CVE-2026 list

CVE-2026 records published in March 2026

Page four of six: records 3,001 to 4,000 of the 5,228 published in March 2026, newest first. The first page carries the figures for March 2026.

CVE-2026 records published in March 2026, newest first: records 3,001 to 4,000 of 5,228
CVE Summary CVSS EPSS Published Signals
CVE-2026-3111Educativa Campus insecure direct object reference6.9CNA v4.00.4%2026-03-16Fix
CVE-2026-3110Educativa Campus insecure direct object reference8.7CNA v4.00.4%2026-03-16Fix
CVE-2026-3024Stored cross-site scripting (XSS) vulnerability in the Wakyma application web5.4v3.10.2%2026-03-16Fix
CVE-2026-3023Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web8.8v3.10.4%2026-03-16Fix
CVE-2026-3022Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web6.5NVD v3.10.4%2026-03-16Fix
CVE-2026-3021Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web6.5NVD v3.10.4%2026-03-16Fix
CVE-2026-3020Identity based authorization bypass vulnerability (IDOR) in the Wakyma application web8.6CNA v4.00.4%2026-03-16Fix
CVE-2026-2578Mattermost information disclosure via WebSocket Event when Deleting Unrevealed Burn on Read Posts4.3CNA v3.10.3%2026-03-16Fix
CVE-2026-2493IceWarp collaboration directory traversal information disclosure7.5CNA v3.03.9%2026-03-16
CVE-2026-2491Socomec DIRIS A-40 HTTP API authentication bypass6.3CNA v3.00.4%2026-03-16Fix
CVE-2026-2476Mattermost MS Teams plugin sensitive config values not properly masked in support packets7.6CNA v3.10.2%2026-03-16Fix
CVE-2026-2463Mattermost unauthorized access to invite ID during team creation4.3CNA v3.10.2%2026-03-16Fix
CVE-2026-2462Mattermost admin RCE via Malicious plugin upload on CI Test Instances6.6CNA v3.10.3%2026-03-16Fix
CVE-2026-2461Mattermost Boards plugin fails to implement authorisation checks on comment block modifications4.3CNA v3.10.2%2026-03-16Exploit codeFix
CVE-2026-2458Mattermost unauthorized channel enumeration in private teams after member removal4.3CNA v3.10.2%2026-03-16Fix
CVE-2026-2457Mattermost WebSocket message spoofing via Permalink Embed Manipulation4.3CNA v3.10.1%2026-03-16Fix
CVE-2026-2456Mattermost denial of service via Unbounded Memory Allocation in Integration Actions5.3CNA v3.10.2%2026-03-16Fix
CVE-2026-2455Mattermost SSRF bypass via IPv4-mapped IPv6 literals4.3CNA v3.10.2%2026-03-16Fix
CVE-2026-2454Mattermost DoS in Calls plugin via malformed msgpack in websocket request5.8CNA v3.10.3%2026-03-16Fix
CVE-2026-2233User Frontend: AI Powered Frontend Posting WordPress plugin unauthorized access5.3CNA v3.10.2%2026-03-16Fix
CVE-2026-1948NEX-Forms WordPress plugin unauthorized access4.3CNA v3.10.2%2026-03-16Fix
CVE-2026-1947NEX-Forms WordPress plugin insecure direct object reference7.5CNA v3.10.3%2026-03-16Fix
CVE-2026-1883Wicked Folders WordPress plugin insecure direct object reference4.3CNA v3.10.2%2026-03-16Fix
CVE-2026-1870Thim Kit for Elementor WordPress plugin unauthorized access5.3CNA v3.10.3%2026-03-16Fix
CVE-2026-1629Mattermost Permalink Preview information disclosure after Permission Revocation4.3CNA v3.10.2%2026-03-16Fix
CVE-2026-0977IBM CICS Transaction Gateway for Multiplatforms information disclosure5.1CNA v3.10.2%2026-03-16Fix
CVE-2026-0639OpenHarmony liteos_a has a missing release of memory vulnerability3.3CNA v3.10.2%2026-03-16Fix
CVE-2026-3442Binutils: GNU Binutils: Information disclosure or denial of service7.1NVD v3.10.2%2026-03-15Fix
CVE-2026-3441Binutils: GNU Binutils: Information disclosure via specially crafted xcoff object file7.1NVD v3.10.2%2026-03-15Fix
CVE-2026-32774Vulnogram stored cross-site scripting via Comment Hypertext5.4NVD v3.10.3%2026-03-14
CVE-2026-4179zephyrproject-rtos Zephyr stm32: Usb: Infinite while loop in Interrupt handler6.1CNA v3.10.2%2026-03-14
CVE-2026-0849zephyrproject-rtos Zephyr crypto: ATAES132A response length allows stack buffer overflow3.8CNA v3.10.2%2026-03-14
CVE-2026-32746GNU InetUtils buffer overflow9.8CNA v3.12.4%2026-03-13Emerging ThreatsExploit codeFix
CVE-2026-32745JetBrains Datalore sensitive cookie without the Secure attribute6.3CNA v3.10.2%2026-03-13Fix
CVE-2026-32640SimpleEval: Objects can leak dangerous modules through to direct access inside the sandbox8.7CNA v4.00.8%2026-03-13Fix
CVE-2026-32612Statamic: Privilege escalation via stored cross-site scripting5.4CNA v3.10.3%2026-03-13Fix
CVE-2026-32598OneUptime: Password Reset Token Logged at INFO Level6.9CNA v4.00.3%2026-03-13Fix
CVE-2026-32543Responsive Blocks WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32487Lawyer Landing Page WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32486Travel Booking WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32462Master Addons for Elementor WordPress plugin cross-site scripting (XSS)5.9CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32461Really Simple SSL WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32460Ultimate Addons for Contact Form 7 WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32459UpsellWP WordPress plugin SQL injection8.5CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-32458WOLF WordPress plugin SQL injection7.6CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-32457Advanced Product Fields (Product Addons) for WooCommerce WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32456Admin Menu Editor WordPress plugin cross-site request forgery (CSRF)4.3CISA ADP v3.10.1%2026-03-13Fix
CVE-2026-32455MDTF WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32454Avada Core WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32453Avada Core WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32452Fusion Builder WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32451Fusion Builder WordPress plugin broken access control6.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32450Active Products Tables for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32449Themify Event Post WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32448Podlove Podcast Publisher WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32447Atarim WordPress plugin broken access control4.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32446Contact Form by WPForms WordPress plugin broken access control4.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32445Elementor Website Builder WordPress plugin broken access control2.7CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32443Product Feed PRO for WooCommerce WordPress plugin cross-site request forgery (CSRF)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32442e2pdf WordPress plugin broken access control4.3CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32440WP Food WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32439BigHearts WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32438VW School Education WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32437VW Portfolio WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32436VW Photography WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32435VW Pet Shop WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32434VW Fitness WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32433CP Contact Form with Paypal WordPress plugin SQL injection8.5CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-32432WP Time Slots Booking Form WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32431Astra Bulk Edit WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32430PowerPack Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32429Magical Addons For Elementor WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32428Popup Like box WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32427VW Education Lite WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32426Medilazar Core WordPress plugin local file inclusion7.5CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-32425Payment Gateway Pix For GiveWP WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32424Sprout Clients WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32423Admin and Site Enhancements (ASE) WordPress plugin broken access control5.4CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32422WP EasyCart WordPress plugin SQL injection8.5CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-32421Post Timeline WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32420GamiPress WordPress plugin cross-site request forgery (CSRF)5.4CISA ADP v3.10.1%2026-03-13Fix
CVE-2026-32419List category posts WordPress plugin cross-site scripting (XSS)5.9CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32418Meow Gallery WordPress plugin SQL injection7.6CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-32417Pochipp WordPress plugin broken access control5.4CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32416PDF Poster WordPress plugin broken access control5.4CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32415Squeeze WordPress plugin directory traversal5.0CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32414Advanced Woo Labels WordPress plugin remote code execution (RCE)7.2CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-32413Permalink Manager Lite WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32412Gift Up Gift Cards for WordPress and WooCommerce plugin server side request forgery (SSRF)5.4CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32411Embed Calendly WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32410WBW Currency Switcher for WooCommerce WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32409Forminator WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32408Brizy WordPress plugin broken access control4.3CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32407WPC Smart Wishlist for WooCommerce WordPress plugin broken access control4.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32406WPC Product Bundles for WooCommerce WordPress plugin broken access control4.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32405WoodMart WordPress theme sensitive data exposure5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32404Studio99 WP Monitor WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32403Toocheke Companion WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32402Image Slider by Ays WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32401Client Invoicing by Sprout Invoices WordPress plugin local file inclusion7.2CISA ADP v3.10.6%2026-03-13Fix
