CVE-2026 records published in March 2026
This page lists the 5,228 CVE-2026 records published in March 2026, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists nine of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2026 list filters these records by severity or signal.
- Critical
- 63612.2% of these records
- Listed in CISA KEV
- 90.2% of these records
- Reported exploited
- 160.3% of these records
- Detection signal
- 811.5% of these records
- Exploit code
- 1663.2% of these records
- Actionable vendor fix
- 3,80772.8% of these records
Figures as of 2026-10-24 13:48 UTC. Records published in March 2026 have had from about seven months to about eight months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2026-34887 | Kubio AI Page Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34881 | OpenStack Glance is affected by server-side request forgery (SSRF) | 5.0CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34784 | Parse Platform Parse Server streaming file download trigger improper authorization | 8.2CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-34740 | AVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL Validation | 6.5CNA v3.1 | 0.4% | 2026-03-31 | |
| CVE-2026-34739 | AVideo: Reflected XSS via Unescaped ip parameter in User_Location testIP.php | 6.1CNA v3.1 | 0.3% | 2026-03-31 | |
| CVE-2026-34738 | AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus request parameter | 4.3CNA v3.1 | 0.3% | 2026-03-31 | |
| CVE-2026-34737 | AVideo: Arbitrary Stripe Subscription Cancellation via Debug endpoint and retrieveSubscriptions Bug | 6.5CNA v3.1 | 0.3% | 2026-03-31 | |
| CVE-2026-34733 | AVideo: Unauthenticated file deletion via PHP Operator Precedence Bug in CLI Guard | 6.5CNA v3.1 | 0.4% | 2026-03-31 | |
| CVE-2026-34732 | AVideo: Missing authentication in CreatePlugin list.json.php template affects 21 endpoints | 5.3CNA v3.1 | 0.4% | 2026-03-31 | |
| CVE-2026-34731 | AVideo: Unauthenticated Live Stream Termination via RTMP Callback on_publish_done.php | 7.5CNA v3.1 | 0.6% | 2026-03-31 | |
| CVE-2026-34716 | AVideo: DOM XSS via Unsanitized Display Name in WebSocket Call Notification | 6.4CNA v3.1 | 0.3% | 2026-03-31 | |
| CVE-2026-34613 | AVideo: CSRF on Plugin Enable/Disable endpoint allows Disabling Security plugins | 6.5CNA v3.1 | 0.3% | 2026-03-31 | |
| CVE-2026-34611 | AVideo: CSRF on emailAllUsers.json.php enables Mass Phishing Email to All Users | 6.5CNA v3.1 | 0.2% | 2026-03-31 | |
| CVE-2026-34605 | SiYuan: Reflected XSS | 8.6CNA v4.0 | 0.6% | 2026-03-31 | NucleiFix |
| CVE-2026-34595 | Parse Platform Parse Server LiveQuery subscriptions type confusion | 5.3CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34586 | PdfDing: Shared PDF Expiration, Max Views, and Deletion Bypass via Serve/Download endpoints | 6.5CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34585 | SiYuan: Stored XSS in imported .sy.zip content leads to arbitrary command execution | 8.6CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34574 | parse-community parse-server parse Server: Session field immutability bypass via falsy-value guard | 5.3CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34573 | parse-server has GraphQL complexity validator exponential fragment traversal DoS | 8.2CNA v4.0 | 0.9% | 2026-03-31 | Fix |
| CVE-2026-34556 | InternationalColorConsortium iccDEV out-of-bounds read | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34555 | iccDEV: SBO in CIccTagFixedNum::GetValues | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34554 | iccDEV: HBO in CIccApplyCmmSearch::costFunc | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34553 | International Color Consortium iccDEV CLUT dumping denial of service | 4.0CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34552 | InternationalColorConsortium iccDEV null pointer dereference | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34551 | iccDEV: NPD in CIccTagLut16::Write | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34550 | InternationalColorConsortium iccDEV incorrect numeric conversion | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34549 | International Color Consortium iccDEV profile parsing undefined behavior | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34548 | International Color Consortium iccDEV XML conversion utility incorrect numeric conversion | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34547 | International Color Consortium iccDEV profile dump utility undefined behavior | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34546 | International Color Consortium iccDEV TIFF image handling divide by zero | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34542 | iccDEV: SBO in CIccCalculatorFunc::Apply | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34541 | International Color Consortium iccDEV profile connection conditions null pointer dereference | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34540 | International Color Consortium iccDEV profile dump utility vulnerability | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34539 | iccDEV: HBO in CTiffImg::WriteLine | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34537 | InternationalColorConsortium iccDEV undefined behavior | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34536 | International Color Consortium iccDEV profile calculator stack overflow | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34535 | iccDEV: SEGV in CIccTagArray::Cleanup | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34534 | iccDEV: HBO in CIccMpeSpectralMatrix::Describe | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34533 | International Color Consortium iccDEV profile calculator vulnerability | 6.2CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34532 | parse-server has cloud function validator bypass via prototype chain traversal | 9.1CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-34506 | OpenClaw Sender Allowlist Bypass in Microsoft Teams plugin via Route Allowlist Configuration | 2.3CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34505 | OpenClaw Webhook Rate Limiting Bypass via Pre-Authentication Secret Validation | 6.9CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34504 | OpenClaw server-side request forgery via Unguarded Image Download in fal Provider | 6.9CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34503 | OpenClaw Incomplete WebSocket Session Termination on Device Removal and Token Revocation | 8.6CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-34453 | SiYuan: Unauthenticated access to Password-Protected Bookmarks via /API/bookmark/getBookmark | 7.5CNA v3.1 | 1.5% | 2026-03-31 | NucleiFix |
| CVE-2026-34452 | Claude SDK for Python: Memory Tool Path Validation race condition allows sandbox escape | 5.8CNA v4.0 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-34451 | Claude SDK for TypeScript: Memory Tool Path Validation allows sandbox escape to Sibling Directories | 6.3CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34450 | Claude SDK for Python: Insecure default File Permissions in Local Filesystem Memory tool | 4.8CNA v4.0 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34449 | SiYuan: Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet injection | 9.7CNA v3.1 | 0.8% | 2026-03-31 | Fix |
| CVE-2026-34448 | B3LOG SiYuan Attribute View cover rendering stored cross-site scripting | 9.1CNA v3.1 | 0.7% | 2026-03-31 | Fix |
| CVE-2026-34443 | FreeScout: SSRF protection bypass via broken CIDR check in checkIpByMask | 6.9CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34442 | FreeScout: Host header injection leading to External Resource Loading and open redirect in FreeScout | 5.4CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34441 | cpp-httplib static file handler HTTP request smuggling | 4.8CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34406 | APTRS: Privilege escalation via mass assignment of is_superuser in User Edit endpoint | 9.4CNA v4.0 | 0.8% | 2026-03-31 | Fix |
| CVE-2026-34405 | Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes | 6.1CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34404 | Nuxt OG Image vulnerable to DoS via image generation | 6.9CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-34401 | Microsoft XmlNotepad XML Notepad: XML external entity injection | 6.5CNA v3.1 | 1.4% | 2026-03-31 | Fix |
| CVE-2026-34400 | alerta alerta-server has potential SQL injection vulnerability in Query String Syntax (q=) API | 6.9CNA v4.0 | 0.6% | 2026-03-31 | Fix |
| CVE-2026-34396 | AVideo: Stored XSS via Unescaped Plugin Configuration Values in Admin Panel | 6.1CNA v3.1 | 0.3% | 2026-03-31 | |
| CVE-2026-34395 | AVideo: Mass User PII Disclosure via missing authorization in YPTWallet users.json.php | 6.5CNA v3.1 | 0.4% | 2026-03-31 | |
| CVE-2026-34394 | AVideo: CSRF on Admin Plugin Configuration enables Payment Credential Hijacking | 8.1CNA v3.1 | 0.3% | 2026-03-31 | |
| CVE-2026-34384 | Admidio: Missing CSRF Protection on Registration Approval Actions | 4.5CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34383 | Admidio: CSRF and Form Validation Bypass in Inventory Item Save via `imported` parameter | 4.3CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34382 | Admidio: Missing CSRF Protection on Custom List Deletion in mylist_function.php | 4.6CNA v3.1 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-34381 | Admidio: Unauthenticated access to Role-Restricted documents via neutralized .htaccess | 7.5CNA v3.1 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-34377 | Zebra has a Consensus failure due to Improper Verification of V5 Transactions | 8.4CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34373 | parse-community parse-server parse Server: GraphQL API endpoint ignores CORS origin restriction | 5.3CNA v4.0 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34372 | Sulu checks fix permissions for subentities endpoints | 5.3CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34367 | InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes field | 7.6CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34366 | InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes field | 7.6CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34365 | InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes field | 7.6CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34363 | Parse Server LiveQuery subscriptions race condition | 8.2CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34361 | HAPI FHIR: Unauthenticated SSRF | 9.3CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34360 | HAPI FHIR: Unauthenticated blind SSRF via /loadIG endpoint enables Internal Network Probing | 5.8CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34359 | HAPI FHIR: Authentication credential leakage | 7.4CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34243 | wenxian GitHub Actions workflow command injection | 9.8CNA v3.1 | 2.8% | 2026-03-31 | Exploit code |
| CVE-2026-34240 | jose vulnerable to untrusted JWK header key acceptance during signature verification | 7.5CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34237 | MCP Java SDK has a Hard-coded Wildcard CORS (Access-Control-Allow-Origin: *) | 6.1CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34235 | PJSIP: Heap OOB read in VPX unpacketizer | 6.9CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-34231 | Slippers: Cross-site scripting (XSS) in `attrs` Template Tag | 6.1CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34227 | Sliver One-Click Remote Access: Insecure CORS and Unauthenticated MCP interface | 5.9CNA v4.0 | 0.5% | 2026-03-31 | Exploit codeFix |
| CVE-2026-34224 | Parse Server multi-factor authentication login race condition | 2.1CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34221 | mikro-orm MikroORM has prototype pollution in Utils.merge | 8.3CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-34220 | mikro-orm MikroORM is vulnerable to SQL injection via specially crafted object | 9.3CNA v4.0 | 0.5% | 2026-03-31 | Exploit codeFix |
| CVE-2026-34219 | Libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow | 8.2CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-34218 | ClearanceKit opfilter policy enforcement privilege escalation | 6.3CNA v4.0 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34215 | parse-community parse-server parse Server: Auth data exposed via verify password endpoint | 8.2CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-34214 | Trino: Iceberg REST catalog static and vended credentials are accessible via query JSON | 7.7CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34210 | mppx has Stripe charge credential replay via missing idempotency check | 6.0CNA v4.0 | 0.6% | 2026-03-31 | Fix |
| CVE-2026-34209 | mppx session close voucher validation vulnerability | 7.5CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34206 | libops captcha-protect captcha Protect: Reflected XSS in challenge page | 6.1CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34204 | MinIO is vulnerable to SSE Metadata injection via Replication headers | 7.1CNA v4.0 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34203 | Nautobot: Management of users via REST API does not apply configured password validators | 2.7CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-34202 | Zebra node crash V5 transaction hash panic (P2P reachable) | 9.2CNA v4.0 | 0.9% | 2026-03-31 | Fix |
| CVE-2026-34200 | Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Port | 7.7CNA v4.0 | 0.6% | 2026-03-31 | Exploit codeFix |
| CVE-2026-34172 | Giskard Agents have server-side template injection | 7.7CNA v4.0 | 0.8% | 2026-03-31 | Fix |
| CVE-2026-34165 | go-git integer underflow | 5.0CNA v3.1 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-34163 | Server-side request forgery via MCP tools endpoint in FastGPT | 7.7CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-34162 | FastGPT: Unauthenticated SSRF via httpTools endpoint leads to Internal API Key Theft | 10.0CNA v3.1 | 0.6% | 2026-03-31 | Fix |
| CVE-2026-34156 | NocoBase affected by sandbox escape to RCE | 10.0CNA v3.1 | 6.8% | 2026-03-31 | NucleiExploit codeFix |
| CVE-2026-34155 | RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB | 7.2CNA v4.0 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34073 | cryptography has incomplete DNS name constraint enforcement on peer names | 1.7CNA v4.0 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34070 | LangChain Core has path traversal vulnerabilites in legacy `load_prompt` functions | 7.5CNA v3.1 | 1.2% | 2026-03-31 | Fix |
| CVE-2026-34060 | Shopify ruby-lsp ruby LSP has arbitrary code execution through branch setting | 7.1CNA v4.0 | 0.6% | 2026-03-31 | Fix |
| CVE-2026-34054 | Microsoft vcpkg OpenSSL Windows build uncontrolled search path element | 7.8CNA v3.1 | 0.6% | 2026-03-31 | Fix |
| CVE-2026-34043 | Serialize JavaScript has CPU exhaustion denial of service via crafted array-like objects | 5.9CNA v3.1 | 0.6% | 2026-03-31 | Fix |
| CVE-2026-34042 | nektos act actions/cache server missing authorization | 8.2CNA v3.1 | 0.6% | 2026-03-31 | Fix |
| CVE-2026-34041 | nektos act set-env and add-path workflow commands vulnerability | 7.7CNA v4.0 | 0.7% | 2026-03-31 | Fix |
| CVE-2026-34040 | Moby: AuthZ plugin bypass with oversized request body | 8.8CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-34036 | Dolibarr Core Discloses Sensitive Data via authenticated local file inclusion in selectobject.php | 6.5CNA v3.1 | 1.5% | 2026-03-31 | NucleiExploit code |
| CVE-2026-33997 | Moby: Off-by-one error in plugin privilege validation | 6.8CNA v3.1 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-33762 | go-git missing validation decoding Index v4 files leads to panic | 2.8CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-33581 | OpenClaw arbitrary file read via mediaUrl and fileUrl parameters | 8.6v3.1 | 0.6% | 2026-03-31 | Fix |
