerability), bir yaz\u0131l\u0131mdaki yetkisiz eri\u015fime ya da veri s\u0131z\u0131nt\u0131s\u0131na yol a\u00e7abilen kusurdur. Bu; g\u00fcncellenmemi\u015f bir i\u015fletim sistemi paketi, eski bir uygulama s\u00fcr\u00fcm\u00fc, yanl\u0131\u015f dosya izni, a\u00e7\u0131kta kalm\u0131\u015f bir y\u00f6netim portu ya da zay\u0131f bir parola olabilir. Y\u00f6netimsiz bir sunucuda bu kusurlar\u0131 kapatmak sizin i\u015finizdir; tarama ara\u00e7lar\u0131 ya da resm\u00ee g\u00fcvenlik duyurular\u0131 a\u00e7\u0131\u011f\u0131 bildirir, kapatma karar\u0131n\u0131 ve yamay\u0131 siz uygulars\u0131n\u0131z.<\/p>\n<p>A\u00e7\u0131k hen\u00fcz s\u00f6m\u00fcr\u00fclmediyse hedef, g\u00fcncelleme ile riski kapatmakt\u0131r. A\u00e7\u0131k zaten kullan\u0131lm\u0131\u015fsa (dosyalar de\u011fi\u015fmi\u015f, tan\u0131mad\u0131\u011f\u0131n\u0131z s\u00fcre\u00e7ler \u00e7al\u0131\u015f\u0131yorsa) olay bir &#8220;ihlal&#8221;e d\u00f6n\u00fc\u015f\u00fcr ve s\u0131ra de\u011fi\u015fir: \u00f6nce izolasyon ve kan\u0131t, sonra temizlik. \u0130ki durumu ay\u0131ran \u015fey g\u00fcnl\u00fcklerdir; bu y\u00fczden hi\u00e7bir \u015feyi silmeden \u00f6nce durumu kaydedersiniz.<\/p>\n<figure class=\"nh-sema\"><img src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/09\/sunucuda-guvenlik-acigi-tespit-edilirse-ne-yapmali-sema-narhost.webp\" alt=\"Sunucuda g\u00fcvenlik a\u00e7\u0131\u011f\u0131 tespit edilince izole etme, kan\u0131t koruma, yama ve parola yenileme ak\u0131\u015f\u0131\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>\u00d6nce hizmeti izole edin, kan\u0131t\u0131 koruyun, yamay\u0131 uygulay\u0131n, ard\u0131ndan t\u00fcm kimlik bilgilerini yenileyin.<\/figcaption><\/figure>\n<\/p>\n<h2>Ad\u0131m Ad\u0131m: Sunucuda G\u00fcvenlik A\u00e7\u0131\u011f\u0131 M\u00fcdahalesi<\/h2>\n<h3>1. Hizmeti \u0130zole Edin<\/h3>\n<ol class=\"kb-adimlar\">\n<li>A\u00e7\u0131\u011f\u0131n bulundu\u011fu servisi durdurun ya da eri\u015fimini g\u00fcvenlik duvar\u0131nda kapat\u0131n; b\u00f6ylece a\u00e7\u0131k, siz yamay\u0131 uygularken kullan\u0131lamaz.\n<pre><code>sudo systemctl stop uygulama.service\nsudo ufw deny 8080\/tcp<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: servis durur ya da ilgili port d\u0131\u015far\u0131ya kapan\u0131r, a\u00e7\u0131k ge\u00e7ici olarak eri\u015filemez.<\/p>\n<\/li>\n<\/ol>\n<h3>2. Kan\u0131t\u0131 Koruyun<\/h3>\n<ol class=\"kb-adimlar\">\n<li>Sistem ve uygulama g\u00fcnl\u00fcklerini oldu\u011fu gibi bir yere kopyalay\u0131n; \u00e7al\u0131\u015fan s\u00fcre\u00e7leri ve a\u011f ba\u011flant\u0131lar\u0131n\u0131 kaydedin. Bu, a\u00e7\u0131\u011f\u0131n kullan\u0131l\u0131p kullan\u0131lmad\u0131\u011f\u0131n\u0131 sonradan anlamak i\u00e7in gerekir.