CVE-2026-32400Boldman WordPress theme local file inclusion7.5CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-32399Media LIbrary Assistant WordPress plugin SQL injection8.5CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-32398TeraWallet For WooCommerce WordPress plugin race condition5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32397Filter and Grids WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32396RadiusTheme Team missing authorization5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32395Xpro Addons For Beaver Builder Lite WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32394PublishPress Capabilities WordPress plugin broken access control4.3CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32393Greenly Theme Addons WordPress plugin local file inclusion7.5CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-32392Greenly WordPress theme local file inclusion7.5CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-32391SmartFix WordPress theme broken access control5.4CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32390Nanosoft WordPress theme broken access control5.4CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32388GLB WordPress theme broken access control5.4CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32387Checkout for PayPal WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32386Envo Extra WordPress plugin broken access control5.4CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32385RegistrationMagic WordPress plugin broken access control5.4CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32384WpBookingly WordPress plugin local file inclusion7.5CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-32383Ridhi WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32382Digital Download WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32381App Landing Page WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32380Numinous WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32379Rara Academic WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32378Book Landing Page WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32377Pranayama Yoga WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32376Kalon WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32375Travel Diaries WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32374The Minimal WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32373SMS Alert Order Notifications WordPress plugin broken access control5.4CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32372ShopBuilder Elementor WooCommerce Builder Addons WordPress plugin sensitive data exposure5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32371Elegant Pink WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32370Influencer WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32369Medilink-Core WordPress plugin local file inclusion7.5CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-32368Geo to Lat WordPress plugin SQL injection8.5CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-32367Modal Dialog WordPress plugin remote code execution (RCE)9.1CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-32366Collapsing Categories WordPress plugin SQL injection8.5CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-32365Collapsing Archives WordPress plugin SQL injection8.5CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-32364Turbo Manager WordPress plugin local file inclusion7.5CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-32363WPLifeCycle WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32362WP Sessions Time Monitoring Full Automatic WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32361Editorial Calendar WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32360Rich Showcase for Google Reviews WordPress plugin cross-site scripting (XSS)5.9CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32359Icon List Block WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32358Booking Calendar WordPress plugin SQL injection7.6CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-32357Simple Blog Card WordPress plugin server side request forgery (SSRF)6.4CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32356Robo Gallery WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32355JetEngine WordPress plugin deserialization of untrusted data8.8CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-32354WpEvently WordPress plugin sensitive data exposure5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32353MailerPress WordPress plugin server side request forgery (SSRF)6.4CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32352Elementor Website Builder WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32351PowerPress Podcasting WordPress plugin cross-site scripting (XSS)5.9CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32350Chocolate House WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32349Embed PDF Viewer WordPress plugin server side request forgery (SSRF)4.9CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-32348MAS Videos WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32347Restaurant and Cafe WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32346Travel Agency WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32345Perfect Portfolio WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32344Corpiva WordPress theme cross-site request forgery (CSRF)4.3CISA ADP v3.10.1%2026-03-13Fix
CVE-2026-32343Easy Table of Contents WordPress plugin cross-site request forgery (CSRF)4.3CISA ADP v3.10.1%2026-03-13Fix
CVE-2026-32342Quiz Maker WordPress plugin cross-site request forgery (CSRF)4.3CISA ADP v3.10.1%2026-03-13Fix
CVE-2026-32341Benevolent WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32340Business One Page WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32339Bakes And Cakes WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32338Construction Landing Page WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32337Preschool and Kindergarten WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32336Rara Business WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32335The Conference WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32334JobScout WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32332Easy Form WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32331Textmetrics WordPress plugin broken access control4.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32330Photo Gallery by 10Web WordPress plugin cross-site request forgery (CSRF)4.3CISA ADP v3.10.1%2026-03-13Fix
CVE-2026-32329Advanced Related Posts WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-32328Lemmony WordPress theme cross-site request forgery (CSRF)5.4CISA ADP v3.10.1%2026-03-13Fix
CVE-2026-32322stellar rs-soroban-sdk soroban-sdk: `Fr` scalar field equality comparison bypasses modular reduction5.3CNA v3.10.3%2026-03-13Fix
CVE-2026-32320Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings6.5CNA v3.10.3%2026-03-13Fix
CVE-2026-32319Ella Core: Unauthenticated AMF DoS7.5CNA v3.10.5%2026-03-13Fix
CVE-2026-32308OneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: Loose)7.6CNA v3.10.3%2026-03-13Fix
CVE-2026-32306OneUptime ClickHouse SQL injection via Aggregate Query parameters10.0CNA v3.10.7%2026-03-13Fix
CVE-2026-32302OpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy mode8.1CNA v3.10.2%2026-03-13Fix
CVE-2026-32301Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL9.3CNA v3.10.4%2026-03-13Fix
CVE-2026-31949LibreChat denial of service (DoS) via unhandled exception in delete /API/convos6.5CNA v3.10.5%2026-03-13Fix
CVE-2026-31944LibreChat MCP OAuth callback does not validate browser session allows token theft via redirect link7.6CNA v3.10.3%2026-03-13
CVE-2026-31922Fox LMS WordPress plugin SQL injection8.5CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-31919Advanced Coupons for WooCommerce Coupons WordPress plugin broken access control4.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-31918immonex Kickstart WordPress plugin cross-site scripting (XSS)6.5CISA ADP v3.10.2%2026-03-13Fix
CVE-2026-31917WP ERP WordPress plugin SQL injection8.5CISA ADP v3.10.4%2026-03-13Fix
CVE-2026-31916Latest Post Shortcode WordPress plugin broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-31915Flatsome WordPress theme broken access control5.3CISA ADP v3.10.3%2026-03-13Fix
CVE-2026-31899Kozea CairoSVG SVG use element handling uncontrolled recursion7.5CNA v3.10.5%2026-03-13Exploit codeFix
CVE-2026-31897FreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar`0.0CNA v3.10.4%2026-03-13Fix
CVE-2026-31886Dagu has a path traversal via `dagRunId` in Inline DAG Execution9.1CNA v3.10.5%2026-03-13Fix
CVE-2026-31885FreeRDP ADPCM decoder out-of-bounds read6.5CNA v3.10.3%2026-03-13Fix
CVE-2026-31884FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 06.5CNA v3.10.3%2026-03-13Fix
CVE-2026-31883FreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write6.5CNA v3.10.3%2026-03-13Fix
CVE-2026-31882Dagu SSE authentication bypass in Basic Auth Mode7.5CNA v3.10.7%2026-03-13Fix
CVE-2026-31864JumpServer has a server-side template injection leading to RCE via YAML Rendering6.8CNA v3.10.5%2026-03-13Fix
CVE-2026-31814Yamux remote panic via malformed WindowUpdate credit8.7CNA v4.00.6%2026-03-13Fix
CVE-2026-31806FreeRDP has a heap buffer overflow in nsc_process_message9.3CNA v4.00.7%2026-03-13Fix
CVE-2026-31798JumpServer improper certificate validation in Custom SMS API client5.0CNA v3.10.1%2026-03-13Fix
CVE-2026-30961Gokapi's file Request MaxSize Limit Bypassed via Multi-Chunk upload4.3CNA v3.10.3%2026-03-13Fix
CVE-2026-30955Gokapi vulnerable to DoS in E2E Metadata parser6.5CNA v3.10.3%2026-03-13Fix
CVE-2026-30943Gokapi has privilege escalation in File Replace4.1CNA v3.10.2%2026-03-13Fix
CVE-2026-30915SFTPGo improperly sanitizes placeholders in group home directories/key prefixes5.3CNA v4.00.3%2026-03-13Fix
CVE-2026-30914SFTPGo has a path traversal and permission bypass via Path Normalization Discrepancy5.3CNA v4.00.6%2026-03-13Fix
CVE-2026-30853calibre has a path traversal leading to arbitrary file write5.0CNA v3.10.2%2026-03-13Fix
CVE-2026-29776FreeRDP cache bitmap order parsing integer underflow3.1CNA v3.10.3%2026-03-13Fix
CVE-2026-29775FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId5.3CNA v3.10.3%2026-03-13Fix
CVE-2026-29774FreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects5.3CNA v3.10.5%2026-03-13Fix