| CVE-2026-33580 | OpenClaw brute force Attack via Missing Rate Limiting on Webhook Shared Secret Authentication | 6.5v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-33579 | OpenClaw privilege escalation via Missing Caller Scope Validation in Device Pair Approval | 9.4CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-33578 | OpenClaw Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser extensions | 4.3v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-33577 | OpenClaw Insufficient Scope Validation in node.pair.approve | 8.6CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-33576 | OpenClaw Unauthorized Media Download via Zalo Channel | 6.9CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-33415 | Discourse: Improper access control in discourse-ai allows Unauthorized Category Content Exposure | 5.1CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-33300 | Discourse category chatables endpoint information disclosure | 5.3CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-33276 | Checkmk XSS in Unified Search via Unescaped Host/Service Names | 8.6CNA v4.0 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-33185 | Discourse: Group SMTP test endpoint susceptible to SSRF | 5.3CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-33074 | Discourse discourse-subscriptions plugin privilege escalation | 6.3CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-33073 | discourse discourse-subscriptions plugin leaking stripe API key in multisite environment | 2.0CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32988 | OpenClaw Sandbox Boundary Bypass via Unvalidated Temporary File Creation | 5.8CNA v4.0 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-32982 | OpenClaw Telegram Bot token exposure in Media Fetch Error Logs | 8.7CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-32977 | OpenClaw Sandbox Boundary Bypass via Unanchored writeFile Commit Path | 5.8CNA v4.0 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-32976 | OpenClaw Account-Scoped configWrites Policy Bypass via Channel commands | 7.1CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32971 | OpenClaw Node-Host Approval UI Mismatch allows Execution of Unintended commands | 8.0v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-32970 | OpenClaw Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs | 3.3v3.1 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-32951 | Discourse: Authorization bypass in oneboxer via user-controlled category id | 4.3CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32921 | OpenClaw Script Content Modification via Mutable Operand Binding in system.run | 5.0v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32920 | OpenClaw arbitrary code execution via Auto-Discovery of Workspace plugins | 8.8v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-32917 | OpenClaw remote command injection via Unsanitized iMessage Attachment Paths in SCP | 9.2CNA v4.0 | 3.2% | 2026-03-31 | Fix |
| CVE-2026-32916 | OpenClaw authorization bypass in Plugin Subagent Routes via Synthetic Admin Scopes | 9.8v3.1 | 0.6% | 2026-03-31 | Fix |
| CVE-2026-32734 | baserCMS is vulnerable to cross-site scripting | 7.1CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32727 | SciTokens: Authorization bypass via path traversal in Scope Validation | 8.1CNA v3.1 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-32726 | SciTokens C++: Sibling-path authorization bypass | 8.1CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-32725 | SciTokens C++: Relative path traversal | 8.3CNA v3.1 | 1.0% | 2026-03-31 | Fix |
| CVE-2026-32716 | SciTokens: Authorization bypass via Incorrect Scope Path Prefix Checking | 8.1CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-32714 | SciTokens vulnerable to SQL injection in KeyCache | 9.8CNA v3.1 | 0.6% | 2026-03-31 | Fix |
| CVE-2026-32620 | Discourse: Missing post-level authorization allows whisper metadata disclosure | 5.3CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32619 | Discourse poll feature improper authorization | 6.3CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32618 | Discourse: Unauthorized channel membership inference via excluded_memberships_channel_id | 4.3CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32615 | Discourse category group moderator permissions improper authorization | 5.3CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32607 | Discourse: Stored XSS via unescaped assignee name | 2.1CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32273 | Discourse: XSS on category description update via API | 5.4CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32243 | Discourse: Stored XSS in discourse-ai shared conversations onebox | 5.3CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-32143 | Discourse: Admin-only report can be exported by moderators | 5.3CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-32113 | Discourse: Open redirect via `sso_destination_url` cookie in `enter` | 5.1CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-30940 | baserCMS: Path traversal in theme File API leads to arbitrary file write and RCE | 7.2CNA v3.1 | 1.1% | 2026-03-31 | Fix |
| CVE-2026-30880 | baserCMS: OS command injection vulnerability in installer | 9.2CNA v4.0 | 2.2% | 2026-03-31 | Fix |
| CVE-2026-30879 | baserCMS: Cross-site scripting vulnerability in blog post | 6.9CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-30878 | baserCMS: Mail Form Acceptance Bypass via Public API | 5.3CNA v3.1 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-30877 | baserCMS: OS command injection in the baserCMS Update Functionality | 9.1CNA v3.1 | 2.1% | 2026-03-31 | Fix |
| CVE-2026-30521 | oretnom23 Loan Management System client-side enforcement of server-side security | 6.5v3.1 | 0.3% | 2026-03-31 | |
| CVE-2026-30520 | oretnom23 Loan Management System SourceCodester blind SQL injection | 5.4CISA ADP v3.1 | 0.3% | 2026-03-31 | |
| CVE-2026-30314 | Ridvay Auto-approval Module OS command injection | 9.8CISA ADP v3.1 | 2.2% | 2026-03-31 | |
| CVE-2026-30312 | DSAI-Cline command auto-approval whitelist command injection | 9.8CISA ADP v3.1 | 2.1% | 2026-03-31 | |
| CVE-2026-30311 | Ridvay Auto-approval Module OS command injection | 9.8CISA ADP v3.1 | 2.2% | 2026-03-31 | |
| CVE-2026-30310 | In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands. The description for the former states that commands determined by the model to be safe will be automatically executed, whereas if the model judges a command to be potenti | 9.8CISA ADP v3.1 | 1.0% | 2026-03-31 | |
| CVE-2026-30309 | Tokfinity Infcode OS command injection | 7.8CISA ADP v3.1 | 0.4% | 2026-03-31 | |
| CVE-2026-30290 | Intouchapp Intouch Contacts & Caller ID An arbitrary file write | 8.4CISA ADP v3.1 | 0.2% | 2026-03-31 | |
| CVE-2026-30286 | Funambol Zefiro An arbitrary file write | 9.8CISA ADP v3.1 | 0.8% | 2026-03-31 | |
| CVE-2026-30285 | Zora An arbitrary file write | 9.8CISA ADP v3.1 | 0.8% | 2026-03-31 | |
| CVE-2026-30284 | Uxgroupllc Voice Recorder arbitrary file write | 8.6CISA ADP v3.1 | 0.2% | 2026-03-31 | |
| CVE-2026-30283 | Peaksel Animal Sounds And Ringtones arbitrary file write | 9.8CISA ADP v3.1 | 0.8% | 2026-03-31 | |
| CVE-2026-30282 | Uxgroupllc Cast To TV arbitrary file write | 9.0CISA ADP v3.1 | 0.6% | 2026-03-31 | |
| CVE-2026-30281 | Maru Neo.maru An arbitrary file write | 9.8CISA ADP v3.1 | 0.9% | 2026-03-31 | |
| CVE-2026-30280 | Rareprob video-player An arbitrary file write | 5.3CISA ADP v3.1 | 0.2% | 2026-03-31 | |
| CVE-2026-30279 | Squareapps My Location Squareapps LLC arbitrary file write | 8.4CISA ADP v3.1 | 0.2% | 2026-03-31 | |
| CVE-2026-30278 | Funair Fly Is Fun An arbitrary file write | 9.8CISA ADP v3.1 | 0.8% | 2026-03-31 | |
| CVE-2026-30277 | Triumph-adler Mobile Print PDF Reader App: TA/UTAX arbitrary file write | 8.4CISA ADP v3.1 | 0.2% | 2026-03-31 | |
| CVE-2026-30276 | Deftpdf Document Translator arbitrary file write | 9.8CISA ADP v3.1 | 0.8% | 2026-03-31 | |
| CVE-2026-29870 | agentic-context-engine project versions up to path traversal | 7.6CISA ADP v3.1 | 0.8% | 2026-03-31 | |
| CVE-2026-27854 | PowerDNS DNSdist use-after-free when parsing EDNS options in Lua | 4.8CNA v3.1 | 1.3% | 2026-03-31 | Fix |
| CVE-2026-27853 | PowerDNS DNSdist out-of-bounds write when rewriting large DNS packets | 5.9CNA v3.1 | 1.5% | 2026-03-31 | Fix |
| CVE-2026-27697 | baserCMS: SQL injection vulnerability in blog post | 6.9CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-24165 | NVIDIA BioNeMo Framework deserialization of untrusted data | 7.8CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-24164 | NVIDIA BioNeMo Framework deserialization of untrusted data | 8.8CNA v3.1 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-24154 | NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson Thor OS command injection | 7.6CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-24153 | NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson Thor trust boundary violation | 5.2CNA v3.1 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-24148 | NVIDIA Jetson Xavier Series and Jetson Orin Series insecure default initialization | 8.3CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-24030 | PowerDNS DNSdist unbounded memory allocation for DoQ and DoH3 | 5.3CNA v3.1 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-24029 | PowerDNS DNSdist DNS over HTTPS ACL bypass | 6.5CNA v3.1 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-24028 | PowerDNS DNSdist out-of-bounds read when parsing DNS packets via Lua | 5.3CNA v3.1 | 1.0% | 2026-03-31 | Fix |
| CVE-2026-22569 | Zscaler Client Connector incorrect startup configuration in ZCC | 5.4CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-22561 | Anthropic Claude Desktop uncontrolled search path | 7.8v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-21861 | baserCMS: OS command injection leading to remote code execution (RCE) | 9.1CNA v3.1 | 2.3% | 2026-03-31 | Fix |
| CVE-2026-20915 | Checkmk stored cross-site scripting in Pending Changes sidebar | 8.5CNA v4.0 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-5237 | itsourcecode Payroll Management System parameter manage_user.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-31 | |
| CVE-2026-5236 | Axiomatic Bento4 DSI v1 Ap4Dac4Atom.cpp SkipBits heap-based overflow | 4.8CNA v4.0 | 0.2% | 2026-03-31 | |
| CVE-2026-5235 | Axiomatic Bento4 MP4 File Ap4Dac4Atom.cpp ReadCache heap-based overflow | 4.8CNA v4.0 | 0.2% | 2026-03-31 | |
| CVE-2026-5215 | D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access control | 5.3v3.1 | 1.4% | 2026-03-31 | |
| CVE-2026-5214 | D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow | 8.7CNA v4.0 | 1.2% | 2026-03-31 | |
| CVE-2026-5213 | D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow | 8.7CNA v4.0 | 1.2% | 2026-03-31 | |
| CVE-2026-5212 | D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow | 8.7CNA v4.0 | 1.2% | 2026-03-31 | |
| CVE-2026-5211 | D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow | 8.7CNA v4.0 | 1.2% | 2026-03-31 | |
| CVE-2026-5210 | SourceCodester Leave Application System file inclusion | 6.9CNA v4.0 | 0.5% | 2026-03-31 | |
| CVE-2026-5209 | SourceCodester Leave Application System User Management cross-site scripting | 4.8CNA v4.0 | 0.4% | 2026-03-31 | |
| CVE-2026-5206 | code-projects Simple Gym Management System Payment SQL injection | 5.3CNA v4.0 | 0.3% | 2026-03-31 | |
| CVE-2026-5205 | chatwoot Webhook API trigger.rb Trigger server-side request forgery | 5.3CNA v4.0 | 0.4% | 2026-03-31 | |
| CVE-2026-5204 | Tenda CH22 parameter webtypelibrary formWebTypeLibrary stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-31 | |
| CVE-2026-5203 | CMS Made Simple UserGuide module XML import path traversal | 5.1CNA v4.0 | 0.5% | 2026-03-31 | |
| CVE-2026-5201 | Gdk-Pixbuf: Gdk-Pixbuf: Denial of service | 7.5CNA v3.1 | 1.2% | 2026-03-31 | Exploit codeFix |
| CVE-2026-5198 | code-projects Student Membership System Admin Login index.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-31 | |
| CVE-2026-5197 | code-projects Student Membership System delete_user.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-03-31 | |
| CVE-2026-5196 | code-projects Student Membership System delete_member.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-03-31 | |
| CVE-2026-5195 | code-projects Student Membership System User Registration SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-31 | |
| CVE-2026-5190 | AWS C Event Stream Streaming Decoder stack buffer overflow | 7.7CNA v4.0 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-5186 | Nothings stb Multi-frame GIF file stb_image.h stbi__load_gif_main double free | 4.8CNA v4.0 | 0.2% | 2026-03-31 | |
| CVE-2026-5185 | Nothings stb_image Multi-frame GIF file stb_image.h stbi__gif_load_next heap-based overflow | 4.8CNA v4.0 | 0.2% | 2026-03-31 | |
| CVE-2026-5184 | TRENDnet TEW-713RE setSysAdm command injection | 8.8v3.1 | 8.5% | 2026-03-31 | |
| CVE-2026-5183 | TRENDnet TEW-713RE addRouting sub_421494 command injection | 9.8v3.1 | 8.9% | 2026-03-31 | |
| CVE-2026-5182 | SourceCodester Teacher Record System parameter SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-31 | |
| CVE-2026-5181 | SourceCodester Simple Doctors Appointment System ajax.php unrestricted upload | 5.3CNA v4.0 | 0.3% | 2026-03-31 | |
| CVE-2026-5180 | SourceCodester Simple Doctors Appointment System ajax.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-31 | |
| CVE-2026-5179 | SourceCodester Simple Doctors Appointment System login.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-31 | |
| CVE-2026-5178 | Totolink A3300R cstecgi.cgi setIptvCfg command injection | 8.8v3.1 | 3.6% | 2026-03-31 | Emerging Threats |
| CVE-2026-5177 | Totolink A3300R cstecgi.cgi setWiFiBasicCfg command injection | 8.8v3.1 | 3.6% | 2026-03-31 | |
| CVE-2026-5176 | Totolink A3300R cstecgi.cgi setSyslogCfg command injection | 9.8v3.1 | 3.0% | 2026-03-31 | |
| CVE-2026-5157 | code-projects Online Food Ordering System Order order.php cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-03-31 | |
| CVE-2026-5156 | Tenda CH22 Parameter QuickIndex formQuickIndex stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-31 | |
| CVE-2026-5115 | Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices | 3.6CNA v4.0 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-5087 | Pagi::Middleware::Session::Store::Cookie versions for Perl generates random bytes insecurely | 7.5CISA ADP v3.1 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-4819 | Search Guard audit logs can contain under certain conditions user credentials | 4.9CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-4818 | floragunn Search Guard FLX data stream management missing authorization | 6.8CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-4800 | lodash vulnerable to code injection via `_.template` imports key names | 8.1CNA v3.1 | 2.6% | 2026-03-31 | Exploit codeFix |
| CVE-2026-4799 | Open redirect vulnerability in Search Guard Kibana plugin via manipulated requests | 4.3CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-4794 | Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF | 2.1CNA v4.0 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-4400 | 1millionbot Millie chat insecure direct object reference | 6.5NVD v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-4399 | 1millionbot Millie chat prompt injection | 7.5v3.1 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-4317 | SQL inyection in Umami Software application | 9.3CNA v4.0 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-4267 | Query Monitor WordPress plugin reflected cross-site scripting via request URI | 7.2CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-4146 | Loco Translate WordPress plugin reflected cross-site scripting via update_href parameter | 6.1CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-4020 | Gravity SMTP WordPress plugin unauthenticated sensitive information exposure via REST API | 7.5CNA v3.1 | 2.2% | 2026-03-31 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2026-3881 | Performance Monitor for WordPress unauthenticated blind SSRF | 5.8CISA ADP v3.1 | 0.3% | 2026-03-31 | |
| CVE-2026-3470 | SonicWall Email Security improper input validation | 3.8CISA ADP v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-3469 | SonicWall Email Security improper input validation | 2.7CISA ADP v3.1 | 0.5% | 2026-03-31 | Fix |
| CVE-2026-3468 | SonicWall Email Security cross-site scripting | 4.8CISA ADP v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-3356 | Missing authentication for critical function vulnerability in Anritsu Remote Spectrum Monitor | 9.3CNA v4.0 | 0.6% | 2026-03-31 | |