\n<pre><code>sudo cp -a \/var\/log \/root\/olay-yedegi-2026-09\nps aux &gt; \/root\/surecler.txt\nsudo ss -tulpn &gt; \/root\/baglantilar.txt<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: g\u00fcnl\u00fckler ve durum dosyalar\u0131 de\u011fi\u015fmeden saklan\u0131r.<\/p>\n<\/li>\n<\/ol>\n<h3>3. Yamay\u0131 Uygulay\u0131n<\/h3>\n<ol class=\"kb-adimlar\">\n<li>A\u00e7\u0131k i\u015fletim sistemi paketindeyse da\u011f\u0131t\u0131m\u0131n <a href=\"https:\/\/ubuntu.com\/security\/notices\" title=\"Ubuntu g\u00fcvenlik duyurular\u0131 (USN) resmi sayfas\u0131\" target=\"_blank\" rel=\"noopener\">g\u00fcvenlik g\u00fcncellemelerini<\/a> kurun; uygulamadaysa uygulamay\u0131 g\u00fcncel kararl\u0131 s\u00fcr\u00fcme \u00e7ekin. Ubuntu&#8217;da:\n<pre><code>sudo apt update\nsudo apt upgrade<\/code><\/pre>\n<p>Yaln\u0131z g\u00fcvenlik g\u00fcncellemelerini kurmak isterseniz AlmaLinux&#8217;ta <code>sudo dnf upgrade --security<\/code> kullan\u0131n.<\/p>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: a\u00e7\u0131k paket, kusurun giderildi\u011fi s\u00fcr\u00fcme y\u00fckselir.<\/p>\n<\/li>\n<\/ol>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>A\u00e7\u0131\u011f\u0131n kullan\u0131ld\u0131\u011f\u0131na dair belirti (de\u011fi\u015fmi\u015f dosyalar, bilinmeyen kullan\u0131c\u0131lar, giden spam) varsa yaln\u0131z yama yetmez. Bu durumda parolalar\u0131 yenileyip sistemi temiz bir yedekten kurmak, ele ge\u00e7irilmi\u015f bir sistemi elle temizlemekten daha g\u00fcvenlidir.<\/p>\n<\/div>\n<h3>4. Kimlik Bilgilerini Yenileyin<\/h3>\n<ol class=\"kb-adimlar\">\n<li>Yama sonras\u0131 t\u00fcm parolalar\u0131 ve anahtarlar\u0131 de\u011fi\u015ftirin: root\/sudo parolas\u0131, veritaban\u0131 kullan\u0131c\u0131lar\u0131, uygulama y\u00f6neticileri ve SSH anahtarlar\u0131. A\u00e7\u0131k oturumlar\u0131 kapat\u0131n.\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: eski parola ya da anahtar ele ge\u00e7irilmi\u015f olsa bile art\u0131k ge\u00e7ersizdir.<\/p>\n<\/li>\n<\/ol>\n<h2>Do\u011frulama<\/h2>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p>A\u00e7\u0131k paketin s\u00fcr\u00fcm\u00fc g\u00fcncel, izole etti\u011finiz hizmet g\u00fcvenli yap\u0131land\u0131rmayla yeniden a\u00e7\u0131k, g\u00fcnl\u00fcklerde yeni \u015f\u00fcpheli eri\u015fim yok ve t\u00fcm parolalar yenilenmi\u015fse m\u00fcdahale tamamlanm\u0131\u015ft\u0131r. Ayn\u0131 a\u00e7\u0131\u011f\u0131n ba\u015fka bir pakette olmad\u0131\u011f\u0131n\u0131 g\u00f6rmek i\u00e7in bilinen a\u00e7\u0131klar\u0131n kayd\u0131n\u0131 tutan <a href=\"https:\/\/nvd.nist.gov\/vuln\" title=\"NVD - Ulusal G\u00fcvenlik A\u00e7\u0131\u011f\u0131 Veritaban\u0131\" target=\"_blank\" rel=\"noopener\">ulusal a\u00e7\u0131k veritaban\u0131n\u0131 (NVD)<\/a> ve da\u011f\u0131t\u0131m\u0131n g\u00fcvenlik duyurular\u0131n\u0131 izlemeye devam edin.