CVE-2026-29079Type confusion in Lexbor Fragment parser8.2CNA v4.00.5%2026-03-13Fix
CVE-2026-29078Integer underflow in Lexbor ISO‑2022‑JP Encoder8.2CNA v4.00.5%2026-03-13Fix
CVE-2026-26954SandboxJS has a sandbox escape10.0CNA v3.10.6%2026-03-13Fix
CVE-2026-26133M365 Copilot information disclosure7.1CNA v3.10.5%2026-03-13Fix
CVE-2026-25823HMS Networks Ewon Flexy and Cosy+ stack-based buffer overflow9.8CISA ADP v3.10.9%2026-03-13
CVE-2026-25819HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attackers to cause a Denial of Service by using a specially crafted HTTP request that leads to a reboot of the device, provided they have a7.5CISA ADP v3.10.6%2026-03-13
CVE-2026-25818HMS Networks Ewon Flexy and Cosy+ authentication cookies vulnerability9.1CISA ADP v3.10.2%2026-03-13
CVE-2026-25817HMS Networks Ewon Flexy and Cosy+ OS command injection8.8CISA ADP v3.10.9%2026-03-13
CVE-2026-25076Anchore Enterprise GraphQL Reports API SQL injection8.5CNA v4.00.3%2026-03-13Fix
CVE-2026-24097Checkmk improper permissions5.3CNA v4.00.2%2026-03-13Fix
CVE-2026-23943Pre-auth SSH DoS via unbounded zlib inflate6.9CNA v4.00.6%2026-03-13Fix
CVE-2026-23942Erlang OTP SFTP root escape via component-agnostic prefix check in ssh_sftpd5.3CNA v4.00.4%2026-03-13Fix
CVE-2026-23941Request smuggling via first-wins Content-Length parsing in inets httpd7.0CNA v4.00.5%2026-03-13Fix
CVE-2026-23940hexpm denial of service via Oversized Package upload7.1CNA v4.00.4%2026-03-13Fix
CVE-2026-22216wpDiscuz no Rate Limiting on Subscription endpoints with LIKE Wildcard Bypass5.3v3.10.3%2026-03-13Fix
CVE-2026-22215wpDiscuz missing CSRF Protection on wpdGetFollowsPage5.4v3.10.2%2026-03-13Fix
CVE-2026-22210wpDiscuz cross-site scripting via Unescaped Attachment URLs6.1v3.10.2%2026-03-13Fix
CVE-2026-22209wpDiscuz cross-site scripting via Unescaped Custom CSS in Style Tag4.8NVD v3.10.2%2026-03-13Fix
CVE-2026-22204wpDiscuz Unsanitized Cookie Email Used as wp_mail Recipient5.3v3.10.2%2026-03-13Fix
CVE-2026-22203wpDiscuz options export leaks oauth secrets in Plaintext6.9CNA v4.00.3%2026-03-13Fix
CVE-2026-22202wpDiscuz Destructive GET Action Deletes All Comments by Email6.5NVD v3.10.2%2026-03-13Fix
CVE-2026-22201wpDiscuz IP Address spoofing in getIP6.9CNA v4.00.2%2026-03-13Fix
CVE-2026-22199Voltronic Power SNMP Web Pro path traversal via upload.cgi8.7CNA v4.01.0%2026-03-13
CVE-2026-22193wpDiscuz SQL injection in getAllSubscriptions7.5NVD v3.10.3%2026-03-13Fix
CVE-2026-22192Voltronic Power SNMP Web Pro authentication bypass via localStorage5.4NVD v3.10.3%2026-03-13
CVE-2026-22191Beghelli Sicuro24 SicuroWeb AngularJS template injection5.1CNA v4.00.4%2026-03-13
CVE-2026-22183wpDiscuz stored cross-site scripting in Inline Comment Preview5.4v3.10.2%2026-03-13Fix
CVE-2026-22182wpDiscuz Unauthenticated Email Notification Flood via wpdCheckNotificationType8.7CNA v4.00.5%2026-03-13Fix
CVE-2026-4111Red Hat Enterprise Linux 10 libarchive: Infinite loop denial of service in rar5 decompression7.5CNA v3.10.7%2026-03-13Fix
CVE-2026-4105Red Hat Hardened Images systemd: Systemd: Privilege escalation6.7CNA v3.10.1%2026-03-13Fix
CVE-2026-4092Arbitrary file write via path traversal in Google Clasp leading to RCE8.7CNA v4.00.6%2026-03-13Fix
CVE-2026-4063Social Icons Widget and Block by WPZOOM WordPress plugin unauthorized data modification4.3CNA v3.10.3%2026-03-13Fix
CVE-2026-3999Broken access control vulnerability affecting ID Server8.8v3.10.4%2026-03-13Fix
CVE-2026-3986Calculated Fields Form WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-03-13Fix
CVE-2026-3910Google Chromium V8 improper restriction of operations within the bounds of a memory buffer8.8v3.12.0%2026-03-13KEVFix
CVE-2026-3909Google Skia out-of-bounds write8.8v3.11.6%2026-03-13KEVExploit codeFix
CVE-2026-3891Pix for WooCommerce WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.129.7%2026-03-13NucleiMetasploitExploit codeFix
CVE-2026-3873syslink software Avantra legacy built-in user account7.2CNA v3.10.3%2026-03-13Fix
CVE-2026-3086GStreamer H.266 Codec parser out-of-bounds write remote code execution7.8CNA v3.00.3%2026-03-13Fix
CVE-2026-3085GStreamer rtpqdm2depay heap-based buffer overflow remote code execution8.8CNA v3.01.2%2026-03-13Fix
CVE-2026-3084GStreamer H.266 Codec parser integer underflow remote code execution7.8CNA v3.00.3%2026-03-13Fix
CVE-2026-3083GStreamer rtpqdm2depay out-of-bounds write remote code execution8.8CNA v3.01.1%2026-03-13Fix
CVE-2026-3082GStreamer JPEG parser heap-based buffer overflow remote code execution7.8CNA v3.00.4%2026-03-13Fix
CVE-2026-3081GStreamer H.266 Codec parser stack-based buffer overflow remote code execution7.8CNA v3.00.3%2026-03-13Fix
CVE-2026-3045Appointment Booking Calendar WordPress plugin unauthorized access7.5CNA v3.10.5%2026-03-13Fix
CVE-2026-2923GStreamer DVB Subtitles out-of-bounds write remote code execution7.8CNA v3.00.3%2026-03-13Fix
CVE-2026-2922GStreamer RealMedia Demuxer out-of-bounds write remote code execution7.8CNA v3.00.3%2026-03-13Fix
CVE-2026-2921GStreamer RIFF Palette integer overflow remote code execution7.8CNA v3.00.4%2026-03-13Fix
CVE-2026-2920GStreamer ASF Demuxer heap-based buffer overflow remote code execution7.8CNA v3.00.4%2026-03-13Fix
CVE-2026-2890Formidable Forms WordPress plugin missing authorization unauthenticated Payment Integrity bypass7.5CNA v3.10.5%2026-03-13Fix
CVE-2026-2888Formidable Forms WordPress plugin insecure direct object reference5.3CNA v3.10.4%2026-03-13Fix
CVE-2026-2879GetGenie WordPress plugin insecure direct object reference5.4CNA v3.10.4%2026-03-13Fix
CVE-2026-2859Checkmk improper permissions6.3CNA v4.00.3%2026-03-13Fix
CVE-2026-2673OpenSSL TLS 1.3 server may choose unexpected key agreement group6.5CISA ADP v3.10.5%2026-03-13Fix
CVE-2026-2257GetGenie WordPress plugin insecure direct object reference6.4CNA v3.10.2%2026-03-13Fix
CVE-2026-1704Appointment Booking Calendar WordPress plugin insecure direct object reference4.3CNA v3.10.2%2026-03-13Fix
CVE-2026-1668TP-Link Systems SG2008P input validation vulnerability on multiple Omada Switches7.7CNA v4.01.0%2026-03-13Exploit codeFix
CVE-2026-0957Out-of-bounds write in Digilent DASYLab8.5CNA v4.00.2%2026-03-13Fix
CVE-2026-0956Out-of-bounds read in Digilent DASYLab8.5CNA v4.00.2%2026-03-13Fix
CVE-2026-0955Out-of-bounds read when Opening a Corrupt file in Digilent DASYLab8.5CNA v4.00.2%2026-03-13Fix
CVE-2026-0954Out-of-bounds write when Opening a Corrupt DSB file in Digilent DASYLab8.5CNA v4.00.2%2026-03-13Fix
CVE-2026-0835IBM Sterling B2B Integrator cross-site scripting5.4CNA v3.10.2%2026-03-13Fix
CVE-2026-0385Microsoft Edge (Chromium-based) for Android spoofing5.0CNA v3.10.2%2026-03-13Fix
CVE-2026-32597PyJWT accepts unknown `crit` header extensions (RFC 7515 § MUST violation)7.5CNA v3.10.3%2026-03-12Fix
CVE-2026-32304Locutus: RCE via unsanitized input in create_function9.8CNA v3.10.8%2026-03-12Fix
CVE-2026-32274Black: Arbitrary file writes from unsanitized user input in cache file name8.7CNA v4.00.7%2026-03-12Fix
CVE-2026-32269Parse Platform Parse Server OAuth2 authentication adapter vulnerability6.3CNA v4.00.4%2026-03-12Fix
CVE-2026-32260denoland deno command injection8.1CNA v3.12.0%2026-03-12Fix
CVE-2026-32259ImageMagick has a possible stack buffer overflow in sixel encoder6.7CNA v3.10.1%2026-03-12Fix
CVE-2026-32251Tolgee has an XXE injection in Translation Import9.3CNA v4.00.4%2026-03-12Fix
CVE-2026-32249NFA regex engine null pointer dereference affects Vim5.3CNA v3.10.2%2026-03-12Fix
CVE-2026-32248parse-community parse-server parse Server: Account takeover9.3CNA v4.00.9%2026-03-12Fix
CVE-2026-32247Graphiti vulnerable to Cypher injection via unsanitized node_labels in search filters8.1CNA v3.10.5%2026-03-12Exploit codeFix
CVE-2026-32246Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint8.5CNA v3.10.4%2026-03-12Fix
CVE-2026-32245Tinyauth's OIDC authorization codes are not bound to client on token exchange6.5CNA v3.10.3%2026-03-12Fix
CVE-2026-32242Parse Platform Parse Server OAuth2 authentication adapter race condition9.1CNA v4.00.4%2026-03-12Fix
CVE-2026-32240capnproto cap'n Proto: Integer overflow in KJ-HTTP chunk size6.3CNA v4.00.4%2026-03-12Fix
CVE-2026-32239capnproto cap'n Proto has an integer overflow in KJ-HTTP6.3CNA v4.00.4%2026-03-12Fix
CVE-2026-32237Backstage scaffolder dry-run endpoint information disclosure4.4CNA v3.10.4%2026-03-12Fix
CVE-2026-32236@backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch1.7CNA v4.00.5%2026-03-12Fix
CVE-2026-32235@backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass5.9CNA v3.10.2%2026-03-12Fix
CVE-2026-32232ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink8.8CNA v4.00.8%2026-03-12Fix
CVE-2026-32231ZeptoClaw webhook channel missing authentication8.2CNA v3.10.2%2026-03-12Fix
CVE-2026-32230Uptime Kuma ping badge endpoint missing authorization5.3CNA v3.10.9%2026-03-12NucleiFix
CVE-2026-32142Shopware/commercial: `/API/_info/config` route exposes information about licenses5.3CNA v3.10.3%2026-03-12Fix
CVE-2026-32141flatted vulnerable to unbounded recursion DoS in parse revive phase7.5CNA v3.11.0%2026-03-12Fix
CVE-2026-32140Dataease: Redshift JDBC RCE Bypass9.3CNA v4.00.9%2026-03-12Fix
CVE-2026-32139Dataease: Unfiltered active SVG content leads to stored XSS5.3CNA v4.00.3%2026-03-12Fix
CVE-2026-32138Stalin-143 website NEXULEAN API key leak8.2CNA v3.10.4%2026-03-12Fix
CVE-2026-32137DataEase SQL injection9.3CNA v4.00.6%2026-03-12Fix
CVE-2026-32129stellar rs-soroban-poseidon poseidon V1 variable-length input collision via implicit zero-padding8.7CNA v4.00.3%2026-03-12Fix
CVE-2026-32116magic-wormhole magic Wormhole: Wormhole receive allows arbitrary local file overwrite8.2CNA v4.00.5%2026-03-12Fix
CVE-2026-32100swag platform-security information disclosure5.3CNA v3.10.3%2026-03-12Fix
CVE-2026-31890inspektor-gadget Inspektor Gadget: Tracing denial of service via Event Flooding4.8CNA v4.00.1%2026-03-12Fix
CVE-2026-31873Unhead has a Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity0.0CNA v3.10.3%2026-03-12Fix
CVE-2026-31860Unhead has a XSS bypass in `useHeadSafe`5.3CNA v4.00.3%2026-03-12Fix
CVE-2026-31841Raw exposure of database statements in Hyperterse MCP search tool6.5CNA v3.10.3%2026-03-12Fix
CVE-2026-29066Arbitrary file read via Disabled Vite Filesystem Restriction in TinaCMS CLI6.2CNA v3.10.6%2026-03-12NucleiFix
CVE-2026-28793Path traversal leading to arbitrary file read, Write and Delete in TinaCMS8.4CNA v3.10.2%2026-03-12Fix