| CVE-2026-3308 | Artifex Software Inc. *PyMuPDF* MuPDF 'pdf-image.c' in Artifex's integer overflow | 7.8CISA ADP v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-3300 | Everest Forms Pro WordPress plugin unauthenticated remote code execution via Calculation field | 9.8CNA v3.1 | 4.4% | 2026-03-31 | NucleiExploit codeFix |
| CVE-2026-3191 | Minify HTML WordPress plugin cross-site request forgery to plugin settings update | 5.4CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-3139 | User Profile Builder WordPress plugin insecure direct object reference | 4.3CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-3107 | TeamPass stored cross-site scripting | 5.4NVD v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-3106 | TeamPass Blind cross-site scripting | 5.4NVD v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-2950 | lodash vulnerable to prototype pollution via array path bypass in `_.unset` and `_.omit` | 6.5CNA v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2026-2480 | WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-2123 | Privilege escalation vulnerability in Operations Agent | 8.6CNA v4.0 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-1877 | Auto Post Scheduler WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2026-03-31 | |
| CVE-2026-1834 | Ibtana - WordPress Website Builder plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-1797 | Truebooker - Appointment Booking and Scheduler WordPress plugin sensitive information exposure | 5.3CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-1710 | WooPayments WordPress plugin missing authorization unauthenticated plugin settings update | 6.5CNA v3.1 | 0.3% | 2026-03-31 | Fix |
| CVE-2026-1579 | PX4 Autopilot missing authentication for critical function | 9.3CNA v4.0 | 0.9% | 2026-03-31 | |
| CVE-2026-0596 | Command injection in MLflow/MLflow | 7.8NVD v3.1 | 1.3% | 2026-03-31 | Exploit codeFix |
| CVE-2026-0397 | PowerDNS DNSdist information disclosure via CORS misconfiguration | 3.1CNA v3.1 | 0.2% | 2026-03-31 | Fix |
| CVE-2026-0396 | PowerDNS DNSdist HTML injection in the web dashboard | 3.1CNA v3.1 | 0.1% | 2026-03-31 | Fix |
| CVE-2026-34714 | Vim OS command injection | 8.6NVD v3.1 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-34558 | CI4MS: Methods Management Full account takeover for All-Roles and Privilege-Escalation | 9.1CNA v3.1 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-34557 | CI4MS: Permissions Management Full account takeover for All-Roles and Privilege-Escalation | 9.1CNA v3.1 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-34472 | ZTE Zxhn H188A wizard interface information disclosure | 7.1CISA ADP v3.1 | 2.3% | 2026-03-30 | Emerging ThreatsExploit code |
| CVE-2026-33995 | FreeRDP: Possible double free in kerberos_AcceptSecurityContext | 5.3CNA v3.1 | 0.5% | 2026-03-30 | Fix |
| CVE-2026-33987 | FreeRDP: Persistent Cache bmpSize Desync heap OOB write | 7.1CNA v3.1 | 0.1% | 2026-03-30 | Fix |
| CVE-2026-33986 | FreeRDP: H.264 YUV Buffer Dimension Desync heap OOB write | 7.5CNA v3.1 | 0.5% | 2026-03-30 | Fix |
| CVE-2026-33985 | FreeRDP: ClearCodec Glyph Cache Count Desync heap OOB read | 5.9CNA v3.1 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-33984 | FreeRDP: ClearCodec resize_vbar_entry heap OOB write | 7.5CNA v3.1 | 0.7% | 2026-03-30 | Fix |
| CVE-2026-33983 | FreeRDP: Progressive Codec Quant BYTE Underflow UB + CPU DoS | 6.5CNA v3.1 | 0.8% | 2026-03-30 | Fix |
| CVE-2026-33982 | FreeRDP: Persistent Cache Allocator Mismatch heap OOB read | 7.1CNA v3.1 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-33977 | FreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331) | 6.9CNA v4.0 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-33952 | FreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks | 6.0CNA v4.0 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-33643 | Schemahero SQL injection | 7.4CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-33373 | Synacor Zimbra Collaboration Suite cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-33032 | 0xJacky nginx-ui Nginx UI: Unauthenticated MCP endpoint allows Remote Nginx takeover | 9.8CNA v3.1 | 2.5% | 2026-03-30 | Reported exploitedNucleiEmerging ThreatsExploit codeKCV |
| CVE-2026-33030 | 0xJacky nginx-ui Nginx UI: Unencrypted Storage of DNS API Tokens and ACME Private Keys | 8.8CNA v3.1 | 0.4% | 2026-03-30 | |
| CVE-2026-33029 | 0xJacky nginx-ui Nginx UI: DoS via Negative Integer Input in Logrotate Interval | 6.9CNA v4.0 | 0.5% | 2026-03-30 | Fix |
| CVE-2026-33028 | 0xJacky nginx-ui Nginx UI: Race condition leads to Persistent Data Corruption and Service Collapse | 7.1CNA v4.0 | 0.6% | 2026-03-30 | Fix |
| CVE-2026-33027 | 0xJacky Nginx UI configuration path handling path traversal | 6.9CNA v4.0 | 0.5% | 2026-03-30 | Fix |
| CVE-2026-33026 | nginx-ui Backup Restore allows tampering with Encrypted Backups | 9.4CNA v4.0 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-32884 | Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) | 5.9CNA v3.1 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-32883 | Botan: Missing OCSP Response signature verification allows MitM Certificate Revocation Bypass | 5.9CNA v3.1 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-32877 | Botan: Heap buffer over-read in SM2 Decryption via Undersized C3 Hash field | 8.2CNA v3.1 | 0.5% | 2026-03-30 | Fix |
| CVE-2026-32794 | Apache Airflow Provider for Databricks improper certificate validation | 4.8CISA ADP v3.1 | 0.4% | 2026-03-30 | Exploit codeFix |
| CVE-2026-32696 | NanoMQ HTTP authentication null pointer dereference | 3.1CNA v3.1 | 0.6% | 2026-03-30 | Fix |
| CVE-2026-32275 | Tautulli JSONP callback parameter cross-site scripting | 7.4CNA v4.0 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-31946 | OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow | 9.8CNA v3.1 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-31831 | Tautulli: Unauthenticated path traversal in `/newsletter/image/images` endpoint | 8.7CNA v4.0 | 1.9% | 2026-03-30 | NucleiFix |
| CVE-2026-31804 | Tautulli pms_image_proxy endpoint server-side request forgery | 4.0CNA v3.1 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-31799 | Tautulli: SQL injection in get_home_stats API endpoint via unsanitised filter parameters | 4.9CNA v3.1 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-30566 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-30565 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-30564 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-30563 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester stored cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-30562 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester reflected cross-site scripting | 9.3CISA ADP v3.1 | 0.5% | 2026-03-30 | |
| CVE-2026-30561 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-30560 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-30559 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-30558 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-30557 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-30556 | Ahsanriaz26gmailcom Sales and Inventory System SourceCodester reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-30313 | cline code injection | 9.8CISA ADP v3.1 | 2.2% | 2026-03-30 | |
| CVE-2026-30308 | Presidio Hai Build code injection | 9.8CISA ADP v3.1 | 1.0% | 2026-03-30 | |
| CVE-2026-30307 | Roo-Code code injection | 9.8CISA ADP v3.1 | 2.2% | 2026-03-30 | |
| CVE-2026-30306 | Rahmanazhar Sakadev code injection | 9.8CISA ADP v3.1 | 1.0% | 2026-03-30 | |
| CVE-2026-30305 | Orangecat Syntx code injection | 9.8CISA ADP v3.1 | 2.2% | 2026-03-30 | |
| CVE-2026-30082 | IngEstate Server software package list edit page stored cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-30 | Exploit code |
| CVE-2026-30077 | Openairinterface crash | 7.5CISA ADP v3.1 | 0.5% | 2026-03-30 | |
| CVE-2026-29954 | Cloudark Kubeplus argument injection | 7.6CISA ADP v3.1 | 0.4% | 2026-03-30 | |
| CVE-2026-29953 | Schemahero SQL injection | 7.4CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-29925 | Invoice Ninja server-side request forgery | 7.7CISA ADP v3.1 | 0.4% | 2026-03-30 | |
| CVE-2026-29924 | getgrav grav XML external entity injection | 7.6CISA ADP v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-29909 | MRCMS forced browsing | 5.3CISA ADP v3.1 | 0.5% | 2026-03-30 | Exploit code |
| CVE-2026-29872 | Theunwindai Awesome LLM Apps information disclosure | 8.2CISA ADP v3.1 | 0.4% | 2026-03-30 | |
| CVE-2026-29597 | DDSN Interactive Acora CMS file_details.asp file manager endpoint improper access control | 6.5CISA ADP v3.1 | 0.4% | 2026-03-30 | |
| CVE-2026-28528 | BlueKitchen BTstack AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB read / undefined behavior | 4.6v3.1 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-28527 | BlueKitchen BTstack AVRCP Controller GET_PLAYER_APPLICATION_SETTING_*_TEXT Handlers OOB read | 7.3v3.1 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-28526 | BlueKitchen BTstack AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_* Handlers OOB read | 5.7v3.1 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-28505 | Tautulli: RCE via eval sandbox bypass using lambda nested scope to escape co_names whitelist check | 7.5CNA v4.0 | 0.6% | 2026-03-30 | Fix |
| CVE-2026-28228 | OpenOLAT: Server-side template injection (SSTI) in Velocity templates allows remote code execution | 8.8CNA v3.1 | 0.5% | 2026-03-30 | Fix |
| CVE-2026-27599 | CI4MS mail settings fields vulnerability | 4.7CNA v3.1 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-27508 | Smoothwall Express Update 13 reflected XSS in redirect.cgi via URL parameter | 6.1v3.1 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-27018 | Gotenberg: Chromium deny-list bypass via case-insensitive URL scheme | 7.8CNA v4.0 | 1.6% | 2026-03-30 | Fix |
| CVE-2026-26352 | Smoothwall Express Update 13 stored XSS in vpnmain.cgi via VPN_IP parameter | 5.1CNA v4.0 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-25704 | pop-os cosmic-greeter incomplete privilege drop for com.system76.CosmicGreeter.GetUserData | 5.8CNA v4.0 | 0.1% | 2026-03-30 | |
| CVE-2026-25627 | NanoMQ MQTT over WebSocket transport out-of-bounds read | 6.5CNA v3.1 | 0.6% | 2026-03-30 | Fix |
| CVE-2026-21717 | Node.js Node weak hash | 5.9v3.1 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-21716 | Node.js Node missing authorization | 3.3CNA v3.0 | 0.1% | 2026-03-30 | Fix |
| CVE-2026-21715 | Node.js Node incorrect permission assignment | 3.3CNA v3.0 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-21714 | Node.js Node A memory leak | 5.3CNA v3.0 | 0.5% | 2026-03-30 | Fix |
| CVE-2026-21713 | Node.js Node timing side channel | 5.9CNA v3.0 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-21712 | Node.js Node reachable assertion | 6.5v3.1 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-21711 | Node.js Node improper access control | 5.3CNA v3.0 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-21710 | Node.js Node resource exhaustion | 7.5CNA v3.0 | 25.0% | 2026-03-30 | Fix |
| CVE-2026-5170 | MongoDB Server users could trigger a crash of mongod primaries during promotion to sharded | 6.0CNA v4.0 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-5165 | Virtio-win: Virtio-win: Memory corruption via use-after-free in virtio blk device reset | 6.7CNA v3.1 | 0.2% | 2026-03-30 | |
| CVE-2026-5164 | Virtio-win: Virtio-win: Denial of service via unvalidated descriptor count in unmap request | 6.7CNA v3.1 | 0.2% | 2026-03-30 | |
| CVE-2026-5155 | Tenda CH22 Parameter AdvSetWan fromAdvSetWan stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-30 | |
| CVE-2026-5154 | Tenda CH22 parameter setcfm fromSetCfm stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-30 | |
| CVE-2026-5153 | Tenda CH22 WriteFacMac FormWriteFacMac command injection | 8.8v3.1 | 6.5% | 2026-03-30 | |
| CVE-2026-5152 | Tenda CH22 createFileName formCreateFileName stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-30 | |
| CVE-2026-5150 | code-projects Accounting System parameter viewin_costumer.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-30 | |
| CVE-2026-5148 | YunaiV yudao-cloud page SQL injection | 5.1CNA v4.0 | 0.3% | 2026-03-30 | |
| CVE-2026-5147 | YunaiV yudao-cloud get-by-website SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-30 | |
| CVE-2026-5130 | Debugger and Troubleshooter WordPress plugin unauthenticated privilege escalation to Administrator | 8.8CNA v3.1 | 0.6% | 2026-03-30 | Fix |
| CVE-2026-5126 | SourceCodester RSS Feed Parser file_get_contents server-side request forgery | 5.3CNA v4.0 | 0.3% | 2026-03-30 | |
| CVE-2026-5125 | raine consult-llm-mcp server.ts child_process.execSync os command injection | 4.8CNA v4.0 | 1.1% | 2026-03-30 | Fix |
| CVE-2026-5124 | osrg GoBGP BGP header bgp.go BGPHeader.DecodeFromBytes access control | 6.3CNA v4.0 | 0.5% | 2026-03-30 | Fix |
| CVE-2026-5123 | osrg GoBGP bgp.go DecodeFromBytes off-by-one | 6.3CNA v4.0 | 0.7% | 2026-03-30 | Fix |
| CVE-2026-5122 | osrg GoBGP BGP OPEN message bgp.go DecodeFromBytes access control | 6.3CNA v4.0 | 0.5% | 2026-03-30 | Fix |
| CVE-2026-5121 | Libarchive: Libarchive: Arbitrary code execution via integer overflow in iso9660 image processing | 9.8CISA ADP v3.1 | 1.4% | 2026-03-30 | Fix |
| CVE-2026-5119 | Libsoup: Libsoup: Information disclosure | 8.2NVD v3.1 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-5107 | FRRouting FRR EVPN Type-2 route bgp_evpn.c process_type2_route access control | 4.2v3.1 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-5106 | code-projects Exam Form Submission update_fst.php cross-site scripting | 4.8v3.1 | 0.3% | 2026-03-30 | |
| CVE-2026-5105 | Totolink A3300R parameter cstecgi.cgi setVpnPassCfg command injection | 8.8v3.1 | 3.6% | 2026-03-30 | Emerging Threats |
| CVE-2026-5104 | Totolink A3300R cstecgi.cgi setStaticRoute command injection | 8.8v3.1 | 3.6% | 2026-03-30 | |
| CVE-2026-5103 | Totolink A3300R cstecgi.cgi setUPnPCfg command injection | 8.8v3.1 | 3.6% | 2026-03-30 | Emerging Threats |
| CVE-2026-5102 | Totolink A3300R parameter cstecgi.cgi setSmartQosCfg command injection | 8.8v3.1 | 3.6% | 2026-03-30 | |
| CVE-2026-4789 | Kyverno CEL HTTP functions server-side request forgery | 9.8CISA ADP v3.1 | 0.7% | 2026-03-30 | Fix |
| CVE-2026-4416 | GIGABYTE|Performance Library insecure deserialization | 8.5CNA v4.0 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-4415 | GIGABYTE|Gigabyte Control Center arbitrary file write | 9.8v3.1 | 0.9% | 2026-03-30 | Fix |
| CVE-2026-4315 | WatchGuard Firebox cross-site request forgery (CSRF) in Fireware Web UI | 7.1CNA v4.0 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-4266 | WatchGuard Firebox insecure deserialization in Fireware Access portal | 8.4CNA v4.0 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-4257 | Contact Form by Supsystic WordPress plugin unauthenticated server-side template injection | 9.8CNA v3.1 | 32.8% | 2026-03-30 | Reported exploitedNucleiMetasploitExploit codeFix |
| CVE-2026-4046 | The GNU C Library glibc iconv crash due to assertion failure with untrusted input | 7.5CISA ADP v3.1 | 0.7% | 2026-03-30 | Fix |
| CVE-2026-3991 | Elevation of privileges in Symantec Data Loss Prevention Windows endpoint | 7.8CNA v3.1 | 0.2% | 2026-03-30 | Fix |
| CVE-2026-3945 | tinyproxy integer overflow in HTTP Chunked Transfer-Encoding parser leading to denial of service | 8.7CNA v4.0 | 1.0% | 2026-03-30 | Fix |
| CVE-2026-3502 | TrueConf Client download of code without integrity check | 7.8CNA v3.1 | 0.3% | 2026-03-30 | KEVExploit codeFix |
| CVE-2026-3321 | Authorization bypass in ON24 Q&A chat | 8.7CNA v4.0 | 0.4% | 2026-03-30 | |
| CVE-2026-3124 | Download Monitor WordPress plugin insecure direct object reference | 7.5CNA v3.1 | 0.4% | 2026-03-30 | Fix |
| CVE-2026-2328 | WAGO Device Sphere backend Access due to insufficient input validation | 7.5CNA v3.1 | 0.3% | 2026-03-30 | Fix |
| CVE-2026-2287 | CrewAI sandbox execution fallback code injection | 9.8CISA ADP v3.1 | 0.7% | 2026-03-30 | |
| CVE-2026-2286 | CrewAI RAG search tools server-side request forgery | 9.8CISA ADP v3.1 | 0.5% | 2026-03-30 | |
| CVE-2026-2285 | CrewAI JSON loader tool path traversal | 7.5CISA ADP v3.1 | 0.6% | 2026-03-30 | |
| CVE-2026-2275 | CrewAI CodeInterpreter tool vulnerability | 9.6CISA ADP v3.1 | 0.4% | 2026-03-30 | |