<\/p>\n<\/div>\n<h2>H\u00e2l\u00e2 \u00c7\u00f6z\u00fclmediyse<\/h2>\n<ul>\n<li><strong>A\u00e7\u0131\u011f\u0131n kullan\u0131ld\u0131\u011f\u0131ndan \u015f\u00fcpheleniyorsunuz.<\/strong> Dosya de\u011fi\u015fikliklerini <a href=\"https:\/\/narhost.com\/destek\/hacklenen-site-zararli-dosya-temizleme\/\" title=\"Hacklenen sitede zararl\u0131 dosya temizleme - Narhost Destek\">zararl\u0131 dosya temizleme<\/a> kart\u0131yla denetleyin.<\/li>\n<li><strong>Deneme trafi\u011fi paneldeki siteye geliyor.<\/strong> Payla\u015f\u0131ml\u0131 tarafta <a href=\"https:\/\/narhost.com\/destek\/cpanelde-ip-engelleme\/\" title=\"cPanel&#039;de IP engelleme - Narhost Destek\">IP engelleme<\/a> ve <a href=\"https:\/\/narhost.com\/destek\/imunify360-brute-force-koruma\/\" title=\"Imunify360 brute force koruma - Narhost Destek\">Imunify360 katman\u0131n\u0131<\/a> kullan\u0131n.<\/li>\n<li><strong>Root parolas\u0131n\u0131 da yenilemeniz gerekiyor.<\/strong><a href=\"https:\/\/narhost.com\/destek\/sunucu-root-sifresi-nasil-sifirlanir\/\" title=\"Sunucu root \u015fifresi nas\u0131l s\u0131f\u0131rlan\u0131r - Narhost Destek\">Sunucu root \u015fifresi s\u0131f\u0131rlama<\/a> ad\u0131mlar\u0131n\u0131 izleyin.<\/li>\n<li><strong>Kapsamdan emin de\u011filsiniz.<\/strong><a href=\"https:\/\/narhost.com\/destek\/web-sitesi-ve-sunucu-guvenligi-rehberi\/\" title=\"Web sitesi ve sunucu g\u00fcvenli\u011fi rehberi - Narhost Destek\">G\u00fcvenlik rehberini<\/a> izleyip destek talebi a\u00e7\u0131n.<\/li>\n<\/ul>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost deste\u011fi<\/p>\n<p>Talebinize sunucunuzun IP adresini, a\u00e7\u0131\u011f\u0131n kayna\u011f\u0131n\u0131 (paket, uygulama ya da parola), fark etti\u011finiz saati ve uygulad\u0131\u011f\u0131n\u0131z ad\u0131mlar\u0131 ekleyin; ekibimiz altyap\u0131 ve a\u011f taraf\u0131n\u0131 denetler.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/submitticket.php\" title=\"Narhost destek talebi a\u00e7\">Destek talebi a\u00e7<\/a><\/div>\n<div class=\"kb-ilgili\">\n<p class=\"label\">Sonraki ad\u0131mlar<\/p>\n<ul>\n<li><a href=\"https:\/\/narhost.com\/destek\/guvenlik-duvari\/\" title=\"G\u00fcvenlik destek kategorisi - Narhost\">G\u00fcvenlik destek kategorisi<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/web-sitesi-ve-sunucu-guvenligi-rehberi\/\" title=\"Web sitesi ve sunucu g\u00fcvenli\u011fi rehberi - Narhost Destek\">Web sitesi ve sunucu g\u00fcvenli\u011fi rehberi<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/ssh-portu-nasil-degistirilir\/\" title=\"SSH portu nas\u0131l de\u011fi\u015ftirilir - Narhost Destek\">SSH portunu de\u011fi\u015ftirme<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/windows-sunucuda-saldiri-var-ne-yapmali\/\" title=\"Windows sunucuda sald\u0131r\u0131 var ne yapmal\u0131 - Narhost Destek\">Windows sunucuda sald\u0131r\u0131 durumunda<\/a><\/li>\n<\/ul>\n<\/div>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>Sunucuda g\u00fcvenlik a\u00e7\u0131\u011f\u0131 bulunca \u00f6nce mi yama yapmal\u0131y\u0131m yoksa m\u0131 izole etmeliyim?