CVE-2026-28792Cross-Origin File Exfiltration via CORS Misconfiguration + path traversal in TinaCMS9.7CNA v3.10.6%2026-03-12Fix
CVE-2026-28791tinacms path traversal in Media Upload Handle in Tina7.4CNA v3.10.4%2026-03-12Fix
CVE-2026-28384Canonical LXD authenticated RCE via unsanitized compression_algorithm9.4CNA v4.00.9%2026-03-12Fix
CVE-2026-28356ReDoS in multipart `parse_options_header`7.5CNA v3.11.0%2026-03-12Fix
CVE-2026-28256Trane Tracer SC, Tracer SC+ and Tracer Concierge hard-coded credentials9.8v3.10.4%2026-03-12Fix
CVE-2026-28255Trane Tracer SC hard-coded credentials9.8v3.10.5%2026-03-12Fix
CVE-2026-28254Missing authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge7.5v3.10.4%2026-03-12Fix
CVE-2026-28253Trane Tracer SC excessive memory allocation7.5v3.10.5%2026-03-12Fix
CVE-2026-28252Trane Tracer SC weak cryptographic algorithm9.8v3.10.3%2026-03-12Fix
CVE-2026-27940llama.cpp has a heap buffer overflow via integer overflow in `mem_size` Calculation Bypass of Fix7.8CNA v3.10.2%2026-03-12Exploit codeFix
CVE-2026-26795GL.iNet AR300M16 command injection9.8v3.12.5%2026-03-12
CVE-2026-26794GL.iNet AR300M16 SQL injection8.8v3.10.5%2026-03-12
CVE-2026-26793GL.iNet AR300M16 command injection9.8CISA ADP v3.13.6%2026-03-12
CVE-2026-26792GL.iNet AR300M16 command injection9.8v3.12.8%2026-03-12
CVE-2026-26791GL.iNet AR300M16 command injection9.8v3.12.5%2026-03-12
CVE-2026-25529Postal has HTML injection / XSS in message view8.1CNA v3.10.4%2026-03-12Fix
CVE-2026-24125Path traversal in @Tinacms/graphql6.3CNA v3.10.4%2026-03-12Fix
CVE-2026-21887OpenCTI has a Semi-blind SSRF via Unvalidated External URL in Data Ingestion feature7.7CNA v3.10.2%2026-03-12Fix
CVE-2026-21708Veeam Backup and Replication SQL injection9.9CISA ADP v3.11.1%2026-03-12Fix
CVE-2026-21672Veeam Backup and Replication sensitive information in an accessible file8.8CISA ADP v3.10.2%2026-03-12Fix
CVE-2026-21671Veeam Software Appliance code injection9.1CNA v3.11.3%2026-03-12Fix
CVE-2026-21670Veeam Backup and Replication insufficiently protected credentials6.5NVD v3.10.4%2026-03-12Fix
CVE-2026-21669Veeam Backup and Replication code injection10.0CNA v3.11.2%2026-03-12Fix
CVE-2026-21668Veeam Backup and Replication missing authorization6.5NVD v3.10.5%2026-03-12Fix
CVE-2026-21667Veeam Backup and Replication remote code execution8.8NVD v3.11.1%2026-03-12Fix
CVE-2026-21666Veeam Backup and Replication remote code execution8.8NVD v3.11.1%2026-03-12Fix
CVE-2026-4045projectsend Auth.php response discrepancy6.3CNA v4.00.4%2026-03-12
CVE-2026-4044projectsend Delete import-orphans.php realpath path traversal5.1CNA v4.00.6%2026-03-12
CVE-2026-4043Tenda i12 wifiSSIDget formwrlSSIDget stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-4042Tenda i12 WifiMacFilterGet formWifiMacFilterGet stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-4041Tenda i12 exeCommand vos_strcpy stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-4040OpenClaw File Existence tools.exec.safeBins information exposure5.5v3.10.2%2026-03-12Fix
CVE-2026-4039OpenClaw Skill Env applySkillConfigenvOverrides code injection8.8v3.10.6%2026-03-12Fix
CVE-2026-4016GPAC SVG parser load_svg.c svgin_process out-of-bounds write4.8CNA v4.00.2%2026-03-12
CVE-2026-4015GPAC TeXML file load_text.c txtin_process_texml stack-based overflow4.8CNA v4.00.2%2026-03-12
CVE-2026-4014itsourcecode Cafe Reservation System Registration signup.php SQL injection9.8v3.10.6%2026-03-12
CVE-2026-4013SourceCodester Web-based Pharmacy Product Management System add_admin.php improper authorization5.3CNA v4.00.4%2026-03-12
CVE-2026-4012rxi fe read_ function out-of-bounds read4.8CNA v4.00.2%2026-03-12
CVE-2026-4010ThakeeNathees pocketlang pkByteBufferAddString memory corruption4.8CNA v4.00.2%2026-03-12
CVE-2026-4009jarikomppa soloud WAV file dr_wav.h drwav_read_pcm_frames_s16__msadpcm out-of-bounds4.8CNA v4.00.2%2026-03-12
CVE-2026-4008Tenda W3 POST parameter wifiSSIDset stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-4007Tenda W3 POST parameter wifiSSIDget stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-3994rui314 mold object file input-files.cc initialize_sections heap-based overflow4.8CNA v4.00.2%2026-03-12
CVE-2026-3993itsourcecode Payroll Management System manage_employee_deductions.php cross-site scripting5.3CNA v4.00.4%2026-03-12
CVE-2026-3992CodeGenieApp serverless-express Users endpoint dynamodb.ts injection5.3CNA v4.00.4%2026-03-12
CVE-2026-3990CesiumGS CesiumJS standalone.html cross-site scripting5.3CNA v4.00.4%2026-03-12
CVE-2026-3989LMSYS SGLang replay_request_dump.py pickle loader insecure deserialization7.8CISA ADP v3.10.4%2026-03-12Fix
CVE-2026-3984Campcodes Division Regional Athletic Meet Game Result Matrix System cross-site scripting5.1CNA v4.00.3%2026-03-12
CVE-2026-3983Campcodes Division Regional Athletic Meet Game Result Matrix System cross-site scripting5.1CNA v4.00.3%2026-03-12
CVE-2026-3982itsourcecode University Management System view_result.php cross-site scripting5.3CNA v4.00.4%2026-03-12
CVE-2026-3981itsourcecode Online Doctor Appointment System doctor_action.php SQL injection9.8v3.10.6%2026-03-12
CVE-2026-3980itsourcecode Online Doctor Appointment System patient_action.php SQL injection9.8v3.10.6%2026-03-12
CVE-2026-3979quickjs-ng quickjs quickjs.c js_iterator_concat_return use-after-free4.8CNA v4.00.2%2026-03-12
CVE-2026-3978D-Link DIR-513 formEasySetupWizard3 stack-based overflow8.7CNA v4.01.2%2026-03-12
CVE-2026-3977projectsend AJAX endpoints authorization5.3CNA v4.00.4%2026-03-12
CVE-2026-3976Tenda W3 POST Parameter WifiMacFilterSet formWifiMacFilterSet stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-3975Tenda W3 POST Parameter WifiMacFilterGet formWifiMacFilterGet stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-3974Tenda W3 HTTP exeCommand formexeCommand stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-3973Tenda W3 POST parameter setAutoPing formSetAutoPing stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-3972Tenda W3 HTTP setcfm formSetCfm stack-based overflow8.8v3.10.7%2026-03-12
CVE-2026-3971Tenda i3 wifiSSIDset formwrlSSIDset stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-3970Tenda i3 wifiSSIDget formwrlSSIDget stack-based overflow8.7CNA v4.01.0%2026-03-12
CVE-2026-3969FeMiner wms Basic Organizational Structure depart_add_bg.php SQL injection6.9CNA v4.00.4%2026-03-12
CVE-2026-3968frostmourne Oracle Nashorn JavaScript engine code injection5.3CNA v4.00.4%2026-03-12
CVE-2026-3967Alfresco Activiti process variable serialization insecure deserialization5.3CNA v4.00.4%2026-03-12
CVE-2026-3966wvp-GB28181-pro IP address handler server-side request forgery5.3CNA v4.00.3%2026-03-12
CVE-2026-3965whyour qinglong API express.ts protection mechanism5.3CNA v4.00.5%2026-03-12Fix
CVE-2026-3841Command injection vulnerability in Telnet CLI on TP-Link TL-MR64008.5CNA v4.02.7%2026-03-12Fix
CVE-2026-3657My Sticky Bar WordPress plugin unauthenticated SQL injection via stickymenu_contact_lead_form action7.5CNA v3.10.6%2026-03-12Fix
CVE-2026-3611Honeywell IQ4x BMS controller missing authentication for critical function10.0NVD v3.11.0%2026-03-12Fix
CVE-2026-3497OpenBSD OpenSSH uninitialized resource use2.7CNA v4.01.3%2026-03-12Fix
CVE-2026-3234Red Hat mod_proxy_cluster response decoding function CRLF injection4.3CNA v3.10.5%2026-03-12
CVE-2026-3226ThimPress LearnPress email notification handlers missing authorization4.3CNA v3.10.3%2026-03-12Fix
CVE-2026-3099Libsoup: Libsoup: Authentication bypass via digest authentication replay attack7.3NVD v3.10.5%2026-03-12Fix
CVE-2026-3060lm-sys SGLang encoder parallel disaggregation module deserialization of untrusted data9.8CISA ADP v3.11.3%2026-03-12Fix
CVE-2026-3059SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution9.8CISA ADP v3.11.3%2026-03-12Fix
CVE-2026-2987Simple Ajax Chat WordPress plugin unauthenticated stored cross-site scripting via c6.1CNA v3.10.3%2026-03-12Fix
CVE-2026-2808Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider6.8CNA v3.10.5%2026-03-12Fix
CVE-2026-2687Reading progressbar WordPress plugin Admin+ stored XSS4.3CISA ADP v3.10.2%2026-03-12Fix
CVE-2026-2581undici deduplication interceptor denial of service5.9CNA v3.10.7%2026-03-12Fix
CVE-2026-2514Progress Flowmon ADS network data viewer vulnerability8.6CNA v4.00.2%2026-03-12Fix
CVE-2026-2513Progress Software Flowmon ADS cross-site scripting8.6CNA v4.00.2%2026-03-12Fix
CVE-2026-2376Mirror-registry: Quay: Quay: Server-side request forgery4.9CNA v3.10.2%2026-03-12
CVE-2026-2366Keycloak: Keycloak: Information disclosure via authorization bypass in admin API3.1CNA v3.10.3%2026-03-12Fix
CVE-2026-2229Undici has unhandled exception in WebSocket client due to Invalid server_max_window_bits Validation7.5CNA v3.10.9%2026-03-12Fix
CVE-2026-1878ASUS Driver( Keyboard and Mouse ) download without integrity check5.4CNA v4.00.1%2026-03-12
CVE-2026-1528Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client7.5CNA v3.10.5%2026-03-12Fix
CVE-2026-1527undici is vulnerable to CRLF injection via upgrade option4.6CNA v3.10.3%2026-03-12Fix
CVE-2026-1526Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression7.5CNA v3.11.2%2026-03-12Fix
CVE-2026-1525undici is vulnerable to inconsistent interpretation of HTTP requests6.5CNA v3.10.5%2026-03-12Fix
CVE-2026-1182Improper removal of sensitive information before storage or transfer in GitLab4.3CNA v3.10.2%2026-03-12Fix
CVE-2026-0809Weak KSeF token encoding in Streamsoft Prestiż6.3CNA v4.00.2%2026-03-12Fix
CVE-2026-32234parse-community parse-server parse Server has a SQL injection5.1CNA v4.00.3%2026-03-11Fix
CVE-2026-32229JetBrains Hub authentication bypass by spoofing6.8CNA v3.10.3%2026-03-11Fix
CVE-2026-32136AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade authentication bypass9.8CNA v3.10.8%2026-03-11Fix
CVE-2026-321332FAuth has blind SSRF in image parameter allows internal network access and more7.8CNA v4.00.5%2026-03-11Fix
CVE-2026-32132ZITADEL: Reactivation of Expired Passkey Registration Codes7.4CNA v3.10.4%2026-03-11Fix
CVE-2026-32131ZITADEL Cross-Tenant information disclosure in Management API7.7CNA v3.10.4%2026-03-11Fix
CVE-2026-32130ZITADEL SCIM authentication bypass via URL Encoding7.5CNA v3.10.6%2026-03-11Fix
CVE-2026-32128FastGPT Python sandbox bypass of File-Write Restriction6.3CNA v3.10.3%2026-03-11
CVE-2026-32127SQL injection vulnerability in ajax graphs library (OpenEMR)8.8CNA v3.10.6%2026-03-11Exploit codeFix