| CVE-2026-1612 | Hard-coded AWS Key in AL-KO Robolinho Update Software | 6.9CNA v4.0 | 0.4% | 2026-03-30 | |
| CVE-2026-34005 | Xiongmai DVR/NVR devices OS command injection | 8.8CNA v3.1 | 1.9% | 2026-03-29 | Exploit code |
| CVE-2026-33575 | OpenClaw Long-lived credential exposure in Pairing Setup Codes | 8.6CNA v4.0 | 0.4% | 2026-03-29 | Fix |
| CVE-2026-33574 | OpenClaw path traversal via Tools Root Rebinding in Skills Download | 4.7v3.1 | 0.1% | 2026-03-29 | Fix |
| CVE-2026-33573 | OpenClaw Workspace Boundary Bypass via Agent RPC parameters | 8.7CNA v4.0 | 0.5% | 2026-03-29 | Fix |
| CVE-2026-33572 | OpenClaw Insufficient File Permissions in Session Transcript files | 5.5NVD v3.1 | 0.2% | 2026-03-29 | Fix |
| CVE-2026-32987 | OpenClaw Bootstrap Setup Code Replay via Device Pairing | 9.3CNA v4.0 | 0.6% | 2026-03-29 | Fix |
| CVE-2026-32980 | OpenClaw resource exhaustion via Unauthenticated Telegram Webhook request | 8.7CNA v4.0 | 0.7% | 2026-03-29 | Fix |
| CVE-2026-32979 | OpenClaw Unbound Interpreter and Runtime Commands Bypass in node-host Approval | 6.7NVD v3.1 | 0.2% | 2026-03-29 | Fix |
| CVE-2026-32978 | OpenClaw Approval Bypass via Unrecognized Script Runners | 7.5NVD v3.1 | 0.3% | 2026-03-29 | Fix |
| CVE-2026-32975 | OpenClaw Weak Authorization via Mutable Group Names in Zalouser Allowlist | 6.9CNA v4.0 | 0.6% | 2026-03-29 | Fix |
| CVE-2026-32974 | OpenClaw Forged Event injection via Feishu Webhook Verification Token | 9.8v3.1 | 0.4% | 2026-03-29 | Fix |
| CVE-2026-32973 | OpenClaw Exec Allowlist Pattern Overmatch via POSIX Path Normalization | 8.8CNA v4.0 | 0.7% | 2026-03-29 | Fix |
| CVE-2026-32972 | OpenClaw authorization bypass in Browser Profile Management via browser.request | 7.1CNA v4.0 | 0.4% | 2026-03-29 | Fix |
| CVE-2026-32924 | OpenClaw authorization bypass via Misclassified Reaction Events in Feishu | 6.9CNA v4.0 | 0.5% | 2026-03-29 | Fix |
| CVE-2026-32923 | OpenClaw authorization bypass in Discord Guild Reaction Allowlist Enforcement | 5.3CNA v4.0 | 0.2% | 2026-03-29 | Fix |
| CVE-2026-32922 | OpenClaw privilege escalation via Unvalidated Scope in device.token.rotate | 9.4CNA v4.0 | 0.7% | 2026-03-29 | Fix |
| CVE-2026-32919 | OpenClaw Unauthorized Session Reset via agent Slash commands | 6.9CNA v4.0 | 0.1% | 2026-03-29 | Fix |
| CVE-2026-32918 | OpenClaw Session sandbox escape via session_status tool | 9.2CNA v4.0 | 0.1% | 2026-03-29 | Fix |
| CVE-2026-32915 | OpenClaw Sandbox Boundary Bypass via Subagent Control Surface | 9.3CNA v4.0 | 0.2% | 2026-03-29 | Fix |
| CVE-2026-32914 | OpenClaw insufficient access control in /config and /debug endpoints | 8.7CNA v4.0 | 0.4% | 2026-03-29 | Fix |
| CVE-2026-23400 | Linux kernel Rust Binder notification handling improper locking | 5.5v3.1 | 0.1% | 2026-03-29 | Fix |
| CVE-2026-5101 | Totolink A3300R parameter cstecgi.cgi setLanCfg command injection | 8.8v3.1 | 3.6% | 2026-03-29 | |
| CVE-2026-5046 | Tenda FH1201 Parameter WrlExtraSet formWrlExtraSet stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-29 | |
| CVE-2026-5045 | Tenda FH1201 Parameter WrlclientSet stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-29 | |
| CVE-2026-5044 | Belkin F9K1122 setting formSetSystemSettings stack-based overflow | 8.7CNA v4.0 | 1.1% | 2026-03-29 | |
| CVE-2026-5043 | Belkin F9K1122 parameter formSetPassword stack-based overflow | 8.7CNA v4.0 | 1.1% | 2026-03-29 | |
| CVE-2026-5042 | Belkin F9K1122 parameter formCrossBandSwitch stack-based overflow | 8.7CNA v4.0 | 1.1% | 2026-03-29 | |
| CVE-2026-5041 | code-projects Chamber of Commerce Membership Management System pageMail.php fwrite command injection | 5.1CNA v4.0 | 2.1% | 2026-03-29 | |
| CVE-2026-5037 | mxml mxmlIndexNew mxml-index.c index_sort stack-based overflow | 4.8CNA v4.0 | 0.2% | 2026-03-29 | Fix |
| CVE-2026-5036 | Tenda 4G06 Endpoint DhcpListClient fromDhcpListClient stack-based overflow | 8.7CNA v4.0 | 0.9% | 2026-03-29 | |
| CVE-2026-5035 | code-projects Accounting System parameter view_work.php SQL injection | 9.8v3.1 | 0.6% | 2026-03-29 | |
| CVE-2026-5034 | code-projects Accounting System parameter edit_costumer.php SQL injection | 9.8v3.1 | 0.5% | 2026-03-29 | |
| CVE-2026-5033 | code-projects Accounting System parameter view_costumer.php SQL injection | 9.8v3.1 | 0.6% | 2026-03-29 | |
| CVE-2026-5031 | BichitroGan ISP Billing Software endpoint users-view resource injection | 5.3CNA v4.0 | 0.4% | 2026-03-29 | |
| CVE-2026-5030 | Totolink NR1800X Telnet service cstecgi.cgi NTPSyncWithHost command injection | 9.8v3.1 | 3.7% | 2026-03-29 | |
| CVE-2026-5024 | D-Link DIR-513 formSetEmail stack-based overflow | 8.7CNA v4.0 | 1.2% | 2026-03-29 | |
| CVE-2026-5023 | DeDeveloper23 codebase-mcp RepoMix codebase.ts saveCodebase os command injection | 4.8CNA v4.0 | 1.1% | 2026-03-29 | |
| CVE-2026-5021 | Tenda F453 httpd PPTPUserSetting fromPPTPUserSetting stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-29 | |
| CVE-2026-5020 | Totolink A3600R parameter cstecgi.cgi setNoticeCfg command injection | 9.8v3.1 | 3.7% | 2026-03-29 | |
| CVE-2026-5019 | code-projects Simple Food Order System parameter all-orders.php SQL injection | 9.8v3.1 | 0.6% | 2026-03-29 | |
| CVE-2026-4946 | NSA Ghidra Auto-Analysis Annotation command execution | 8.8CNA v3.1 | 0.8% | 2026-03-29 | Fix |
| CVE-2026-4851 | Grid::Machine versions for Perl allows arbitrary code execution via unsafe deserialization | 9.8NVD v3.1 | 0.8% | 2026-03-29 | |
| CVE-2026-4176 | Perl versions from, from, from contain a vulnerable version of Compress::Raw::Zlib | 9.8CISA ADP v3.1 | 0.8% | 2026-03-29 | Fix |
| CVE-2026-2602 | Twentig WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-03-29 | Fix |
| CVE-2026-2370 | Improper handling of parameters in GitLab | 8.1CNA v3.1 | 0.4% | 2026-03-29 | Fix |
| CVE-2026-0562 | Insecure direct object reference (IDOR) in parisneo/Lollms | 8.3v3.1 | 0.3% | 2026-03-29 | Fix |
| CVE-2026-0560 | Server-side request forgery (SSRF) in parisneo/Lollms | 7.5v3.1 | 1.8% | 2026-03-29 | NucleiFix |
| CVE-2026-0558 | Unauthenticated file upload in parisneo/Lollms | 9.8v3.1 | 1.9% | 2026-03-29 | NucleiFix |
| CVE-2026-23399 | Linux kernel nf_tables dynamic set expressions memory leak | 5.5NVD v3.1 | 0.1% | 2026-03-28 | Fix |
| CVE-2026-5018 | code-projects Simple Food Order System parameter register-router.php SQL injection | 9.8v3.1 | 0.6% | 2026-03-28 | |
| CVE-2026-5017 | code-projects Simple Food Order System parameter all-tickets.php SQL injection | 9.8v3.1 | 0.6% | 2026-03-28 | |
| CVE-2026-5016 | elecV2 elecV2P URL mock eAxios server-side request forgery | 6.9CNA v4.0 | 0.5% | 2026-03-28 | |
| CVE-2026-5015 | elecV2 elecV2P endpoint logs cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-03-28 | |
| CVE-2026-5014 | elecV2 elecV2P Wildcard log path.join path traversal | 6.9CNA v4.0 | 0.6% | 2026-03-28 | |
| CVE-2026-5013 | elecV2 elecV2P :key path.join path traversal | 6.9CNA v4.0 | 0.6% | 2026-03-28 | |
| CVE-2026-5012 | elecV2 elecV2P RPC pm2run os command injection | 6.9CNA v4.0 | 2.1% | 2026-03-28 | |
| CVE-2026-5011 | elecV2 elecV2P JSON webhook runJSFile code injection | 5.3CNA v4.0 | 0.4% | 2026-03-28 | |
| CVE-2026-5007 | kazuph mcp-docs-rag add_git_repository/add_text_file index.ts cloneRepository os command injection | 4.8CNA v4.0 | 1.1% | 2026-03-28 | |
| CVE-2026-5004 | Wavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow | 8.7CNA v4.0 | 1.1% | 2026-03-28 | |
| CVE-2026-5003 | PromtEngineer localGPT Web api_server.py handle_index information disclosure | 6.9CNA v4.0 | 0.5% | 2026-03-28 | |
| CVE-2026-5002 | PromtEngineer localGPT LLM Prompt server.py _route_using_overviews injection | 6.9CNA v4.0 | 0.5% | 2026-03-28 | |
| CVE-2026-5001 | PromtEngineer localGPT server.py do_POST unrestricted upload | 6.9CNA v4.0 | 0.5% | 2026-03-28 | |
| CVE-2026-5000 | PromtEngineer localGPT API endpoint server.py LocalGPTHandler missing authentication | 6.9CNA v4.0 | 0.7% | 2026-03-28 | Exploit code |
| CVE-2026-4999 | z-9527 admin isImg Check upload.js uploadFile path traversal | 5.3CNA v4.0 | 0.5% | 2026-03-28 | |
| CVE-2026-4998 | Sinaptik AI PandasAI Chat message code_executor.py CodeExecutor.execute code injection | 6.9CNA v4.0 | 0.7% | 2026-03-28 | |
| CVE-2026-4997 | Sinaptik AI PandasAI sql_sanitizer.py is_sql_query_safe path traversal | 6.9CNA v4.0 | 0.8% | 2026-03-28 | |
| CVE-2026-4996 | Sinaptik AI PandasAI pandasai-lancedb extension lancedb.py get_relevant_docs_by_id SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-28 | |
| CVE-2026-4995 | wandb OpenUI window Message Event index.html cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-03-28 | |
| CVE-2026-4994 | wandb OpenUI APIStatusError server.py generic_exception_handler information exposure | 5.1CNA v4.0 | 0.3% | 2026-03-28 | |
| CVE-2026-4993 | wandb OpenUI config.py hard-coded credentials | 4.8CNA v4.0 | 0.1% | 2026-03-28 | |
| CVE-2026-4987 | SureForms WordPress plugin unauthenticated Payment Amount validation bypass via form_id | 7.5CNA v3.1 | 1.2% | 2026-03-28 | NucleiFix |
| CVE-2026-3256 | HTTP::Session versions for Perl defaults to using insecurely generated session ids | 9.8NVD v3.1 | 0.7% | 2026-03-28 | Fix |
| CVE-2026-2595 | Quads Ads Manager for Google AdSense WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.2% | 2026-03-28 | Fix |
| CVE-2026-2442 | Page Builder: Pagelayer WordPress plugin CRLF injection | 5.3CNA v3.1 | 0.3% | 2026-03-28 | Fix |
| CVE-2026-1307 | Ninja Forms WordPress plugin sensitive information disclosure | 6.5CNA v3.1 | 0.2% | 2026-03-28 | Fix |
| CVE-2026-34475 | varnish-software Varnish Cache cache poisoning | 9.8v3.1 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-34411 | Appsmith Unauthenticated Instance Configuration Disclosure via Management APIs | 6.9CNA v4.0 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-34391 | Fleet Vulnerable to Windows MDM cross-device command disclosure | 6.6CNA v4.0 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-34389 | Fleet's user account creation via invite does not enforce invited email address | 4.9CNA v4.0 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-34388 | Fleet vulnerable to denial of service via unhandled gRPC log type in launcher endpoint | 6.6CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-34387 | Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts | 5.7CNA v4.0 | 1.9% | 2026-03-27 | Fix |
| CVE-2026-34386 | Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin | 6.3CNA v4.0 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-34385 | Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database | 6.2CNA v4.0 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-34375 | AVideo vulnerable to reflected XSS via Unsanitized plugin parameter in YPTWallet Stripe Payment page | 8.2CNA v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-34374 | AVideo has SQL injection in Live_schedule::keyExists via Unparameterized Stream Key | 9.1CNA v3.1 | 0.5% | 2026-03-27 | |
| CVE-2026-34369 | WWBN AVideo video playback API missing authorization | 5.3CNA v3.1 | 0.4% | 2026-03-27 | |
| CVE-2026-34368 | AVideo vulnerable to Wallet Balance Double-Spend via TOCTOU race condition in transferBalance | 5.3CNA v3.1 | 0.2% | 2026-03-27 | |
| CVE-2026-34364 | WWBN AVideo category access control incorrect authorization | 5.3CNA v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-34362 | AVideo's WebSocket Token Never Expires due to Commented-Out Timeout Validation in verifyTokenSocket | 5.4CNA v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-34353 | OCaml integer overflow | 5.1v3.1 | 0.1% | 2026-03-27 | Fix |
| CVE-2026-34247 | WWBN AVideo live stream poster upload missing authorization | 5.4CNA v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-34245 | AVideo's missing authorization in Playlist Schedule Creation allows Cross-User Broadcast Hijacking | 6.3CNA v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-34226 | Happy DOM fetch credentials handling information disclosure | 7.5CNA v3.1 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-34205 | Home Assistant: Unauthenticated App Endpoints Exposed to Local Network via Host Network Mode | 9.7CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-34046 | Langflow: Authenticated Users can Read, Modify, and Delete any Flow via Missing Ownership Check | 8.7CNA v4.0 | 0.7% | 2026-03-27 | Fix |
| CVE-2026-33996 | LibJWT has null/bounds validation in JWK octet and RSA PSS parsing | 5.8CNA v4.0 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-33994 | Locutus prototype pollution due to incomplete fix for | 6.3CNA v4.0 | 0.8% | 2026-03-27 | Fix |
| CVE-2026-33993 | Locutus has prototype pollution via __proto__ Key injection in unserialize | 6.9CNA v4.0 | 0.8% | 2026-03-27 | Fix |
| CVE-2026-33992 | pyLoad: Server-side request forgery via Download Link Submission enables Cloud Metadata Exfiltration | 9.3CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33991 | WeGIA has SQL injection in deletar_tag.php | 8.8CNA v3.1 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33989 | @mobilenext/mobile-mcp alllows arbitrary file write | 8.1CNA v3.1 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33981 | Changedetection.io Discloses Environment variables via jq env Builtin in Include Filters | 8.3CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33980 | Azure Data Explorer MCP Server table schema tool handlers vulnerability | 8.3CNA v3.1 | 0.4% | 2026-03-27 | Exploit code |
| CVE-2026-33979 | Express XSS Sanitizer sanitization configuration cross-site scripting | 8.2CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-33976 | Notesnook vulnerable to RCE via stored XSS in Web Clipper rendering | 9.7CNA v3.1 | 0.7% | 2026-03-27 | Fix |
| CVE-2026-33955 | Notesnook vulnerable to RCE via stored XSS in Note History diff viewer | 8.6CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33954 | LinkAce discloses private notesto unauthorized authenticated users via the web link detail page | 6.5CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-33953 | LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce | 8.5CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33946 | MCP Ruby SDK: Insufficient Session Binding allows SSE Stream Hijacking via Session ID Replay | 8.2CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33945 | lxc incus abitrary file write through systemd-creds option | 10.0CNA v3.1 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33943 | Happy DOM ECMAScriptModuleCompiler code injection | 8.8CNA v3.1 | 1.0% | 2026-03-27 | Fix |
| CVE-2026-33941 | Handlebars.js has JavaScript injection in CLI Precompiler via Unescaped Names and options | 8.3CNA v3.1 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-33940 | Handlebars.js has JavaScript injection | 8.1CNA v3.1 | 0.8% | 2026-03-27 | Fix |
| CVE-2026-33939 | Handlebars.js has denial of service via Malformed Decorator Syntax in Template Compilation | 7.5CNA v3.1 | 0.8% | 2026-03-27 | Fix |
| CVE-2026-33938 | Handlebars.js has JavaScript injection via AST type confusion by tampering @partial-block | 8.1CNA v3.1 | 0.8% | 2026-03-27 | Fix |
| CVE-2026-33937 | Handlebars.js has JavaScript injection via AST type confusion | 9.8CNA v3.1 | 1.7% | 2026-03-27 | Exploit codeFix |
| CVE-2026-33936 | python-ecdsa DER parser denial of service | 5.3CNA v3.1 | 0.5% | 2026-03-27 | Exploit codeFix |
| CVE-2026-33935 | MyTube has Unauthenticated Account Lockout via Shared Login Attempt State | 7.7CNA v4.0 | 0.8% | 2026-03-27 | Fix |
| CVE-2026-33916 | Handlebars.js has prototype pollution leading to XSS through partial template injection | 4.7CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-33907 | Ella Core Panics during NAS Authentication Response/Failure with missing IEs | 6.5CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-33906 | Ella Core has privilege escalation via Database Restore by NetworkManager role | 7.2CNA v3.1 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33904 | Ella Core has a denial of service via SCTP connection cleanup deadlock | 6.5CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33903 | Ella Core panics when processing a crafted NGAP LocationReport message | 6.5CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33898 | Local Incus UI web server vulnerable to nuthentication bypass | 8.8CNA v3.1 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33896 | Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) | 7.4CNA v3.1 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33895 | Digital Bazaar Forge Ed25519 improper signature verification | 7.5CNA v3.1 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33894 | Forge has signature forgery in RSA-PKCS due to ASN.1 extra field | 7.5CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-33891 | Forge has denial of service via infinite loop in BigInteger.modInverse with Zero Input | 7.5CNA v3.1 | 0.9% | 2026-03-27 | Fix |