<\/h3>\n<p>A\u00e7\u0131k hen\u00fcz kullan\u0131lmad\u0131ysa g\u00fcncelleme \u00e7o\u011fu zaman yeterlidir. Ancak s\u00f6m\u00fcr\u00fclm\u00fc\u015f olabilece\u011finden \u015f\u00fcpheleniyorsan\u0131z \u00f6nce izole edip kan\u0131t\u0131 korumak gerekir; yama, de\u011fi\u015fen dosyalar\u0131 geri getirmez ve sald\u0131rgan\u0131n a\u00e7t\u0131\u011f\u0131 arka kap\u0131y\u0131 kapatmaz.<\/p>\n<h3>A\u00e7\u0131\u011f\u0131 Narhost kapat\u0131r m\u0131?<\/h3>\n<p>VPS\/VDS y\u00f6netimsizdir: sunucu i\u00e7indeki g\u00fcncelleme, yap\u0131land\u0131rma ve g\u00fcvenlik duvar\u0131 sizin sorumlulu\u011funuzdad\u0131r. Narhost altyap\u0131, a\u011f ve Layer 3\/4 a\u011f korumas\u0131 sa\u011flar; a\u011f ya da altyap\u0131 kaynakl\u0131 bir sorun varsa destek talebiyle inceler.<\/p>\n<h3>Ayn\u0131 a\u00e7\u0131\u011f\u0131n tekrar \u00e7\u0131kmas\u0131n\u0131 nas\u0131l \u00f6nlerim?<\/h3>\n<p>G\u00fcvenlik g\u00fcncellemelerini d\u00fczenli kurun, kullanmad\u0131\u011f\u0131n\u0131z servisleri ve portlar\u0131 kapat\u0131n, g\u00fc\u00e7l\u00fc parola ve anahtar kullan\u0131n ve da\u011f\u0131t\u0131m\u0131n\u0131z\u0131n g\u00fcvenlik duyurular\u0131n\u0131 takip edin. Otomatik g\u00fcvenlik g\u00fcncellemesi a\u00e7mak, g\u00f6zden ka\u00e7an yamalar\u0131 azalt\u0131r.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Y\u00f6netimsiz VPS\/VDS&#8217;te bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 bulununca izlenecek s\u0131ra: etkilenen hizmeti izole etme, g\u00fcnl\u00fckleri kan\u0131t olarak koruma, i\u015fletim sistemi ya da uygulama yamas\u0131n\u0131 uygulama ve t\u00fcm parola ile anahtarlar\u0131 yenileme; a\u00e7\u0131k s\u00f6m\u00fcr\u00fclm\u00fc\u015fse temiz yedekten kurma karar\u0131.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[79,13],"tags":[179],"class_list":["post-2206","post","type-post","status-publish","format-standard","hentry","category-guvenlik-duvari","category-vps-server","tag-guvenlik-2"],"meta_box":[],"_links":{"self":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2206","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/comments?post=2206"}],"version-history":[{"count":1,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2206\/revisions"}],"predecessor-version":[{"id":2317,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2206\/revisions\/2317"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/media?parent=2206"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/categories?post=2206"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/tags?post=2206"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}