CVE-2026-32126OpenEMR CDR controller router missing authorization7.1CNA v3.10.5%2026-03-11Fix
CVE-2026-32125OpenEMR: Stored XSS in Track Anything Graphs via Unescaped Dygraph Titles/Labels5.4CNA v3.10.6%2026-03-11Fix
CVE-2026-32124OpenEMR: Dynamic Code Picker Renders Unescaped Descriptions (stored XSS)5.4CNA v3.10.6%2026-03-11Fix
CVE-2026-32123OpenEMR: Therapy Group Sensitivity ACL no Longer Enforced7.7CNA v3.10.3%2026-03-11Fix
CVE-2026-32122OpenEMR: Missing authorization on Claim File Tracker UI and AJAX Endpoint (V2)4.3CNA v3.10.3%2026-03-11Fix
CVE-2026-32121OpenEMR: Stored DOM XSS via `.html` in Portal Signer Modal7.7CNA v3.10.6%2026-03-11Fix
CVE-2026-32118OpenEMR has stored XSS in Graphical Pain Map legend via unescaped annotation text5.4CNA v3.10.9%2026-03-11Fix
CVE-2026-32117Grafana Cubism panel panel zoom link stored cross-site scripting7.6CNA v3.10.3%2026-03-11Fix
CVE-2026-32112ha-mcp has XSS via Unescaped HTML in OAuth Consent form6.8CNA v3.10.2%2026-03-11Fix
CVE-2026-32111ha-mcp OAuth DCR mode enables network reconnaissance via an error oracle5.3CNA v3.10.3%2026-03-11Fix
CVE-2026-32110SiYuan has a Full-read SSRF via /API/network/forwardProxy8.3CNA v3.10.4%2026-03-11Fix
CVE-2026-32109Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`3.7CNA v3.10.2%2026-03-11Fix
CVE-2026-32108Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access2.3CNA v4.00.3%2026-03-11Fix
CVE-2026-32106StudioCMS: REST API Missing Rank Check allows Admin to Create Peer Admin Accounts4.7CNA v3.10.4%2026-03-11Fix
CVE-2026-32104StudioCMS user notification preferences insecure direct object reference5.4CNA v3.10.3%2026-03-11Fix
CVE-2026-32103StudioCMS: IDOR Admin-to-Owner account takeover via Password Reset Link Generation6.8CNA v3.10.4%2026-03-11Fix
CVE-2026-32102OliveTin unauthorized action Output Disclosure via EventStream7.1CNA v4.00.5%2026-03-11Fix
CVE-2026-32101StudioCMS S3 Storage Manager authorization bypass via Missing `await` on Async Auth Check7.6CNA v3.10.3%2026-03-11Fix
CVE-2026-32098Parse Platform Parse Server LiveQuery subscriptions information disclosure6.9CNA v4.00.5%2026-03-11Fix
CVE-2026-32097PingPong has improper access control in thread file endpoints allows access outside intended scope8.6CNA v4.00.5%2026-03-11Fix
CVE-2026-32096Plunk has SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns9.3CNA v3.10.4%2026-03-11Exploit codeFix
CVE-2026-32095Plunk has stored cross-site scripting (XSS) via SVG file upload5.4CNA v3.10.2%2026-03-11Fix
CVE-2026-32094Shescape escape leaves bracket glob expansion active on Bash, BusyBox, and Dash6.9CNA v4.00.3%2026-03-11Fix
CVE-2026-32063OpenClaw command injection via Newline in systemd Unit Generation7.8v3.11.3%2026-03-11Fix
CVE-2026-32062OpenClaw Unauthenticated WebSocket resource exhaustion via Media Stream8.7CNA v4.00.8%2026-03-11Fix
CVE-2026-32061OpenClaw arbitrary file read via $include Directive path traversal6.7CNA v4.00.2%2026-03-11Fix
CVE-2026-32060OpenClaw path traversal in apply_patch via Crafted Paths8.7CNA v4.01.0%2026-03-11Fix
CVE-2026-32059OpenClaw Allowlist Bypass via sort Long-Option Abbreviation in tools.exec.safeBins8.7CNA v4.00.6%2026-03-11Fix
CVE-2026-31988yauzl denial of service via off-by-one error in NTFS Timestamp parser6.9CNA v4.00.6%2026-03-11Fix
CVE-2026-31979himmelblau-idm himmelblau himmelblaud-tasks: Local privilege escalation8.8CNA v3.10.2%2026-03-11Fix
CVE-2026-31976xygeni-action v5 tag poisoned with C2 backdoor9.3CNA v4.00.8%2026-03-11Fix
CVE-2026-31975Cloud CLI WebSocket shell injection8.7CNA v4.04.3%2026-03-11Fix
CVE-2026-31974Blind SSRF on OpenProject instance via webhooks3.0CNA v3.10.3%2026-03-11Fix
CVE-2026-31961Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing5.5CNA v3.10.1%2026-03-11Fix
CVE-2026-31960DoS in Quill via unbounded read of HTTP response body during notarization5.3CNA v3.10.1%2026-03-11Fix
CVE-2026-31959SSRF in Quill via unvalidated URL from Apple notarization log retrieval5.3CNA v3.10.1%2026-03-11Fix
CVE-2026-31958Tornado has a DoS due to too many multipart parts8.7CNA v4.00.5%2026-03-11Fix
CVE-2026-31957Himmelblau tenant domain configuration vulnerability10.0CNA v3.10.7%2026-03-11Fix
CVE-2026-31954Emlog asynchronous media file deletion missing CSRF protection0.0CNA v3.10.2%2026-03-11
CVE-2026-31901parse-community parse-server parse Server has user enumeration via email verification endpoint6.3CNA v4.00.4%2026-03-11Fix
CVE-2026-31900Black's vulnerable version parsing leads to RCE in GitHub action8.7CNA v4.00.6%2026-03-11Exploit codeFix
CVE-2026-31896WeGIA has a Time-based blind SQL injection in remover_produto_ocultar.php9.8CNA v3.10.5%2026-03-11Fix
CVE-2026-31895WeGIA has a SQL injection via Direct Query Interpolation in restaurar_produto.php8.8CNA v3.10.5%2026-03-11Fix
CVE-2026-31894WeGIA affected by arbitrary file read via symlink in backup restore6.9CNA v4.00.5%2026-03-11Fix
CVE-2026-31892Argo Workflows WorkflowTemplate reference mode incorrect authorization8.9CNA v4.00.7%2026-03-11Fix
CVE-2026-31889Shopware has a potential take over of app credentials8.9CNA v3.10.4%2026-03-11Fix
CVE-2026-31888Shopware has user enumeration via distinct error codes on Store API login endpoint5.3CNA v3.10.3%2026-03-11Fix
CVE-2026-31887Shopware unauthenticated data extraction possible through store-api.order endpoint8.9CNA v4.00.4%2026-03-11Fix
CVE-2026-31881Runtipi password reset endpoint missing authentication7.7CNA v3.10.7%2026-03-11Fix
CVE-2026-31879Frappe Workspace modification and stored XSS due to improper resource ownership checks5.1CNA v4.00.2%2026-03-11Fix
CVE-2026-31878Frappe: Possible SSRF by any authenticated user5.0CNA v3.10.3%2026-03-11Fix
CVE-2026-31877Frappe SQL injection due to improper field sanitization9.3CNA v4.00.5%2026-03-11Fix
CVE-2026-31876Notesnook has stored XSS via unsanitized Twitter/X embed URL in editor (`tweetToEmbed`)5.4CNA v3.10.2%2026-03-11Fix
CVE-2026-31875parse-community parse-server parse Server MFA recovery codes not consumed after use8.2CNA v4.00.5%2026-03-11Fix
CVE-2026-31874Taskosaur Improper Role Assignment via Parameter Manipulation in User Registration9.8CNA v3.10.7%2026-03-11
CVE-2026-31872Parse Platform Parse Server class-level permissions improper access control8.7CNA v4.00.5%2026-03-11Fix
CVE-2026-31871parse-community parse-server parse Server has a SQL injection9.3CNA v4.00.5%2026-03-11Fix
CVE-2026-31870cpp-httplib affected by Remote Process crash via Malformed Content-Length Response header7.5CNA v3.10.5%2026-03-11Fix
CVE-2026-31868parse-community parse-server parse Server has stored XSS6.3CNA v4.00.3%2026-03-11Fix
CVE-2026-31867Craft Commerce has a potential IDOR in Commerce carts6.3CNA v4.00.3%2026-03-11Fix
CVE-2026-31866Allocation of resources without limits or throttling in flagd7.5CNA v3.10.6%2026-03-11Fix
CVE-2026-31863Improper restriction of excessive authentication attempts in github.com/anyproto/anytype-heart3.6CNA v3.10.1%2026-03-11Fix
CVE-2026-31862Cloud CLI has command injection via multiple parameters9.1CNA v3.10.6%2026-03-11Fix
CVE-2026-31861Shell command injection in Git Routes [CloudCLI UI]8.7CNA v4.00.7%2026-03-11Fix
CVE-2026-31859Craft has Reflective XSS via incomplete return URL sanitization6.9CNA v4.00.3%2026-03-11Fix
CVE-2026-31858CraftCMS's `ElementSearchController` affected by blind SQL injection8.7CNA v4.00.5%2026-03-11Fix
CVE-2026-31857CraftCMS has an RCE vulnerability via relational conditionals in the control panel8.1CNA v4.00.9%2026-03-11Exploit codeFix
CVE-2026-31856parse-community parse-server parse Server has a SQL injection9.3CNA v4.00.5%2026-03-11Fix
CVE-2026-31854Cursor affected by arbitrary code execution via prompt injection and Whitelist Bypass8.7CNA v4.00.5%2026-03-11Fix
CVE-2026-31853ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder5.7CNA v3.10.1%2026-03-11Fix
CVE-2026-31852Jellyfin Possible Organization/Secret Compromise from dangerous CI implementation10.0CNA v3.10.6%2026-03-11Exploit codeFix
CVE-2026-31844Authenticated SQL injection in Koha displayby parameter of suggestion.pl8.7CNA v4.00.6%2026-03-11Fix
CVE-2026-31840parse-community parse-server parse Server has a SQL injection9.3CNA v4.00.7%2026-03-11Fix
CVE-2026-31839Striae has a hash validation utility vulnerability8.2CNA v3.10.2%2026-03-11Fix
CVE-2026-31813Supabase Auth has insecure Apple and Azure authentication with ID tokens4.8CNA v3.10.2%2026-03-11Fix
CVE-2026-30903Zoom Communications Zoom Workplace Mail feature external control of a file path9.6CNA v3.10.4%2026-03-11Fix
CVE-2026-30902Zoom Clients for Windows improper privilege management7.8CNA v3.10.1%2026-03-11Fix
CVE-2026-30901Zoom Rooms for Windows improper input validation7.0CNA v3.10.1%2026-03-11Fix
CVE-2026-30900Zoom Workplace Clients for Windows Improper Check7.8CNA v3.10.2%2026-03-11Fix
CVE-2026-30868Cross-site request forgery (CSRF) in OPNsense/core6.3CNA v3.10.2%2026-03-11Fix
CVE-2026-30741OpenClaw remote code execution9.8CISA ADP v3.11.2%2026-03-11Exploit code
CVE-2026-30239OpenProject budget deletion incorrect authorization6.5CNA v3.10.3%2026-03-11Fix
CVE-2026-30236OpenProject budget labor cost calculation incorrect authorization4.3CNA v3.10.3%2026-03-11Fix
CVE-2026-30235Business logic error on OpenProject through hyperlinks in markdown using DOM clobbering6.5CNA v3.10.6%2026-03-11Fix
CVE-2026-30234OpenProject BCF XML import path traversal6.5CNA v3.10.5%2026-03-11Fix
CVE-2026-30226devalue has prototype pollution in devalue.parse and devalue.unflatten6.3CNA v4.00.5%2026-03-11Fix
CVE-2026-29777Traefik has a kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values6.1CNA v4.00.4%2026-03-11Fix
CVE-2026-29515MiCode FileExplorer SwiFTP server authentication bypass9.8v3.11.0%2026-03-11
CVE-2026-28803Open Forms cosign submission lookup improper access control6.5CNA v3.10.3%2026-03-11Fix
CVE-2026-28229argoproj argo-workflows argo Workflows has unauthorized access to Argo Workflows template9.8CNA v3.10.8%2026-03-11Fix
CVE-2026-27897Vociferous Unauthenticated Remote path traversal (RCE via CSRF)10.0CNA v3.10.8%2026-03-11Fix
CVE-2026-27842Micro Research MR-GM5L-S1 authentication bypass9.3CNA v4.00.8%2026-03-11
CVE-2026-27703RIOT has an out-of-bounds write in nanoCoAP handler7.5CNA v3.10.6%2026-03-11
CVE-2026-27591Winter: Privilege escalation by authenticated backend users10.0CNA v3.10.8%2026-03-11Fix
CVE-2026-27478unitycatalog Unity Catalog has a JWT Issuer Validation Bypass allows Complete User Impersonation9.1CNA v3.10.2%2026-03-11Fix