| CVE-2026-33890 | MyTube has an unauthenticated admin privilege escalation via Passkey Registration | 8.9CNA v4.0 | 0.7% | 2026-03-27 | Fix |
| CVE-2026-33887 | Statamic revision controllers missing authorization | 5.4CNA v3.1 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-33886 | Statamic's sensitive configuration values are exposed to content editors via Antlers-enabled fields | 6.5CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-33885 | Statamic has an open redirect on unauthenticated endpoints via URL parsing differential | 6.1CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33884 | Statamic's live preview token bypasses content protection for unrelated entries | 4.3CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33883 | Statamic has reflected XSS via unescaped redirect parameter in its password reset form tag | 6.1CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33882 | Statamic's Markdown preview endpoint exposes sensitive user data | 6.5CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-33881 | Windmill NativeTS executor code injection | 7.3CNA v4.0 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33879 | FLIP doesn't have rate limiting or brute-force protection on login | 2.7CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33875 | Authenticator vulnerable to Authentication Flow Hijack | 9.3CNA v3.1 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33874 | Authenticator vulnerable to remote code execution | 7.8CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33873 | Langflow has authenticated code execution in Agentic Assistant Validation | 9.3CNA v4.0 | 1.8% | 2026-03-27 | Fix |
| CVE-2026-33872 | Revelry Labs elixir-nodejs worker protocol race condition | 7.1CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33871 | Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass | 8.7CNA v4.0 | 1.2% | 2026-03-27 | Fix |
| CVE-2026-33870 | Netty: HTTP request smuggling via Chunked Extension Quoted-String Parsing | 7.5CNA v3.1 | 0.7% | 2026-03-27 | Fix |
| CVE-2026-33869 | Mastodon has a denial of service for quote authorization | 4.8CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33868 | Mastodon web route open redirect | 4.3CNA v3.1 | 0.6% | 2026-03-27 | NucleiFix |
| CVE-2026-33867 | AVideo has Plaintext Video Password Storage | 9.1CNA v4.0 | 0.2% | 2026-03-27 | |
| CVE-2026-33770 | AVideo has SQL injection in category.php fixCleanTitle | 7.1CNA v4.0 | 0.6% | 2026-03-27 | |
| CVE-2026-33767 | AVideo has SQL injection via Partial Prepared Statement videos_id Concatenated Directly into Query | 7.1CNA v4.0 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33766 | AVideo has SSRF Protection Bypass via HTTP Redirect in Image Download endpoints | 5.3CNA v4.0 | 0.3% | 2026-03-27 | |
| CVE-2026-33765 | Pi-hole Web Interface has a command injection | 8.9CNA v4.0 | 1.8% | 2026-03-27 | Fix |
| CVE-2026-33764 | AVideo: IDOR in AI plugin allows Stealing other Users' AI-Generated Metadata and Transcriptions | 4.3CNA v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-33763 | AVideo has an Unauthenticated Video Password brute-force vulnerability | 5.3CNA v3.1 | 0.4% | 2026-03-27 | |
| CVE-2026-33761 | WWBN AVideo Scheduler plugin missing authorization | 5.3CNA v3.1 | 0.4% | 2026-03-27 | |
| CVE-2026-33759 | AVideo: Unauthenticated IDOR in playlistsVideos.json.php exposes Private Playlist Contents | 5.3CNA v3.1 | 0.4% | 2026-03-27 | |
| CVE-2026-33758 | OpenBao has reflected XSS in its OIDC authentication error message | 9.4CNA v4.0 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-33757 | OpenBao lacks user confirmation for OIDC direct callback mode | 9.6CNA v3.1 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33755 | Intermesh groupoffice authenticated SQL injection in Contact/query addressBookIds filter | 8.8CNA v3.1 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33750 | brace-expansion sequence expansion denial of service | 6.5CNA v3.1 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33748 | BuildKit Git URL subdir component can cause access to restricted files | 8.2CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-33747 | BuildKit vulnerable to malicious frontend causing file escape outside of storage root | 8.4CNA v3.1 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33745 | cpp-httplib client leaks authentication credentials to Untrusted Hosts on Cross-Origin HTTP Redirect | 7.4CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-33744 | BentoML has Dockerfile command injection via system_packages in bentofile.yaml | 7.8CNA v3.1 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-33739 | fogproject FOG has stored XSS in multiple Management pages | 5.7CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33735 | MyTube has an improper access control that allows Complete application takeover | 7.4CNA v4.0 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33730 | Open Source Point of Sale has an IDOR in Password Change (Home) | 6.5CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-33729 | OpenFGA has an authorization bypass through cached keys | 5.8CNA v4.0 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33728 | Datadog dd-trace-java RMI instrumentation insecure deserialization | 9.3CNA v4.0 | 1.0% | 2026-03-27 | Fix |
| CVE-2026-33726 | Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic | 5.4CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33725 | Metabase vulnerable to RCE and arbitrary file read | 7.2CNA v3.1 | 0.8% | 2026-03-27 | Exploit codeFix |
| CVE-2026-33721 | MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing | 5.3CNA v3.1 | 0.8% | 2026-03-27 | Fix |
| CVE-2026-33718 | OpenHands is vulnerable to command injection through its Git Diff handler | 7.6CNA v3.1 | 3.0% | 2026-03-27 | Exploit codeFix |
| CVE-2026-33701 | OpenTelemetry: Unsafe deserialization in RMI Instrumentation may lead to remote code execution | 9.3CNA v4.0 | 1.1% | 2026-03-27 | Exploit codeFix |
| CVE-2026-33699 | pypdf PDF dictionary object parser infinite loop | 4.6CNA v4.0 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33697 | CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys | 7.5CNA v3.1 | 0.1% | 2026-03-27 | Fix |
| CVE-2026-33693 | Lemmy's Activitypub-Federation has SSRF via bypass in activitypub-federation-rust v4_is_invalid | 6.5CNA v3.1 | 0.4% | 2026-03-27 | Exploit codeFix |
| CVE-2026-33654 | HKUDS nanobot Zero-Click Indirect prompt injection and authentication bypass via Email Polling | 8.9CNA v4.0 | 0.7% | 2026-03-27 | Fix |
| CVE-2026-33559 | MiKa OpenStreetMap cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33433 | Traefik vulnerable to BasicAuth/DigestAuth Identity spoofing via Non-Canonical headerField | 5.1CNA v4.0 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33366 | BUFFALO Wi-Fi router products missing authentication | 6.9CNA v4.0 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-33284 | globaleaks-whistleblowing-software GlobalLeaks has insufficient URL validation in user support API | 1.2CNA v4.0 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-33280 | BUFFALO Wi-Fi router products hidden functionality | 9.8v3.1 | 0.7% | 2026-03-27 | Fix |
| CVE-2026-33206 | calibre has a path traversal | 8.2CNA v4.0 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-33205 | calibre has server-side request forgery in ebook viewer backend | 4.8CNA v4.0 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-33045 | home-assistant core home Assistant has stored XSS in history-graphs | 7.3CNA v4.0 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-33044 | home-assistant core home Assistant has stored XSS in Map-card through malicious device name | 7.3CNA v4.0 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-32984 | wazuh heap buffer overflow in wazuh-authd | 5.3CNA v4.0 | 0.4% | 2026-03-27 | |
| CVE-2026-32983 | SSL/TLS Renegotiation DoS in Wazuh Manager authd service | 7.5v3.1 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-32859 | ByteDance DeerFlow stored XSS via Inline Artifact Rendering | 5.1CNA v4.0 | 0.3% | 2026-03-27 | |
| CVE-2026-32695 | Traefik has Knative Ingress Rule injection that allows Host Restriction Bypass | 6.3CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-32678 | BUFFALO Wi-Fi router products authentication bypass | 8.7CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-32669 | BUFFALO Wi-Fi router products code injection | 9.8v3.1 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-32241 | Flannel vulnerable to cross-node remote code execution via extension backend BackendData injection | 7.5CNA v3.1 | 2.4% | 2026-03-27 | Fix |
| CVE-2026-31951 | LibreChat's MCP server header injection enables OAuth Token Theft | 6.8CNA v3.1 | 0.4% | 2026-03-27 | |
| CVE-2026-31950 | LibreChat SSE stream subscription insecure direct object reference | 5.3CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-31945 | LibreChat server-side request forgery using DNS resolution | 7.7CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-31943 | LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP | 8.5CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-30689 | anjoy8 Blog.Core incorrect authorization | 7.5CISA ADP v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-30637 | OTCMS AnnounContent of the /admin/read.php server-side request forgery | 7.5CISA ADP v3.1 | 0.6% | 2026-03-27 | |
| CVE-2026-30576 | Senior-walter Web-based Pharmacy Product Management System logic flaw | 7.5CISA ADP v3.1 | 0.4% | 2026-03-27 | |
| CVE-2026-30575 | Senior-walter Web-based Pharmacy Product Management System improper quantity validation | 7.5CISA ADP v3.1 | 0.5% | 2026-03-27 | |
| CVE-2026-30574 | Senior-walter Web-based Pharmacy Product Management System improper workflow enforcement | 7.5CISA ADP v3.1 | 0.4% | 2026-03-27 | |
| CVE-2026-30571 | Ahsanriaz26gmailcom Inventory System SourceCodester Sales and reflected cross-site scripting | 6.1v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-30570 | Ahsanriaz26gmailcom Inventory System SourceCodester Sales and reflected cross-site scripting | 6.1v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-30569 | Ahsanriaz26gmailcom Inventory System SourceCodester Sales and reflected cross-site scripting | 6.1v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-30568 | Ahsanriaz26gmailcom Inventory System SourceCodester Sales and reflected cross-site scripting | 4.8CISA ADP v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-30567 | Ahsanriaz26gmailcom Inventory System SourceCodester Sales and reflected cross-site scripting | 6.1v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-30534 | oretnom23 Online Food Ordering System SourceCodester SQL injection | 8.3CISA ADP v3.1 | 0.4% | 2026-03-27 | |
| CVE-2026-30533 | oretnom23 Online Food Ordering System SourceCodester SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2026-03-27 | |
| CVE-2026-30532 | oretnom23 Online Food Ordering System SourceCodester SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2026-03-27 | |
| CVE-2026-30531 | oretnom23 Online Food Ordering System SourceCodester SQL injection | 8.8CISA ADP v3.1 | 0.5% | 2026-03-27 | |
| CVE-2026-30530 | oretnom23 Online Food Ordering System SourceCodester SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2026-03-27 | |
| CVE-2026-30529 | oretnom23 Online Food Ordering System SourceCodester SQL injection | 8.8CISA ADP v3.1 | 0.5% | 2026-03-27 | |
| CVE-2026-30527 | oretnom23 Online Food Ordering System SourceCodester stored cross-site scripting | 5.4v3.1 | 0.2% | 2026-03-27 | |
| CVE-2026-30304 | Tianguaduizhang AI Code prompt injection | 9.6CISA ADP v3.1 | 0.7% | 2026-03-27 | |
| CVE-2026-30303 | Matterai Axon Code OS command injection | 9.8CISA ADP v3.1 | 2.4% | 2026-03-27 | |
| CVE-2026-30302 | Coderider-kilo Coderider OS command injection | 10.0CISA ADP v3.1 | 2.1% | 2026-03-27 | |
| CVE-2026-29871 | Theunwindai Awesome LLM Apps path traversal | 7.5CISA ADP v3.1 | 0.7% | 2026-03-27 | |
| CVE-2026-29180 | Fleet's team maintainer can transfer hosts from any team via missing source team authorization | 4.9CNA v4.0 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-29071 | open-webui open WebUI's insecure direct object reference allows access to other users' memories | 3.1CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-29070 | open-webui open WebUI has unauthorized deletion of knowledge files | 5.4CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-28788 | Open WebUI file batch processing endpoint insecure direct object reference | 7.1CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-28786 | open-webui open WebUI vulnerable to path traversal in `POST /API/v1/audio/transcriptions` | 4.3CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-28375 | Grafana Testdata datasource can issue unbounded memory allocations | 6.5CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-28369 | Red Hat JBoss Enterprise Application Platform HTTP request smuggling | 8.7CNA v3.1 | 0.9% | 2026-03-27 | Fix |
| CVE-2026-28368 | Red Hat JBoss Enterprise Application Platform HTTP request smuggling | 8.7CNA v3.1 | 0.9% | 2026-03-27 | Fix |
| CVE-2026-28367 | Red Hat JBoss Enterprise Application Platform HTTP request smuggling | 8.7CNA v3.1 | 0.9% | 2026-03-27 | Fix |
| CVE-2026-27880 | Grafana OpenFeature evaluation API reads input data with no bounds | 7.5CNA v3.1 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-27879 | Grafana query resampling can cause unbounded memory allocations | 6.5CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-27877 | Grafana public dashboards discloses all direct mode datasources | 6.5CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-27876 | RCE on Grafana via sqlExpressions | 9.1CNA v3.1 | 1.4% | 2026-03-27 | Exploit codeFix |
| CVE-2026-27860 | Open-Xchange OX Dovecot Pro LDAP injection | 3.7CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-27859 | Open-Xchange OX Dovecot Pro resource exhaustion | 5.3CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-27858 | Open-Xchange OX Dovecot Pro resource exhaustion | 7.5CNA v3.1 | 1.0% | 2026-03-27 | Fix |
| CVE-2026-27857 | Open-Xchange OX Dovecot Pro resource exhaustion | 4.3CNA v3.1 | 0.8% | 2026-03-27 | Fix |
| CVE-2026-27856 | Open-Xchange OX Dovecot Pro improper authentication | 7.4CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-27855 | Open-Xchange OX Dovecot Pro authentication bypass by replay | 6.8CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-27650 | BUFFALO Wi-Fi router products OS command injection | 9.8v3.1 | 1.4% | 2026-03-27 | Fix |
| CVE-2026-27309 | Adobe Substance3D Stager use-after-free | 7.8CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-26061 | Fleet's unbounded request body read allows remote denial of service | 8.7CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-26060 | Fleet: Password reset tokens remain valid after password change for 24 hours | 6.0CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-25101 | Session fixation in Bludit | 9.8v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-25100 | Stored XSS via SVG file upload in Bludit | 5.4v3.1 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-25099 | Remote code execution via unrestricted file upload in Bludit | 8.8v3.1 | 1.9% | 2026-03-27 | Exploit codeFix |
| CVE-2026-24031 | Open-Xchange OX Dovecot Pro SQL injection | 7.7CNA v3.1 | 0.4% | 2026-03-27 | Exploit codeFix |
| CVE-2026-22744 | Spring AI Redis Store has TAG Field Query injection | 7.5CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-22743 | Spring AI server-side request forgery via Filter Expression Keys in Neo4jVectorStore | 7.5CNA v3.1 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-22742 | Spring AI server-side request forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching | 8.6CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-22738 | Spring AI SpEL injection | 9.8CNA v3.1 | 1.1% | 2026-03-27 | Exploit codeFix |