CVE-2026-27266Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27265Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27262Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27257Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27256Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27255Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27254Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27253Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27252Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27251Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27250Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27249Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27248Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27247Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27244Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27242Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27241Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27240Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27239Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27237Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27236Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27235Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27234Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27233Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27232Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27231Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27230Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27229Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27228Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27226Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27225Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27224Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-27223Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-03-11Fix
CVE-2026-24510Dell Alienware Command Center (AWCC) improper privilege management6.7CNA v3.10.1%2026-03-11Fix
CVE-2026-24509Dell Alienware Command Center (AWCC) improper access control3.6CNA v3.10.1%2026-03-11Fix
CVE-2026-24508Dell Alienware Command Center (AWCC) improper certificate validation2.5CNA v3.10.1%2026-03-11Fix
CVE-2026-24448Micro Research MR-GM5L-S1 hard-coded credentials9.3CNA v4.00.4%2026-03-11
CVE-2026-23817HPE AOS-CX unauthenticated open redirect allows URL Manipulation in Web interface6.5CNA v3.10.3%2026-03-11Fix
CVE-2026-23816Authenticated command injection found in admin AOS-CX CLI command7.2CNA v3.11.2%2026-03-11Fix
CVE-2026-23815Authenticated command injection found in AOS-CX Administrative CLI command7.2CNA v3.10.9%2026-03-11Fix
CVE-2026-23814Authenticated command injection found in AOS-CX CLI command8.8CNA v3.10.6%2026-03-11Fix
CVE-2026-23813HPE AOS-CX authentication bypass in Web interface allows Unauthenticated Admin Password Reset9.8CNA v3.10.7%2026-03-11Exploit codeFix
CVE-2026-22248GLPI affected by remote code execution via malicious upload8.1CNA v3.10.3%2026-03-11Fix
CVE-2026-21888nanomq MQTT v5 Variable Byte Integer parsing out-of-bounds: Get_var_integer7.5CNA v3.10.3%2026-03-11
CVE-2026-21361Adobe Commerce cross-site scripting (stored XSS)8.1CNA v3.10.4%2026-03-11Fix
CVE-2026-21360Adobe Commerce improper limitation of a pathname to a restricted directory (path traversal)6.8CNA v3.10.6%2026-03-11Fix
CVE-2026-21359Adobe Commerce incorrect authorization4.7CNA v3.10.2%2026-03-11Fix
CVE-2026-21311Adobe Commerce cross-site scripting (stored XSS)8.0CNA v3.10.3%2026-03-11Fix
CVE-2026-21310Adobe Commerce improper input validation5.3CNA v3.10.3%2026-03-11Fix
CVE-2026-21309Adobe Commerce incorrect authorization7.5CNA v3.10.6%2026-03-11Fix
CVE-2026-21297Adobe Commerce incorrect authorization4.3CNA v3.10.4%2026-03-11Fix
CVE-2026-21296Adobe Commerce incorrect authorization4.3CNA v3.10.3%2026-03-11Fix
CVE-2026-21295Adobe Commerce URL redirection to untrusted site (open redirect)3.1CNA v3.10.2%2026-03-11Fix
CVE-2026-21294Adobe Commerce server-side request forgery (SSRF)5.5CNA v3.10.2%2026-03-11Fix
CVE-2026-21293Adobe Commerce server-side request forgery (SSRF)5.5CNA v3.10.2%2026-03-11Fix
CVE-2026-21292Adobe Commerce cross-site scripting (stored XSS)5.4CNA v3.10.3%2026-03-11Fix
CVE-2026-21291Adobe Commerce cross-site scripting (stored XSS)4.8CNA v3.10.3%2026-03-11Fix
CVE-2026-21290Adobe Commerce cross-site scripting (stored XSS)8.7CNA v3.10.5%2026-03-11Fix
CVE-2026-21289Adobe Commerce incorrect authorization7.5CNA v3.10.6%2026-03-11Fix
CVE-2026-21286Adobe Commerce incorrect authorization5.3CNA v3.10.3%2026-03-11Fix
CVE-2026-21285Adobe Commerce incorrect authorization4.3CNA v3.10.3%2026-03-11Fix
CVE-2026-21284Adobe Commerce cross-site scripting (stored XSS)8.1CNA v3.10.4%2026-03-11Fix
CVE-2026-21282Adobe Commerce improper input validation5.3CNA v3.10.5%2026-03-11Fix
CVE-2026-20892Micro Research MR-GM5L-S1 code injection8.6CNA v4.00.6%2026-03-11
CVE-2026-20166Sensitive information disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise5.4CNA v3.10.2%2026-03-11Fix
CVE-2026-20165Sensitive information disclosure in MongoClient logging channel in Splunk Enterprise6.3CNA v3.10.2%2026-03-11Fix
CVE-2026-20164Sensitive information disclosure through improper access control in Splunk Enterprise6.5CNA v3.10.2%2026-03-11Fix
CVE-2026-20163Splunk Enterprise and Cloud Platform upload indexing preview REST endpoint command injection8.0CNA v3.10.5%2026-03-11Fix
CVE-2026-20162Stored cross-site scripting (XSS) through path traversal in Splunk Enterprise6.3CNA v3.10.2%2026-03-11Fix
CVE-2026-20118Cisco IOS XR Software Egress Packet Network Interface aligner denial of service6.8CNA v3.10.3%2026-03-11Fix
CVE-2026-20117Multiple Cisco Contact Center Products cross-site scripting6.1CNA v3.10.2%2026-03-11Fix
CVE-2026-20116Multiple Cisco Contact Center Products cross-site scripting6.1CNA v3.10.2%2026-03-11Fix
CVE-2026-20074Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System denial of service7.4CNA v3.10.2%2026-03-11Fix
CVE-2026-20046Cisco IOS XR Software CLI privilege escalation8.8CNA v3.10.1%2026-03-11Fix
CVE-2026-20040Cisco IOS XR Software CLI privilege escalation8.8CNA v3.10.2%2026-03-11Fix
CVE-2026-3964OpenAkita Chat API endpoint shell.py run os command injection4.8CNA v4.01.4%2026-03-11
CVE-2026-3963perfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key6.3CNA v4.00.5%2026-03-11
CVE-2026-3962Jcharis Machine-Learning-Web-Apps Jinja2 template app.py render_template cross-site scripting5.3CNA v4.00.5%2026-03-11
CVE-2026-3961manga-image-translator translate endpoint server-side request forgery5.3CNA v4.00.4%2026-03-11
CVE-2026-39590xKoda WireMCP Tshark CLI index.js server.tool os command injection4.8CNA v4.01.1%2026-03-11
CVE-2026-3958Woahai321 ListSync JSON api_server.py requests.post server-side request forgery5.3CNA v4.00.3%2026-03-11
CVE-2026-3957xierongwkhd weimai-wetapp Endpoint HomeController.java getLikeMovieList SQL injection5.1CNA v4.00.3%2026-03-11
CVE-2026-3956xierongwkhd weimai-wetapp Admin_AdminUserController.java getAdmins SQL injection5.1CNA v4.00.3%2026-03-11
CVE-2026-3955elecV2P jsfile endpoint wbjs.js runJSFile code injection5.3CNA v4.00.4%2026-03-11
CVE-2026-3954OpenBMB XAgent workspace.py workspace path traversal6.9CNA v4.00.7%2026-03-11
CVE-2026-3951LockerProject Locker Error Response registry.js authIsAwesome cross-site scripting5.3CNA v4.00.5%2026-03-11
CVE-2026-3950strukturag libheif stsz/stts track.cc load out-of-bounds4.8CNA v4.00.2%2026-03-11Fix
CVE-2026-3949strukturag libheif HEIF file decoder_vvdec.cc vvdec_push_data2 out-of-bounds4.8CNA v4.00.2%2026-03-11Fix
CVE-2026-3946PHPEMS index.php cross-site scripting5.1CNA v4.00.3%2026-03-11
CVE-2026-3944itsourcecode University Management System att_add.php SQL injection9.8v3.10.6%2026-03-11
CVE-2026-3943H3C ACG1000-AK230 aaa_portal_auth_local_submit command injection6.9CNA v4.04.6%2026-03-11Emerging Threats
CVE-2026-3942Google Chrome PictureInPicture incorrect security UI4.3CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3941Google Chrome DevTools insufficient policy enforcement4.3CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3940Google Chrome DevTools insufficient policy enforcement5.3v3.10.2%2026-03-11Fix
CVE-2026-3939Google Chrome PDF insufficient policy enforcement5.3v3.10.1%2026-03-11Fix
CVE-2026-3938Google Chrome Clipboard insufficient policy enforcement4.3v3.10.2%2026-03-11Fix
CVE-2026-3937Google Chrome Downloads incorrect security UI6.5v3.10.2%2026-03-11Fix
CVE-2026-3936Google Chrome WebView use-after-free8.8CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3935Google Chrome WebAppInstalls incorrect security UI6.5v3.10.2%2026-03-11Fix
CVE-2026-3934Google Chrome ChromeDriver insufficient policy enforcement6.5v3.10.2%2026-03-11Fix
CVE-2026-3932Google Chrome PDF insufficient policy enforcement7.5v3.10.2%2026-03-11Fix
CVE-2026-3931Google Chrome Skia heap-based buffer overflow8.8CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3930Google Chrome authentication bypass5.3v3.10.2%2026-03-11Fix
CVE-2026-3929Google Chrome ResourceTiming side-channel information leak3.1CISA ADP v3.10.2%2026-03-11Fix
CVE-2026-3928Google Chrome extensions insufficient policy enforcement4.3CISA ADP v3.10.2%2026-03-11Fix
CVE-2026-3927Google Chrome PictureInPicture incorrect security UI4.3CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3926Google Chrome V8 out-of-bounds read8.8CISA ADP v3.10.4%2026-03-11Fix
CVE-2026-3925Google Chrome LookalikeChecks incorrect security UI4.3CISA ADP v3.10.2%2026-03-11Fix
CVE-2026-3924Google Chrome WindowDialog use-after-free7.5CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3923Google Chrome WebMIDI use-after-free8.8CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3922Google Chrome MediaStream use-after-free8.8CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3921Google Chrome TextEncoding use-after-free8.8CISA ADP v3.10.4%2026-03-11Fix
CVE-2026-3920Google Chrome WebML out-of-bounds access8.8CISA ADP v3.10.4%2026-03-11Fix
CVE-2026-3919Google Chrome extensions use-after-free8.8CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3918Google Chrome WebMCP use-after-free8.8CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3917Google Chrome Agents use-after-free8.8CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3916Google Chrome Web Speech out-of-bounds read9.6CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3915Google Chrome WebML heap-based buffer overflow8.8CISA ADP v3.10.4%2026-03-11Fix