| CVE-2026-5027 | Langflow path traversal arbitrary file write via upload_user_file | 8.8CNA v3.1 | 4.8% | 2026-03-27 | NucleiEmerging ThreatsExploit code |
| CVE-2026-5026 | Langflow stored XSS via Malicious SVG upload | 5.4NVD v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-5025 | Langflow Application Logs Exposed to All Authenticated Users | 6.5CNA v3.1 | 0.4% | 2026-03-27 | |
| CVE-2026-5022 | Langflow missing authorization on download_image endpoint | 5.3NVD v3.1 | 0.3% | 2026-03-27 | |
| CVE-2026-5010 | Reflected cross-site scripting (XSS) in Sanoma’s Clickedu | 5.1CNA v4.0 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-4992 | wandb OpenUI HTMLAnnotator server.py get_share HTML injection | 5.3CNA v4.0 | 0.4% | 2026-03-27 | |
| CVE-2026-4991 | QDOCS Smart School Management System Admission Enquiry enquiry cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-03-27 | |
| CVE-2026-4990 | chatwoot Signup endpoint login improper authorization | 6.9CNA v4.0 | 0.5% | 2026-03-27 | |
| CVE-2026-4988 | Open5GS CCA message smf_s6b denial of service | 5.9v3.1 | 0.7% | 2026-03-27 | |
| CVE-2026-4985 | dloebl CGIF GIF Image cgif.c cgif_addframe integer overflow | 5.3CNA v4.0 | 0.6% | 2026-03-27 | Fix |
| CVE-2026-4984 | Botpress credential disclosure via Twilio Webhook handler | 8.2CNA v3.1 | 0.2% | 2026-03-27 | |
| CVE-2026-4982 | pretix Venueless unauthorized access to chat contents | 7.3CNA v4.0 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-4980 | Improper restriction of XML external entity reference in Inkscape | 6.3CNA v3.1 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-4976 | Totolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow | 8.7CNA v4.0 | 1.0% | 2026-03-27 | |
| CVE-2026-4975 | Tenda AC15 POST request setcfm formSetCfm memory corruption | 8.7CNA v4.0 | 1.0% | 2026-03-27 | |
| CVE-2026-4974 | Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption | 8.7CNA v4.0 | 1.0% | 2026-03-27 | |
| CVE-2026-4973 | SourceCodester Online Quiz System add-question.php cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-03-27 | |
| CVE-2026-4972 | code-projects Online Reviewer System btn_functions.php cross-site scripting | 4.8CNA v4.0 | 0.4% | 2026-03-27 | |
| CVE-2026-4971 | SourceCodester Note Taking App cross-site request forgery | 5.3CNA v4.0 | 0.2% | 2026-03-27 | |
| CVE-2026-4970 | code-projects Social Networking Site endpoint delete_photos.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-03-27 | |
| CVE-2026-4969 | code-projects Social Networking Site Alert home.php cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-03-27 | |
| CVE-2026-4968 | SourceCodester Diary App diary.php cross-site request forgery | 5.3CNA v4.0 | 0.2% | 2026-03-27 | |
| CVE-2026-4966 | itsourcecode Free Hotel Reservation System index.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-03-27 | |
| CVE-2026-4965 | letta-ai Letta Incomplete Fix ast_parsers.py resolve_type eval injection | 9.8v3.1 | 0.8% | 2026-03-27 | |
| CVE-2026-4964 | Letta File URL handler server-side request forgery | 6.5v3.1 | 0.4% | 2026-03-27 | |
| CVE-2026-4963 | huggingface smolagents Incomplete Fix local_python_executor.py evaluate_with code injection | 10.0v3.1 | 0.7% | 2026-03-27 | |
| CVE-2026-4962 | UltraVNC service version.dll uncontrolled search path | 7.3CNA v4.0 | 0.2% | 2026-03-27 | |
| CVE-2026-4961 | Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-27 | |
| CVE-2026-4960 | Tenda AC6 POST Request WizardHandle fromWizardHandle stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-27 | |
| CVE-2026-4959 | OpenBMB XAgent ShareServer WebSocket endpoint share.py check_user missing authentication | 7.5v3.1 | 0.8% | 2026-03-27 | |
| CVE-2026-4958 | OpenBMB XAgent WebSocket endpoint replayer.py ReplayServer.send_data authorization | 6.5v3.1 | 0.5% | 2026-03-27 | |
| CVE-2026-4957 | OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file | 5.1CNA v4.0 | 0.5% | 2026-03-27 | |
| CVE-2026-4956 | Shenzhen Ruiming Technology Streamax Crocus Parameter DevicePrint.do SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-27 | |
| CVE-2026-4955 | Shenzhen Ruiming Technology Streamax Crocus OperateStatistic.do SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-27 | |
| CVE-2026-4954 | MingSoft MCMS Web Content List Endpoint ContentAction.java list SQL injection | 5.3CNA v4.0 | 0.3% | 2026-03-27 | |
| CVE-2026-4953 | MingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery | 6.9CNA v4.0 | 0.5% | 2026-03-27 | |
| CVE-2026-4948 | A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leadi | 5.5CNA v3.1 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-4910 | Shenzhen Ruiming Technology Streamax Crocus Endpoint RemoteFormat.do SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-27 | |
| CVE-2026-4909 | code-projects Exam Form Submission update_s7.php cross-site scripting | 4.8CNA v4.0 | 0.4% | 2026-03-27 | |
| CVE-2026-4908 | code-projects Simple Laundry System parameter modstaffinfo.php SQL injection | 9.8v3.1 | 0.6% | 2026-03-27 | |
| CVE-2026-4907 | Page-Replica Page Replica endpoint sitemap sitemap.fetch server-side request forgery | 5.3CNA v4.0 | 0.3% | 2026-03-27 | |
| CVE-2026-4906 | Tenda AC5 POST Request WizardHandle decodePwd stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-27 | |
| CVE-2026-4905 | Tenda AC5 POST Request WifiWpsOOB formWifiWpsOOB stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-27 | |
| CVE-2026-4904 | Tenda AC5 POST request setcfm formSetCfm stack-based overflow | 8.7CNA v4.0 | 1.0% | 2026-03-27 | |
| CVE-2026-4622 | NEC Platforms Aterm WG2600HS OS command injection | 7.1CNA v4.0 | 1.2% | 2026-03-27 | Fix |
| CVE-2026-4621 | NEC Platforms Aterm W1200EX(-MS) hidden functionality | 6.3CNA v4.0 | 0.3% | 2026-03-27 | Fix |
| CVE-2026-4620 | NEC Platforms Aterm WX1500HP OS command injection | 7.1CNA v4.0 | 1.2% | 2026-03-27 | Fix |
| CVE-2026-4619 | NEC Platforms Aterm WX3600HP path traversal | 6.0CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-4309 | NEC Platforms Aterm W1200EX(-MS) missing authorization | 6.3CNA v4.0 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-4248 | Ultimate Member WordPress plugin sensitive information exposure to account takeover | 8.0CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-3457 | Stored XSS vulnerability in Sentinel ACC | 7.0CNA v4.0 | 0.2% | 2026-03-27 | Fix |
| CVE-2026-3098 | Smart Slider 3 WordPress plugin authenticated (Subscriber+) arbitrary file read via actionExportAll | 6.5CNA v3.1 | 0.4% | 2026-03-27 | Exploit codeFix |
| CVE-2026-1679 | zephyrproject-rtos Zephyr net: Eswifi socket send payload length not bounded | 7.3CNA v3.1 | 0.2% | 2026-03-27 | |
| CVE-2026-1496 | Coverity CLI authentication bypass | 9.3CNA v4.0 | 0.5% | 2026-03-27 | Fix |
| CVE-2026-0394 | Open-Xchange OX Dovecot Pro path traversal | 5.3CNA v3.1 | 0.4% | 2026-03-27 | Fix |
| CVE-2026-34352 | TigerVNC incorrect permission assignment | 9.8v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-34071 | Stirling-PDF has stored cross-site scripting (XSS) via EML-to-HTML Export | 5.4CNA v3.1 | 0.3% | 2026-03-26 | |
| CVE-2026-34056 | OpenEMR has a privilege escalation that allows a Low-Level User to View Admin-Only Data | 7.7CNA v3.1 | 0.4% | 2026-03-26 | |
| CVE-2026-34055 | OpenEMR has IDOR in Patient Notes Web UI allows unauthorized note access/modification | 8.1CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-34053 | OpenEMR missing authorization in Procedure Order AJAX Deletion handler | 7.1CNA v3.1 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-34051 | OpenEMR has Improper ACL on Import/Export Popup | 5.4CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33942 | Saloon has insecure deserialization in AccessTokenAuthenticator (object injection / RCE) | 8.1CNA v4.0 | 0.9% | 2026-03-26 | Fix |
| CVE-2026-33934 | OpenEMR show-signature.php missing authorization | 4.3CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33933 | openemr reflected XSS via Unescaped contextName parameter in Custom Template Editor | 6.1CNA v3.1 | 0.9% | 2026-03-26 | Fix |
| CVE-2026-33932 | OpenEMR has stored XSS in CCDA Preview via Unsanitized linkHtml attributes | 7.6CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33931 | OpenEMR has IDOR in Portal Payment page that allows Cross-Patient Record Access | 6.5CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33918 | OpenEMR missing authorization on Claim File Download endpoint | 7.6CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33917 | OpenEMR has SQL injection in CAMOS form | 8.8CNA v3.1 | 0.6% | 2026-03-26 | Exploit codeFix |
| CVE-2026-33915 | OpenEMR Missing ACL Checks on Insurance Company API Routes | 5.4CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33914 | OpenEMR has SQL injection in PostCalendar Category Delete | 7.2CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33897 | Incus vulnerable to arbitrary file read and write through pongo templates | 10.0CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33743 | Incus vulnerable to denial of source through crafted bucket backup file | 6.5CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33742 | Invoice Ninja has stored XSS via Markdown HTML injection in Product Notes | 5.4CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-33738 | Lychee vulnerable to stored XSS | 4.8CNA v4.0 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33732 | srvx is vulnerable to middleware bypass via absolute URI in request line | 4.8CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33711 | Incus vulnerable to local privilege escalation through VM screenshot path | 4.7CNA v4.0 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-33687 | Sharp has unrestricted file upload via Client-Controlled Validation Rules | 8.8CNA v3.1 | 0.7% | 2026-03-26 | Fix |
| CVE-2026-33686 | Sharp is vulnerable to path traversal via Unsanitized extension in FileUtil | 8.8CNA v3.1 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-33682 | Streamlit on Windows has unauthenticated SSRF vulnerability (NTLM credential exposure) | 4.7CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33674 | PrestaShop: Improper Use of Validation Framework | 2.0CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33673 | PrestaShop has multiple stored XSS vulnerabilities via unprotected template variables | 7.7CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33672 | Picomatch: Method injection in POSIX Character Classes causes incorrect Glob Matching | 5.3CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33671 | Picomatch has a ReDoS vulnerability via extglob quantifiers | 7.5CNA v3.1 | 0.5% | 2026-03-26 | Exploit codeFix |
| CVE-2026-33670 | SiYuan has directory traversal within its publishing service | 9.8CNA v3.1 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-33669 | SiYuan has arbitrary Document Reading within the Publishing service | 9.8CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33664 | Kestra vulnerable to stored cross-site scripting via Flow YAML fields | 7.3CNA v3.1 | 0.3% | 2026-03-26 | |
| CVE-2026-33661 | WeChat Pay callback signature verification bypassed when host header is localhost | 8.6CNA v3.1 | 0.7% | 2026-03-26 | Fix |
| CVE-2026-33658 | Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests | 2.3CNA v4.0 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-33653 | Uploady vulnerable to stored cross-site scripting (XSS) | 4.6CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33645 | Fireshare has path traversal arbitrary file write in `/API/uploadChunked` | 7.1CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33644 | Lychee has SSRF bypass | 2.3CNA v4.0 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33640 | Outline has a rate limit bypass that allows brute force of email login OTP | 9.1CNA v4.0 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33638 | Ech0 authenticated user-list exposed data via public `/API/allusers` endpoint | 5.3CNA v3.1 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-33636 | LIBPNG has ARM NEON Palette Expansion out-of-bounds read on AArch64 | 7.6CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33635 | iCalendar has ICS injection via unsanitized URI property values | 4.3CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33632 | ClearanceKit: Opfilter policy bypass via exchangedata and clone operations | 8.4CNA v4.0 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-33631 | ClearanceKit: Opfilter policy bypass via non-open file operations | 8.7CNA v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-33628 | Invoice Ninja Denylist Bypass may lead to stored XSS via Invoice Line Items | 5.4CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33623 | PinchTab: OS command injection | 6.7CNA v3.1 | 3.4% | 2026-03-26 | Fix |
| CVE-2026-33622 | A PinchTab Security Policy Bypass in /wait allows arbitrary JavaScript Execution | 6.1CNA v4.0 | 0.8% | 2026-03-26 | |
| CVE-2026-33621 | PinchTab: Unapplied Rate Limiting Middleware allows Unbounded brute-force of API Token | 4.8CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33620 | PinchTab: API Bearer Token Exposed in URL Query parameter via Server Logs and Intermediary Systems | 4.3CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33619 | PinchTab has unauthenticated blind SSRF in Task Scheduler via Unvalidated callbackUrl | 4.1CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33545 | MobSF has SQL injection in its SQLite Database Viewer Utils | 5.3CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33542 | Incus does not verify combined fingerprint when downloading images from simplestreams servers | 5.7CNA v4.0 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-33541 | WikiTide TSPortal user validation logic resource exhaustion | 6.5CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33537 | Lychee has SSRF bypass | 5.3CNA v4.0 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33536 | ImageMagick has an out-of-bounds write via InterpretImageFilename | 5.1CNA v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-33535 | ImageMagick has an out-of-bounds write of a zero byte in its X11 display interaction | 4.0CNA v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-33532 | yaml is vulnerable to stack overflow via deeply nested YAML collections | 4.3CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33531 | InvenTree has path traversal in Report templates | 4.9CNA v4.0 | 0.4% | 2026-03-26 | Exploit codeFix |
| CVE-2026-33530 | InvenTree vulnerable to ORM Filter injection | 7.7CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-33529 | Zoraxy: Authenticated path traversal in Config Import leads to RCE | 3.3CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33528 | GoDoxy has a path traversal vulnerability in its File API | 6.5CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33526 | Squid vulnerable to denial of service in ICP request handling | 9.2CNA v4.0 | 8.9% | 2026-03-26 | Fix |
| CVE-2026-33525 | Authelia login page template cross-site scripting | 0.5CNA v4.0 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33515 | Squid has issues in ICP message handling | 6.9CNA v4.0 | 2.2% | 2026-03-26 | Fix |
| CVE-2026-33506 | DOM-based XSS in Ory Polis Login page | 8.8CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33505 | Ory Keto has a SQL injection via forged pagination tokens | 7.2CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33504 | Ory Hydra has a SQL injection via forged pagination tokens | 7.2CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33503 | Ory Kratos has a SQL injection via forged pagination tokens | 7.2CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33496 | Ory Oathkeeper has an authentication bypass by cache key confusion | 8.1CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33495 | Ory Oathkeeper has an authentication bypass by usage of untrusted header | 6.5CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33494 | Ory Oathkeeper has a path traversal authorization bypass | 10.0CNA v3.1 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-33491 | zenc-lang zenc Zen-C has stack-based buffer overflow in Identifier Mangling | 7.8CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-33490 | h3js H3 mount path prefix matching vulnerability | 3.7CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33487 | goxmldsig has validateSignature Loop Variable Capture Signature Bypass | 7.5CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33486 | Roadiz has server-side request forgery (SSRF) in roadiz/documents | 6.8CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33481 | Syft improper temporary file cleanup | 5.3CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33477 | FileRise file snippet endpoint incorrect authorization | 4.3CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33470 | Frigate camera snapshot endpoint missing authorization | 6.5CNA v3.1 | 0.3% | 2026-03-26 | |
| CVE-2026-33469 | Authenticated Frigate users can read the full unredacted configuration via `/API/config/raw | 6.5CNA v3.1 | 0.4% | 2026-03-26 | |
| CVE-2026-33468 | Kysely has a MySQL SQL injection | 8.1CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33442 | Kysely has a MySQL SQL injection | 8.1CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33438 | Stirling-PDF vulnerable to DoS via add-watermark | 6.5CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-33430 | Briefcase: Windows MSI Installer privilege escalation via Insecure Directory Permissions | 7.3CNA v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-33416 | LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` | 7.5CNA v3.1 | 1.1% | 2026-03-26 | Fix |
| CVE-2026-33413 | Etcd: Authorization bypasses in multiple APIs | 8.8CNA v4.0 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33402 | SAK-52311: Sakai site-manage group titles can contain XSS content | 1.3CNA v4.0 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33397 | Angular SSR vulnerable to Protocol-Relative URL injection via Single Backslash Bypass | 6.9CNA v4.0 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33396 | HackerBay OneUptime synthetic monitor sandbox sandbox escape | 10.0CNA v3.1 | 0.8% | 2026-03-26 | Fix |
| CVE-2026-33375 | Grafana MSSQL Data Source Plugin: Restriction Bypass leading to OOM DoS | 6.5CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33343 | Etcd: Nested Etcd transactions bypass RBAC authorization checks | 0.0CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-33287 | LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern | 7.5CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33285 | LiquidJS: MemoryLimit Bypass through Negative Range Values leads to Process crash | 7.5CNA v3.1 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-33201 | GREEN HOUSE Digital Photo Frame GH-WDF10A active debug code | 7.0CNA v4.0 | 0.3% | 2026-03-26 | |
| CVE-2026-33183 | Saloon has a Fixture Name path traversal | 8.0CNA v4.0 | 0.7% | 2026-03-26 | Fix |
| CVE-2026-33182 | Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL | 6.6CNA v4.0 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33153 | Tandoor Recipes recipe API debug parameter information disclosure | 7.7CNA v4.0 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33152 | Tandoor Recipes vulnerable to Unrestricted brute-force via BasicAuthentication | 9.1CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33149 | Tandoor Recipes vulnerable to host header injection | 8.1CNA v3.1 | 0.4% | 2026-03-26 | |
| CVE-2026-33148 | Tandoor Recipes FDC food search API injection | 6.5CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-33015 | EVerest has RemoteStop Bypass via BCB Toggle Session Restart | 5.2CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-33014 | EVerest has Delayed Authorization Response Bypasses Termination after RemoteStop | 5.2CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-33009 | EVerest: MQTT Switch-Phases command data race causing Charger State Corruptio | 8.2CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-32857 | Firecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect Validation | 7.8CNA v4.0 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-32846 | OpenClaw Media Parsing path traversal to arbitrary file read | 7.5NVD v3.1 | 0.7% | 2026-03-26 | Fix |
| CVE-2026-32748 | Squid has denial of service in ICP Response handling | 8.7CNA v4.0 | 8.9% | 2026-03-26 | Fix |
| CVE-2026-32680 | RATOC RAID Monitoring Manager incorrect default permissions | 8.5CNA v4.0 | 0.2% | 2026-03-26 | |
| CVE-2026-32287 | Infinite loop in github.com/Antchfx/XPATH | 7.5CISA ADP v3.1 | 0.7% | 2026-03-26 | Fix |
| CVE-2026-32286 | Denial of service in github.com/jackc/Pgproto3/v2 | 7.5CISA ADP v3.1 | 0.7% | 2026-03-26 | Exploit codeFix |
| CVE-2026-32285 | Denial of service in github.com/buger/Jsonparser | 7.5CISA ADP v3.1 | 1.0% | 2026-03-26 | Fix |
| CVE-2026-32284 | Denial of service in github.com/Shamaton/Msgpack | 7.5CISA ADP v3.1 | 0.7% | 2026-03-26 | Fix |
| CVE-2026-30892 | Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation | 0.0CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-30463 | Thedaylightstudio Fuel CMS SQL injection | 7.7CISA ADP v3.1 | 0.3% | 2026-03-26 | |
| CVE-2026-30458 | Thedaylightstudio Fuel CMS unverified password change | 9.1CISA ADP v3.1 | 0.4% | 2026-03-26 | |
| CVE-2026-30457 | Thedaylightstudio Fuel CMS code injection | 9.8CISA ADP v3.1 | 0.8% | 2026-03-26 | |
| CVE-2026-30162 | Auntvt Timo cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-26 | |
| CVE-2026-29976 | Zerbea Hcxtools buffer overflow | 6.2CISA ADP v3.1 | 0.2% | 2026-03-26 | |
| CVE-2026-29969 | Workflowfirst Staffwiki wff_cols_pref.css.aspx endpoint cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2026-03-26 | |
| CVE-2026-29934 | Lightcms /admin/menus component reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-26 | |
| CVE-2026-29933 | YzmCMS /index/login.html component reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2026-03-26 | |
| CVE-2026-29905 | getkirby kirby unchecked return value | 6.5CISA ADP v3.1 | 0.6% | 2026-03-26 | |
| CVE-2026-29055 | Tandoor Recipes image upload EXIF handling vulnerability | 5.3CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-29044 | EVerest: Charging Continues when WithdrawAuthorization is Processed before TransactionStarted | 5.0CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-28760 | RATOC RAID Monitoring Manager uncontrolled search path | 8.4CNA v4.0 | 0.2% | 2026-03-26 | |
| CVE-2026-28503 | Tandoor Recipes SyncViewSet insecure direct object reference | 5.5CNA v4.0 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-28377 | Grafana Tempo S3 SSE-C Encryption Key Exposed in Plaintext via Config endpoint ( Pattern) | 7.5CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-28298 | SolarWinds Observability Self-Hosted stored cross-site scripting | 5.9CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-28297 | SolarWinds Observability Self-Hosted stored cross-site scripting | 6.1CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-27893 | VLLM's hard-coded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out | 8.8CNA v3.1 | 1.8% | 2026-03-26 | Fix |
| CVE-2026-27828 | EVerest: ISO15118 session_setup use-after-free can crash EVSE process | 5.5CNA v4.0 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-27816 | EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state | 5.5CNA v4.0 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-27815 | EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state | 5.5CNA v4.0 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-27814 | EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition | 4.2CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-27813 | EVerest has use-after-free in auth timeout timer via race condition | 5.3CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-27664 | Siemens CPCI85 Central Processing/Communication out-of-bounds write | 8.7CNA v4.0 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-27663 | Siemens CPCI85 Central Processing/Communication resource exhaustion | 7.1CNA v4.0 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-26213 | thingino-firmware api.cgi unauthenticated command injection in Captive portal | 9.8v3.1 | 4.1% | 2026-03-26 | Fix |
| CVE-2026-26074 | EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race | 7.0CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-26073 | EVerest: OCPP heap corruption caused by lock-free insertion in event_queue | 5.9CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-26072 | EVerest has race-condition-induced std::map corruption in OCPP evse_soc_map | 4.2CNA v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-26071 | EVerest: OCPP EVCCID data race leads to Heap Use‑After‑Free | 4.2CNA v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-26070 | EVerest: OCPP EV SoC Update Race causes Charge Point crash | 4.6CNA v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-26008 | EVerest has OOB via EVSE ID Indexing Mismatch in OCPP UpdateAllowedEnergyTransferModes | 7.5CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-24068 | Vienna Symphonic Library Vienna Assistant XPC helper tool missing authentication | 8.8CISA ADP v3.1 | 0.4% | 2026-03-26 | |
| CVE-2026-23995 | EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ | 8.4CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-23398 | Linux kernel ICMP PMTU error handling null pointer dereference | 5.5NVD v3.1 | 0.1% | 2026-03-26 | Exploit codeFix |
| CVE-2026-23397 | Linux kernel netfilter OS fingerprint matching out-of-bounds read | 7.1NVD v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-23396 | Linux kernel mac80211 null pointer dereference | 5.5NVD v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-22790 | EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload | 8.8CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-22593 | EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing | 8.4CNA v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-21724 | Grafana OSS Missing Protected-field Authorization in Provisioning Contact Points API | 5.4CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-4933 | Unpublished Node Permissions Critical Access bypass SA-CONTRIB-2026-029 | 7.5CISA ADP v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-4926 | path-to-regexp vulnerable to denial of service via sequential optional groups | 7.5CNA v3.1 | 0.9% | 2026-03-26 | Fix |
| CVE-2026-4923 | path-to-regexp vulnerable to regular expression denial of service via multiple wildcards | 5.9CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-4903 | Tenda AC5 POST Request QuickIndex formQuickIndex memory corruption | 8.7CNA v4.0 | 1.0% | 2026-03-26 | |
| CVE-2026-4902 | Tenda AC5 POST request addressNat fromAddressNat memory corruption | 8.7CNA v4.0 | 1.0% | 2026-03-26 | |
| CVE-2026-4900 | code-projects Online Food Ordering System localhost.sql privilege escalation | 6.9CNA v4.0 | 0.5% | 2026-03-26 | |
| CVE-2026-4899 | code-projects Online Food Ordering System food.php cross-site scripting | 4.8CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4898 | code-projects Online Food Ordering System contact.php cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4897 | Polkit: Polkit: Denial of service via unbounded input processing through standard input | 5.5CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-4887 | Gimp: Gimp:memory disclosure and denial of service via specially crafted pcx image | 7.1NVD v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-4877 | itsourcecode Payroll Management System index.php cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4876 | itsourcecode Free Hotel Reservation System index.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-03-26 | |
| CVE-2026-4875 | itsourcecode Free Hotel Reservation System index.php unrestricted upload | 5.1CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4874 | Keycloak server-side request forgery via OIDC token endpoint manipulation | 3.1CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-4867 | path-to-regexp vulnerable to regular expression denial of service via multiple route parameters | 7.5CNA v3.1 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-4862 | UTT HiPER 1250GW parameter formConfigDnsFilterGlobal strcpy buffer overflow | 8.7CNA v4.0 | 0.8% | 2026-03-26 | |
| CVE-2026-4861 | Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow | 8.7CNA v4.0 | 1.1% | 2026-03-26 | |
| CVE-2026-4860 | wvp-GB28181-pro RedisTemplateConfig deserialization of untrusted data | 6.9CNA v4.0 | 0.5% | 2026-03-26 | |
| CVE-2026-4850 | code-projects Simple Laundry System parameter checkregisitem.php SQL injection | 9.8v3.1 | 0.6% | 2026-03-26 | |
| CVE-2026-4849 | code-projects Simple Laundry System parameter modify.php cross-site scripting | 6.1v3.1 | 0.5% | 2026-03-26 | |
| CVE-2026-4848 | dameng100 muucmf list.html cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4847 | dameng100 muucmf list.html cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4846 | dameng100 muucmf autoReply.html cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4845 | dameng100 muucmf index.html cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4844 | code-projects Online Food Ordering System Admin Login admin.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4842 | itsourcecode Online Enrollment System parameter index.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4841 | code-projects Online Food Ordering System Shopping Cart cart.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4840 | Netcore Power 15AX Diagnostic tool netis.cgi setTools os command injection | 8.7CNA v4.0 | 3.8% | 2026-03-26 | |
| CVE-2026-4839 | SourceCodester Food Ordering System parameter purchase.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4838 | SourceCodester Malawi Online Market display.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4836 | code-projects Accounting System delete.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-03-26 | |
| CVE-2026-4835 | code-projects Accounting System Web application add_costumer.php cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-03-26 | |
| CVE-2026-4833 | Orc discount Markdown markdown.c compile recursion | 4.8CNA v4.0 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-4831 | kalcaddle kodbox Password-protected Share auth.class.php can improper authentication | 6.3CNA v4.0 | 0.6% | 2026-03-26 | |
| CVE-2026-4830 | kalcaddle kodbox Public Share userShare.class.php add privilege escalation | 6.3CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4826 | SourceCodester Sales and Inventory System HTTP GET parameter update_stock.php SQL injection | 8.8v3.1 | 0.5% | 2026-03-26 | |
| CVE-2026-4809 | Unsafe Client MIME Type Handling can Enable arbitrary file upload in plank/laravel-mediable | 9.3CNA v4.0 | 1.1% | 2026-03-26 | |
| CVE-2026-4758 | WP Job Portal WordPress plugin arbitrary file deletion | 8.8CNA v3.1 | 1.0% | 2026-03-26 | Fix |
| CVE-2026-4747 | FreeBSD remote code execution via RPCSEC_GSS packet validation | 8.8CISA ADP v3.1 | 1.1% | 2026-03-26 | Exploit codeFix |
| CVE-2026-4652 | FreeBSD remote denial of service via null pointer dereference | 7.5CISA ADP v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-4484 | Masteriyo LMS WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.5% | 2026-03-26 | Exploit codeFix |
| CVE-2026-4393 | Automated Logout Moderately critical cross-site request forgery SA-CONTRIB-2026-030 | 4.3CISA ADP v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-4389 | DSGVO snippet for Leaflet Map and its Extensions WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-4346 | TP-Link TL-WR850N serial interface cleartext storage of sensitive information | 5.1CNA v4.0 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-4335 | ShortPixel Image Optimizer WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-4331 | pr-gateway Blog2Social: Social Media Auto Post and Scheduler missing authorization | 4.3CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-4329 | Blackhole for Bad Bots WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-4281 | FormLift for Infusionsoft Web Forms WordPress plugin missing authorization | 5.3CNA v3.1 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-4278 | Simple Download Counter WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-4274 | Mattermost has an incorrect authorization issue | 5.4CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-4263 | Incorrect authorization in HiJiffy Chatbot | 6.9CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4262 | Incorrect authorization in HiJiffy Chatbot | 6.9CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-4247 | FreeBSD TCP: Remotely exploitable DoS vector (mbuf leak) | 7.5CISA ADP v3.1 | 1.4% | 2026-03-26 | Fix |