CVE-2026-3914Google Chrome WebML integer overflow8.8CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-3913Google Chrome WebML heap-based buffer overflow8.8CISA ADP v3.10.4%2026-03-11Fix
CVE-2026-3911Keycloak: Information disclosure of disabled user attributes via administrative endpoint2.7CNA v3.10.4%2026-03-11Fix
CVE-2026-3906WordPress WordPress - missing authorization to Authenticated arbitrary Note Creation4.3CNA v3.10.4%2026-03-11Fix
CVE-2026-3904The GNU C Library glibc crash6.2CISA ADP v3.10.2%2026-03-11Fix
CVE-2026-3903Modular Connector WordPress plugin cross-site request forgery via postConfirmOauth4.3CNA v3.10.1%2026-03-11Fix
CVE-2026-3884spin.js cross-site scripting5.1CNA v4.00.3%2026-03-11Fix
CVE-2026-3848Improper neutralization of CRLF sequences (CRLF injection) in GitLab5.0CNA v3.10.3%2026-03-11Fix
CVE-2026-3826WellChoose｜IFTOP local file inclusion9.3CNA v4.00.9%2026-03-11Fix
CVE-2026-3825WellChoose｜IFTOP reflected cross-site scripting5.1CNA v4.00.3%2026-03-11Fix
CVE-2026-3824WellChoose｜IFTOP open redirect5.1CNA v4.00.3%2026-03-11Fix
CVE-2026-3805curl use-after-free in SMB connection reuse7.5CISA ADP v3.11.0%2026-03-11Exploit codeFix
CVE-2026-3784curl wrong proxy connection reuse with credentials6.5CISA ADP v3.10.5%2026-03-11Fix
CVE-2026-3783curl token leak with redirect and netrc5.3CISA ADP v3.10.5%2026-03-11Fix
CVE-2026-3534Astra WordPress theme authenticated (Contributor+) stored cross-site scripting via post Meta6.4CNA v3.10.3%2026-03-11Fix
CVE-2026-3496JetBooking WordPress plugin unauthenticated SQL injection via check_in_date parameter7.5CNA v3.10.5%2026-03-11Fix
CVE-2026-3492Gravity Forms WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-03-11Fix
CVE-2026-3453ProfilePress WordPress plugin insecure direct object reference8.1CNA v3.10.5%2026-03-11Fix
CVE-2026-3429Red Hat Keycloak Account REST API improper access control4.2CNA v3.10.3%2026-03-11Fix
CVE-2026-3231Checkout Field Editor for WooCommerce WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-03-11Fix
CVE-2026-3222WP Maps WordPress plugin unauthenticated SQL injection via location_id parameter7.5CNA v3.10.7%2026-03-11Fix
CVE-2026-3178Name Directory WordPress plugin unauthenticated stored cross-site scripting via name_directory_name7.2CNA v3.10.4%2026-03-11Fix
CVE-2026-3013Path traversal in Coppermine Photo Gallery8.7CNA v4.00.7%2026-03-11Fix
CVE-2026-2918Happy Addons for Elementor WordPress plugin insecure direct object reference6.4CNA v3.10.3%2026-03-11Fix
CVE-2026-2917Happy Addons for Elementor WordPress plugin insecure direct object reference5.4CNA v3.10.3%2026-03-11Fix
CVE-2026-2707weForms WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-03-11Fix
CVE-2026-2640Lenovo PC Manager improper privilege management6.8CNA v4.00.1%2026-03-11Fix
CVE-2026-2631Datalogics Ecommerce Delivery WordPress plugin unauthenticated privilege escalation9.8CISA ADP v3.10.8%2026-03-11Exploit codeFix
CVE-2026-2626Divi Booster PHP object injection8.1CISA ADP v3.10.2%2026-03-11Fix
CVE-2026-2569Dear Flipbook WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-03-11Fix
CVE-2026-2466DukaPress WordPress plugin reflected XSS7.1CISA ADP v3.10.1%2026-03-11
CVE-2026-2413Ally Web Accessibility and Usability WordPress plugin unauthenticated SQL injection via URL path7.5CNA v3.12.3%2026-03-11Reported exploitedNucleiExploit codeFix
CVE-2026-2368Lenovo FileZ improper certificate validation7.5CNA v4.00.1%2026-03-11Fix
CVE-2026-2358WP ULike WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-03-11Fix
CVE-2026-2324LatePoint WordPress plugin cross-site request forgery6.1CNA v3.10.1%2026-03-11Fix
CVE-2026-1993ExactMetrics - Authenticated improper privilege management to role privilege escalation8.8CNA v3.10.4%2026-03-11Fix
CVE-2026-1992ExactMetrics - Authenticated insecure direct object reference to arbitrary Plugin Installation8.8CNA v3.10.6%2026-03-11Fix
CVE-2026-1965curl bad reuse of HTTP Negotiate connection6.5CISA ADP v3.10.3%2026-03-11Fix
CVE-2026-1867WP Front User Submit WordPress plugin unauthenticated sensitive information exposure5.9CISA ADP v3.10.2%2026-03-11Fix
CVE-2026-1781MC4WP: Mailchimp for WordPress WordPress plugin missing authorization6.5CNA v3.10.3%2026-03-11Fix
CVE-2026-1753Gutena Forms WordPress plugin Contributor+ arbitrary limited options update6.8CISA ADP v3.10.2%2026-03-11Fix
CVE-2026-1732Improper removal of sensitive information before storage or transfer in GitLab4.3CNA v3.10.3%2026-03-11Fix
CVE-2026-1717Lenovo Vantage LenovoProductivitySystemAddin used improper input validation6.8CNA v4.00.1%2026-03-11Fix
CVE-2026-1716Lenovo Vantage DeviceSettingsSystemAddin used improper input validation6.9CNA v4.00.1%2026-03-11Fix
CVE-2026-1715Lenovo Vantage DeviceSettingsSystemAddin used improper input validation6.9CNA v4.00.1%2026-03-11Fix
CVE-2026-1708Appointment Booking Calendar WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2026-03-11Fix
CVE-2026-1663Missing authorization in GitLab4.3CNA v3.10.2%2026-03-11Fix
CVE-2026-1653Lenovo Smart Connect divide by zero6.8CNA v4.00.1%2026-03-11Fix
CVE-2026-1652Lenovo Smart Connect heap-based buffer overflow6.9CNA v4.00.1%2026-03-11Fix
CVE-2026-1524neo4j Enterprise Edition auth misconfiguration when multiple providers enabled2.1CNA v4.00.3%2026-03-11Fix
CVE-2026-1497neo4j Enterprise Edition incorrect privilege assignment in composite databases2.0CNA v4.00.2%2026-03-11Fix
CVE-2026-1471neo4j Enterprise Edition caching of authentication context2.1CNA v4.00.2%2026-03-11Fix
CVE-2026-1454themehunk Lead Form Builder and Contact Form lead field sanitization stored cross-site scripting7.2CNA v3.10.2%2026-03-11Fix
CVE-2026-1230GitLab branch reference validation vulnerability4.1CNA v3.10.2%2026-03-11Fix
CVE-2026-1090Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.2%2026-03-11Fix
CVE-2026-1069Uncontrolled recursion in GitLab7.5CNA v3.10.4%2026-03-11Fix
CVE-2026-1068Lenovo FileZ improper certificate validation6.0CNA v4.00.1%2026-03-11Fix
CVE-2026-0940Lenovo ThinkPad T14 Gen 5 BIOS improper initialization8.4CNA v4.00.1%2026-03-11
CVE-2026-0602Authentication bypass using an alternate path or channel in GitLab4.3CNA v3.10.2%2026-03-11Fix
CVE-2026-0520Lenovo FileZ sensitive information in log files2.4CNA v4.00.1%2026-03-11Fix
CVE-2026-0231Cortex XDR Broker VM: Sensitive information disclosure5.7CNA v4.00.2%2026-03-11Fix
CVE-2026-0230Cortex XDR Agent: Local Administrator can disable the agent on macOS4.0CNA v4.00.1%2026-03-11Fix
CVE-2026-31838Istio Envoy RBAC header matching incorrect authorization6.9CNA v4.00.4%2026-03-10Fix
CVE-2026-31837Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails8.7CNA v4.00.7%2026-03-10Fix
CVE-2026-31834Umbraco affected by Vertical privilege escalation via missing authorization Checks7.2CNA v3.10.5%2026-03-10Fix
CVE-2026-31833Umbraco has stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering6.7CNA v3.10.5%2026-03-10Fix
CVE-2026-31832Umbraco Backoffice API allows unauthorized modification of Domain Data5.4CNA v3.10.3%2026-03-10Fix
CVE-2026-31830sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest7.5CNA v3.10.4%2026-03-10Fix
CVE-2026-31829Flowise affected by server-side request forgery in HTTP Node leading to Internal Network Access7.1CNA v3.10.4%2026-03-10Fix
CVE-2026-31828parse-community parse-server parse Server has an LDAP injection6.0CNA v4.00.8%2026-03-10Fix
CVE-2026-31827Alienbin: TTL Index race condition allows unauthorized deletion of other users data7.1CNA v4.00.3%2026-03-10
CVE-2026-31826pypdf content stream length parsing resource exhaustion6.8CNA v4.00.2%2026-03-10Fix
CVE-2026-31825Sylius has a DQL injection via API Order Filters5.3CNA v3.10.3%2026-03-10Fix
CVE-2026-31824Sylius has a Promotion Usage Limit Bypass via race condition8.2CNA v3.10.3%2026-03-10Fix
CVE-2026-31823Sylius has authenticated stored XSS4.8CNA v3.10.2%2026-03-10Fix
CVE-2026-31822Sylius has a XSS vulnerability in checkout login form5.3CNA v4.00.3%2026-03-10Fix
CVE-2026-31821Sylius is missing authorization in API v2 Add Item endpoint6.9CNA v4.00.3%2026-03-10Fix
CVE-2026-31820Sylius affected by IDOR in Cart and Checkout LiveComponents7.1CNA v4.00.3%2026-03-10Fix
CVE-2026-31819Sylius has an open redirect via Referer header6.9CNA v4.00.3%2026-03-10Fix
CVE-2026-31817OliveTin's unsafe parsing of UniqueTrackingId can be used to write files8.5CNA v3.10.9%2026-03-10Fix
CVE-2026-31815Django-unicorn affected by component state manipulation via unvalidated attribute access5.3CNA v3.10.3%2026-03-10Fix
CVE-2026-31812Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing8.7CNA v4.00.9%2026-03-10Fix
CVE-2026-31809SiYuan has a SVG Sanitizer Bypass via Whitespace in `javascript:` URI unauthenticated XSS6.4CNA v4.00.6%2026-03-10NucleiFix
CVE-2026-31808file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header5.3CNA v3.10.4%2026-03-10Fix
CVE-2026-31807SiYuan SVG sanitizer cross-site scripting6.4CNA v4.00.5%2026-03-10NucleiFix
CVE-2026-31802node-tar Symlink path traversal via Drive-Relative Linkpath8.2CNA v4.00.2%2026-03-10Exploit codeFix
CVE-2026-31801zot create-only policy allows overwrite attempts of existing latest tag7.7CNA v3.10.3%2026-03-10Fix
CVE-2026-31800Parse Platform Parse Server generic class REST API routes missing authorization8.8CNA v4.00.6%2026-03-10Fix
CVE-2026-31797iccDEV has a heap out-of-bounds read in CTiffImg::ReadLine6.1CNA v3.10.2%2026-03-10Fix
CVE-2026-31796iccDEV has a heap-based buffer overflow in icCurvesFromXml7.8CNA v3.10.2%2026-03-10Fix
CVE-2026-31795iccDEV has a stack buffer overflow write in CIccXform3DLut::Apply7.8CNA v3.10.2%2026-03-10Fix
CVE-2026-31794iccDEV has a SEGV in CIccCLUT::Interp3d5.5CNA v3.10.2%2026-03-10Fix
CVE-2026-31793iccDEV has a SEGV in CIccCalculatorFunc::ApplySequence5.5CNA v3.10.2%2026-03-10Fix
CVE-2026-31792iccDEV has a null pointer dereference in CIccTagXmlStruct::ParseTag7.8CNA v3.10.2%2026-03-10Fix
CVE-2026-30987International Color Consortium iccDEV CIccTagNum GetValues function stack buffer overflow7.8CNA v3.10.2%2026-03-10Fix
CVE-2026-30986iccDEV has a heap-based buffer overflow write in CIccCLUT::Interp3d5.5CNA v3.10.2%2026-03-10Fix
CVE-2026-30985iccDEV has a heap-based buffer overflow write in CIccMatrixMath::SetRange7.8CNA v3.10.2%2026-03-10Fix
CVE-2026-30984iccDEV has a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence6.1CNA v3.10.2%2026-03-10Fix