| CVE-2026-4075 | BWL Advanced FAQ Manager Lite WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-3650 | Grassroots DICOM missing release of memory after effective lifetime | 8.7CNA v4.0 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-3622 | Denial of service vulnerability in UPnP component of TP Link's TL-WR841N | 7.1CNA v4.0 | 0.7% | 2026-03-26 | Fix |
| CVE-2026-3573 | AI (Artificial Intelligence) Moderately critical information disclosure SA-CONTRIB-2026-028 | 7.5CISA ADP v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-3532 | OpenID Connect / OAuth client Less critical Access bypass SA-CONTRIB-2026-027 | 4.2v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-3531 | OpenID Connect / OAuth client Moderately critical Access bypass SA-CONTRIB-2026-026 | 6.5CISA ADP v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-3530 | Drupal OpenID Connect / OAuth client server-side request forgery | 4.3CISA ADP v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-3529 | Google Analytics GA4 Moderately critical cross-site scripting SA-CONTRIB-2026-024 | 6.1CISA ADP v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-3528 | Calculation Fields Moderately critical cross-site scripting SA-CONTRIB-2026-023 | 6.1CISA ADP v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-3527 | AJAX Dashboard Critical Access bypass SA-CONTRIB-2026-022 | 6.5CISA ADP v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-3526 | File Access Fix (deprecated) Moderately critical Access bypass SA-CONTRIB-2026-021 | 5.3CISA ADP v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-3525 | File Access Fix (deprecated) Moderately critical Access bypass SA-CONTRIB-2026-020 | 5.3CISA ADP v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-3328 | Frontend Admin by DynamiApps WordPress plugin PHP object injection | 7.2CNA v3.1 | 1.0% | 2026-03-26 | Fix |
| CVE-2026-3190 | Keycloak: Keycloak: Information disclosure via improper role enforcement in uma protection API | 4.3CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-3121 | Keycloak: Org.keycloak/keycloak-services: Keycloak: Privilege escalation | 6.5CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-3116 | Mattermost improper input validation in Zoom Plugin Webhook handler | 4.9CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-3115 | Mattermost guest users can view group member IDs without respecting view restrictions | 4.3CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-3114 | Mattermost zip bomb denial of service via Unrestricted Archive Decompression | 6.5CNA v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-3113 | Mattermost mmctl export download command doesn’t restrict permissions to created file to file owner | 5.0CNA v3.1 | 0.1% | 2026-03-26 | Fix |
| CVE-2026-3112 | Mattermost arbitrary file read via Advanced Logging Support Packet | 6.8CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-3109 | Mattermost missing timestamp validation in Zoom webhook handler | 2.2CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-3108 | Mattermost terminal Escape injection in mmctl Report Posts command | 8.0CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-2931 | Amelia Booking WordPress plugin insecure direct object reference to arbitrary user password Change | 8.8CNA v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-2511 | JS Help Desk AI-Powered Support and Ticketing System WordPress plugin unauthenticated SQL injection | 7.5CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-2436 | Libsoup: Libsoup: Denial of service via use-after-free in soupserver during TLS handshake | 8.2NVD v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-2389 | Complianz GDPR/CCPA Cookie Consent WordPress plugin stored cross-site scripting | 4.9CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-2272 | Gimp: Gimp: Memory corruption due to integer overflow in ico file handling | 6.5NVD v3.1 | 0.8% | 2026-03-26 | Fix |
| CVE-2026-2271 | Gimp: Gimp: Denial of service via crafted psp image file | 5.5NVD v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-2239 | Gimp: Gimp: Application crash (DoS) via crafted psd file due to heap-buffer-overflow | 6.5NVD v3.1 | 0.5% | 2026-03-26 | Fix |
| CVE-2026-2231 | Fluent Booking WordPress plugin unauthenticated stored cross-site scripting via Multiple parameters | 7.2CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-2100 | P11-kit: Null dereference via c_derivekey with specific null parameters | 7.5NVD v3.1 | 1.3% | 2026-03-26 | Fix |
| CVE-2026-1986 | FloristPress for Woo WordPress plugin reflected cross-site scripting via noresults parameter | 6.1CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-1961 | Red Hat Satellite forman: Foreman: Remote code execution via command injection in websocket proxy | 8.0CNA v3.1 | 1.9% | 2026-03-26 | Exploit codeFix |
| CVE-2026-1890 | LeadConnector WordPress plugin unauthenticated rest Call | 5.3CISA ADP v3.1 | 0.7% | 2026-03-26 | NucleiFix |
| CVE-2026-1556 | Information disclosure via file URI overwrite in File (Field) Paths | 6.9CNA v4.0 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-1430 | WP Lightbox 2 WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-1206 | Elementor Website Builder WordPress plugin incorrect authorization | 4.3CNA v3.1 | 0.3% | 2026-03-26 | Fix |
| CVE-2026-1032 | Conditional Menus WordPress plugin cross-site request forgery to Menu options update | 4.3CNA v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-0968 | Libssh: Libssh: Denial of service due to malformed sftp message | 3.1NVD v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-0967 | Libssh: Libssh: Denial of service via inefficient regular expression processing | 5.5NVD v3.1 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-0966 | Libssh: Libssh: Denial of service via zero-length input in ssh_get_hexa | 8.2NVD v3.1 | 0.6% | 2026-03-26 | Fix |
| CVE-2026-0965 | Libssh: Libssh: Denial of service via improper configuration file handling | 3.3CNA v3.0 | 0.2% | 2026-03-26 | Fix |
| CVE-2026-0964 | Libssh: Improper sanitation of paths received from scp servers | 6.3NVD v3.1 | 0.4% | 2026-03-26 | Fix |
| CVE-2026-0748 | Access bypass in Drupal 7 i18n_node translation UI | 5.3CNA v4.0 | 0.4% | 2026-03-26 | |
| CVE-2026-34085 | fontconfig off-by-one error | 7.8v3.1 | 0.1% | 2026-03-25 | Fix |
| CVE-2026-33913 | OpenEMR: XInclude injection in CCDA Import allows Reading arbitrary Server files | 7.7CNA v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-33912 | OpenEMR has reflected XSS in ajax_download.php via reportID parameter | 5.4CNA v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-33911 | OpenEMR vulnerable to reflected XSS in graphs.php via title parameter | 5.4CNA v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-33910 | OpenEMR has a SQL injection vulnerability in patient selection | 7.2CNA v3.1 | 0.6% | 2026-03-25 | Exploit codeFix |
| CVE-2026-33909 | OpenEMR vulnerable to SQL injection via Unsanitized variables in MedEx Recall/Reminder Processing | 5.9CNA v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-33809 | OOM from malicious IFD offset in golang.org/x/image/TIFF | 5.3CISA ADP v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-33751 | n8n vulnerable to LDAP Filter injection in LDAP Node | 6.3CNA v4.0 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-33749 | n8n vulnerable to XSS via Binary Data Inline HTML Rendering | 6.3CNA v4.0 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-33724 | N8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no | 6.3CNA v4.0 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-33722 | n8n has External Secrets authorization bypass in Credential Saving | 7.3CNA v4.0 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-33720 | n8n has authorization bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK | 6.3CNA v4.0 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-33713 | n8n vulnerable to SQL injection in Data Table Node via orderByColumn Expression | 8.7CNA v4.0 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-33696 | n8n Vulnerable to prototype pollution in XML and GSuiteAdmin node parameters lead to RCE | 9.4CNA v4.0 | 0.8% | 2026-03-25 | Fix |
| CVE-2026-33665 | n8n LDAP account linking improper authentication | 8.8CNA v4.0 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-33663 | n8n credential permission checker insecure direct object reference | 8.5CNA v4.0 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-33660 | n8n has multiple remote code execution vulnerabilities in Merge Node AlaSQL SQL Mode | 9.4CNA v4.0 | 0.9% | 2026-03-25 | Fix |
| CVE-2026-33348 | OpenEMR has stored XSS in patient encounter Eye Exam form $CHRONIC2 and $CHRONIC3 | 8.7CNA v3.1 | 1.0% | 2026-03-25 | Fix |
| CVE-2026-33268 | Nanoleaf Lines unauthenticated firmware file store | 6.9CNA v4.0 | 0.6% | 2026-03-25 | Fix |
| CVE-2026-33253 | SANYO DENKI SANUPS SOFTWARE unquoted search path | 8.4CNA v4.0 | 0.2% | 2026-03-25 | |
| CVE-2026-33249 | nats-io nats-server NATS: Message tracing can be redirected to arbitrary subject | 4.3CNA v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-33248 | nats-io nats-server NATS has mTLS verify_and_map authentication bypass | 4.2CNA v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-33247 | nats-io nats-server NATS credentials are exposed in monitoring port via command-line argv | 7.4CNA v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-33246 | nats-io nats-server NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers | 6.4CNA v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-33223 | NATS Server request header stripping vulnerability | 6.4CNA v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-33222 | nats-io nats-server NATS JetStream has an authorization bypass through its Management API | 4.9CNA v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-33219 | nats-io nats-server NATS is vulnerable to pre-auth DoS through WebSockets client service | 5.3CNA v3.1 | 1.0% | 2026-03-25 | Fix |
| CVE-2026-33218 | nats-io nats-server NATS has pre-auth server panic via leafnode handling | 7.5CNA v3.1 | 0.8% | 2026-03-25 | Fix |
| CVE-2026-33217 | nats-io nats-server NATS allows MQTT clients to bypass ACL checks | 7.1CNA v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-33216 | nats-io nats-server NATS has MQTT plaintext password disclosure | 8.6CNA v3.1 | 0.6% | 2026-03-25 | Fix |
| CVE-2026-32573 | Nelio AB Testing WordPress plugin remote code execution (RCE) | 9.1CISA ADP v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-32567 | YML for Yandex Market WordPress plugin arbitrary file deletion | 6.8CISA ADP v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-32562 | PPWP WordPress plugin broken access control | 5.4CISA ADP v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-32546 | StellarWP Restrict Content missing authorization | 7.5CISA ADP v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-32545 | Taboola Pixel WordPress plugin reflected cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32544 | OOPSpam Anti-Spam WordPress plugin cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32542 | Fusion Builder WordPress plugin reflected cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32541 | Premmerce Redirect Manager WordPress plugin broken access control | 6.5CISA ADP v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-32540 | Bookly WordPress plugin reflected cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32539 | PublishPress Revisions WordPress plugin SQL injection | 9.3CISA ADP v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-32538 | SMTP Mailer WordPress plugin sensitive data exposure | 7.5CISA ADP v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-32537 | Visual Portfolio, Photo Gallery and Post Grid WordPress plugin local file inclusion | 7.5CISA ADP v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-32536 | Green Downloads WordPress plugin arbitrary file upload | 9.9CISA ADP v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-32535 | JS Help Desk WordPress plugin insecure direct object references (IDOR) | 6.5CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32534 | JS Help Desk WordPress plugin SQL injection | 8.5CISA ADP v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-32533 | LatePoint WordPress plugin insecure direct object references (IDOR) | 6.5CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32532 | Contact Form and Lead Form Elementor Builder WordPress plugin cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32531 | Kunco WordPress theme local file inclusion | 8.1CISA ADP v3.1 | 0.6% | 2026-03-25 | Fix |
| CVE-2026-32530 | Creator LMS WordPress plugin privilege escalation | 8.8CISA ADP v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-32529 | Molla WordPress theme reflected cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32528 | Riode Multi-Purpose WooCommerce WordPress theme reflected cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32527 | CRM Perks WP Insightly for Contact Form 7 missing authorization | 6.5CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32526 | Abandoned Cart Recovery for WooCommerce WordPress plugin cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32525 | JetFormBuilder WordPress plugin remote code execution (RCE) | 9.9CISA ADP v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-32524 | Photo Engine WordPress plugin arbitrary file upload | 9.1CISA ADP v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-32523 | WPJAM Basic WordPress plugin arbitrary file upload | 9.9CISA ADP v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-32522 | WooCommerce Support Ticket System WordPress plugin arbitrary file deletion | 8.6CISA ADP v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-32521 | WP Custom Admin Interface WordPress plugin cross-site scripting (XSS) | 6.5CISA ADP v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-32520 | RewardsWP WordPress plugin privilege escalation | 9.8CISA ADP v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-32519 | Bit SMTP WordPress plugin broken authentication | 9.0CISA ADP v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-32518 | Gaea WordPress theme reflected cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32517 | Contact Manager WordPress plugin reflected cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32516 | Miraculous Core WordPress plugin SQL injection | 8.5CISA ADP v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-32515 | Miraculous WordPress theme broken access control | 7.5CISA ADP v3.1 | 0.4% | 2026-03-25 | Fix |
| CVE-2026-32514 | Petitioner WordPress plugin broken access control | 6.5CISA ADP v3.1 | 0.3% | 2026-03-25 | Fix |
| CVE-2026-32513 | JS Archive List WordPress plugin PHP object injection | 8.8CISA ADP v3.1 | 0.5% | 2026-03-25 | Fix |
| CVE-2026-32512 | Pelicula WordPress theme PHP object injection | 9.8CISA ADP v3.1 | 0.6% | 2026-03-25 | Fix |
| CVE-2026-32511 | Stål WordPress theme arbitrary object Instantiation vulnerability | 5.4CISA ADP v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-32510 | Kamperen WordPress theme arbitrary object Instantiation vulnerability | 5.4CISA ADP v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-32509 | Gracey WordPress theme arbitrary object Instantiation vulnerability | 5.4CISA ADP v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-32508 | Halstein WordPress theme arbitrary object Instantiation vulnerability | 5.4CISA ADP v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-32507 | Leroux WordPress theme arbitrary object Instantiation vulnerability | 5.4CISA ADP v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-32506 | Archicon WordPress theme arbitrary object Instantiation vulnerability | 5.4CISA ADP v3.1 | 0.2% | 2026-03-25 | Fix |
| CVE-2026-32505 | Kiddy WordPress theme local file inclusion | 8.1CISA ADP v3.1 | 0.6% | 2026-03-25 | Fix |
| CVE-2026-32504 | VintWood WordPress theme local file inclusion | 8.1CISA ADP v3.1 | 0.6% | 2026-03-25 | Fix |
| CVE-2026-32503 | Trendustry WordPress theme local file inclusion | 8.1CISA ADP v3.1 | 0.6% | 2026-03-25 | Fix |
| CVE-2026-32502 | Borgholm WordPress theme PHP object injection | 9.8CISA ADP v3.1 | 0.6% | 2026-03-25 | Fix |