CVE-2026-30983iccDEV has a stack buffer overflow in icFixXml7.8CNA v3.10.2%2026-03-10Fix
CVE-2026-30982iccDEV has a heap out-of-bounds read in CIccPcsXform::pushXYZConvert6.1CNA v3.10.2%2026-03-10Fix
CVE-2026-30981International Color Consortium iccDEV CIccXmlArrayType DumpArray function out-of-bounds read6.1CNA v3.10.2%2026-03-10Fix
CVE-2026-30980iccDEV has a stack overflow in CIccBasicStructFactory::CreateStruct5.5CNA v3.10.2%2026-03-10Fix
CVE-2026-30979iccDEV has a heap-based buffer overflow in CIccCalculatorFunc::InitSelectOp7.8CNA v3.10.2%2026-03-10Fix
CVE-2026-30978InternationalColorConsortium iccDEV heap-use-after-free in CIccCmm::AddXform7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-30977RenderBlocking has stored XSS in renderblocking-css with Inline Assets mode2.0CNA v4.00.5%2026-03-10Fix
CVE-2026-30974Copyparty volflag `nohtml` did not block javascript in svg files4.6CNA v3.10.3%2026-03-10Fix
CVE-2026-30973Zip Slip arbitrary file write in @Appium/support ZIP extraction6.5CNA v3.10.4%2026-03-10Fix
CVE-2026-30972parse-community parse-server parse Server has a rate limit bypass via batch request endpoint6.9CNA v4.00.6%2026-03-10Fix
CVE-2026-30970Coral-Protocol coral-server session authentication bypass in Coral Server session creation endpoint8.8CNA v4.00.6%2026-03-10Fix
CVE-2026-30969Coral Protocol Coral Server session communication channel insecure direct object reference7.6CNA v4.00.4%2026-03-10Fix
CVE-2026-30968Coral Protocol Coral Server SSE endpoint missing authorization8.6CNA v4.00.4%2026-03-10Fix
CVE-2026-30967parse-community parse-server parse Server OAuth2 authentication adapter account takeover7.6CNA v4.00.6%2026-03-10Fix
CVE-2026-30966Parse Platform Parse Server internal Join relation tables improper access control10.0CNA v3.10.5%2026-03-10Fix
CVE-2026-30965Parse Platform Parse Server redirectClassNameForKey query parameter incorrect authorization9.9CNA v4.01.6%2026-03-10NucleiFix
CVE-2026-30964Spomky-labs webauthn-lib allowed origins check origin validation error5.4CNA v3.10.2%2026-03-10Fix
CVE-2026-30962parse-community parse-server parse Server has a protected fields bypass via logical query operators7.1CNA v4.00.4%2026-03-10Fix
CVE-2026-30960RSSN has arbitrary code execution via Unvalidated JIT Instruction Generation in C-FFI interface9.4CNA v4.00.2%2026-03-10Fix
CVE-2026-30959OneUptime has WhatsApp Resend Verification authorization bypass5.3CNA v4.00.4%2026-03-10Fix
CVE-2026-30958OneUptime: Path traversal arbitrary file read (no Auth)7.2CNA v3.11.1%2026-03-10NucleiFix
CVE-2026-30957OneUptime Synthetic Monitor RCE via exposed Playwright browser object10.0CNA v3.11.2%2026-03-10Fix
CVE-2026-30956OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header10.0CNA v3.10.5%2026-03-10Fix
CVE-2026-30954LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy5.3CNA v4.00.3%2026-03-10Fix
CVE-2026-30953LinkAce affected by SSRF via link creation: NoPrivateIpRule not applied to LinkStoreRequest7.7CNA v3.10.4%2026-03-10Fix
CVE-2026-30952Liquidjs has a path traversal fallback8.7CNA v4.00.5%2026-03-10Exploit codeFix
CVE-2026-30951Sequelize v6 vulnerable to SQL injection via JSON Column Cast Type7.5CNA v3.10.5%2026-03-10Exploit codeFix
CVE-2026-30949Parse Platform Parse Server Keycloak authentication adapter improper authentication7.6CNA v4.00.6%2026-03-10Fix
CVE-2026-30948parse-community parse-server parse Server has stored cross-site scripting (XSS) via SVG file upload8.3CNA v4.00.3%2026-03-10Fix
CVE-2026-30947parse-community parse-server parse Server ha a bypass of class-level permissions in LiveQuery8.7CNA v4.00.5%2026-03-10Fix
CVE-2026-30946parse-community parse-server parse Server affected by denial of service8.7CNA v4.00.6%2026-03-10Fix
CVE-2026-30945StudioCMS: IDOR arbitrary API Token Revocation leading to denial of service7.1CNA v3.10.4%2026-03-10Fix
CVE-2026-30944StudioCMS affected by privilege escalation via Insecure API Token Generation8.8CNA v3.10.5%2026-03-10Fix
CVE-2026-30942Flare has a path traversal in /API/avatars/[filename]8.3CNA v4.00.6%2026-03-10Fix
CVE-2026-30941parse-community parse-server parse Server has a NoSQL injection8.7CNA v4.00.5%2026-03-10Fix
CVE-2026-30939parse-community parse-server Parse Server has denial of service and Cloud Function Dispatch Bypass8.8CNA v4.00.7%2026-03-10Fix
CVE-2026-30938Parse Platform Parse Server requestKeywordDenylist filter vulnerability6.9CNA v4.00.4%2026-03-10Fix
CVE-2026-30937ImageMagick WriteXWDImage function heap-based buffer overflow6.8CNA v3.10.1%2026-03-10Fix
CVE-2026-30936ImageMagick has a heap buffer overflow in WaveletDenoiseImage5.5CNA v3.10.1%2026-03-10Fix
CVE-2026-30935ImageMagick has a heap buffer over-read in BilateralBlurImage4.4CNA v3.10.2%2026-03-10Fix
CVE-2026-30934FileBrowser Quantum: Stored XSS in public share page8.9CNA v3.10.4%2026-03-10Fix
CVE-2026-30933FileBrowser Quantum: Password-Protected Share Bypass via /public/API/share/info7.5CNA v3.10.5%2026-03-10Fix
CVE-2026-30931ImageMagick has a heap-based buffer overflow in UHDR encoder6.8CNA v3.10.2%2026-03-10Fix
CVE-2026-30930Glances has SQL injection via Process Names in TimescaleDB Export7.3CNA v4.00.4%2026-03-10Fix
CVE-2026-30929ImageMagick has a stack buffer overflow in MagnifyImage7.7CNA v3.10.2%2026-03-10Fix
CVE-2026-30928Glances exposes Unauthenticated Configuration Secrets8.7CNA v4.01.6%2026-03-10NucleiFix
CVE-2026-30927Admidio: Event participation IDOR non-leaders can register other users for events5.3CNA v4.00.4%2026-03-10Fix
CVE-2026-30926SiYuan: Authorization bypass allows Low-Privilege Publish User to Modify Notebook Content7.1CNA v3.10.3%2026-03-10Fix
CVE-2026-30925parse-community parse-server parse Server affected by regular expression denial of service8.2CNA v4.00.6%2026-03-10Fix
CVE-2026-30921OneUptime Synthetic Monitor RCE via exposed Playwright browser object10.0CNA v3.10.5%2026-03-10Fix
CVE-2026-30920HackerBay OneUptime GitHub App installation flow missing authorization8.6CNA v3.10.2%2026-03-10Fix
CVE-2026-30919facileManager affected by stored cross-site scripting (XSS)7.6CNA v3.10.3%2026-03-10
CVE-2026-30918facileManager affected by reflected cross-site scripting (XSS)7.6CNA v3.10.3%2026-03-10Fix
CVE-2026-30917weirdgloop mediawiki-extensions-Bucket stored XSS on Bucket namespace pages8.8CNA v4.00.5%2026-03-10Fix
CVE-2026-30913Flarum/nickname: Display name injection in notification emails (autolink and markdown)4.6CNA v3.10.3%2026-03-10Fix
CVE-2026-30897Fortinet FortiWeb stack-based buffer overflow5.9CNA v3.10.7%2026-03-10Fix
CVE-2026-30887OneUptime affected by Unsandboxed code execution in Probe allows any Project Member to Achieve RCE10.0CNA v3.10.6%2026-03-10Fix
CVE-2026-30885WWBN AVideo unauthenticated IDOR Playlist information disclosure5.5CNA v4.00.4%2026-03-10Fix
CVE-2026-30883ImageMagick has a heap overflow when writing extremely large image profile in the PNG encoder5.7CNA v3.10.1%2026-03-10Fix
CVE-2026-30870Some sync filters in PowerSync service ignored using `config.edition: 3`6.5CNA v3.10.3%2026-03-10Fix
CVE-2026-30869SiYuan has a path traversal in /export endpoint allows arbitrary file read and secret leakage9.3CNA v3.11.1%2026-03-10Fix
CVE-2026-30862Critical stored XSS and privilege escalation in Appsmith9.1CNA v3.10.4%2026-03-10Exploit codeFix
CVE-2026-30837Elysia has a string URL format redos7.5CNA v3.10.5%2026-03-10Fix
CVE-2026-29793NoSQL injection via WebSocket id parameter in MongoDB Adapter9.3CNA v4.00.6%2026-03-10Fix
CVE-2026-29792Feathersjs has an OAuth Callback account takeover9.3CNA v4.00.6%2026-03-10Fix
CVE-2026-29773kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding4.3CNA v3.10.3%2026-03-10Fix
CVE-2026-29177Craft Commerce has stored XSS in Craft Commerce Order Details Slideout1.9CNA v4.00.2%2026-03-10Fix
CVE-2026-29176Craft Commerce has stored XSS in Inventory Location Name4.8CNA v4.00.3%2026-03-10Fix
CVE-2026-29175Multiple stored XSS in Commerce Inventory page leading to session hijacking8.6CNA v4.00.2%2026-03-10Fix
CVE-2026-29174Craft Commerce has a SQL injection in Commerce Inventory Table Sorting8.7CNA v4.00.5%2026-03-10Fix
CVE-2026-29173Craft Commerce has stored XSS while updating Order Status from Orders Table1.9CNA v4.00.4%2026-03-10Fix
CVE-2026-29172Craft Commerce has a SQL injection in Commerce Purchasables Table Sorting8.7CNA v4.00.5%2026-03-10Fix
CVE-2026-29113Craft has a potential information disclosure vulnerability in preview tokens2.3CNA v4.00.2%2026-03-10Fix
CVE-2026-28807gleam-wisp wisp path traversal in wisp.serve_static allows arbitrary file read8.7CNA v4.01.0%2026-03-10Fix
CVE-2026-28806nerves_hub_web improper authorization9.4CNA v4.00.6%2026-03-10Fix
CVE-2026-28692ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder4.8CNA v3.10.3%2026-03-10Fix
CVE-2026-28690ImageMagick has a stack write buffer overflow in MNG encoder6.9CNA v3.10.1%2026-03-10Fix
CVE-2026-28689ImageMagick has a Path Policy TOCTOU symlink race bypass6.3CNA v3.10.1%2026-03-10Fix
CVE-2026-28688ImageMagick has a heap use-after-free in the MSL encoder4.0CNA v3.10.3%2026-03-10Fix
CVE-2026-28687ImageMagick has a heap use-after-free in ImageMagick MSL decoder5.3CNA v3.10.4%2026-03-10Fix
CVE-2026-28686ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer6.8CNA v3.10.2%2026-03-10Fix
CVE-2026-28513Pocket ID OIDC token endpoint incorrect authorization8.5CNA v3.10.3%2026-03-10Fix
CVE-2026-28512pocket-id pocket ID: OAuth redirect_uri validation bypass via userinfo/host confusion7.1CNA v3.10.3%2026-03-10Fix
CVE-2026-28495GetSimpleCMS-CE GetSimple CMS has CSRF to remote code execution9.7CNA v3.10.3%2026-03-10
CVE-2026-28494ImageMagick affected by stack corruption through long morphology kernel names or arrays7.1CNA v3.10.2%2026-03-10Fix
CVE-2026-28493ImageMagick has a integer overflow leading to out-of-bounds write in SIXEL decoder6.5CNA v3.10.3%2026-03-10Fix
CVE-2026-28433Misskey lacks resource ownership validation2.3CNA v4.00.3%2026-03-10Fix
CVE-2026-28432misskey HTTP signature verification can be bypassed7.1CNA v4.00.2%2026-03-10Fix
CVE-2026-28431Misskey lacks proper authorization checks and input validation9.2CNA v4.00.4%2026-03-10Fix
CVE-2026-28292simple-git blockUnsafeOperationsPlugin command injection9.8CNA v3.11.3%2026-03-10Fix
CVE-2026-28281InstantCMS has multiple CSRF7.1CNA v3.10.2%2026-03-10Fix
CVE-2026-28267Digital Arts i-フィルター 10 incorrect default permissions6.8CNA v4.00.2%2026-03-10
CVE-2026-27826sooperset mcp-atlassian MCP Atlassian has SSRF8.2CNA v3.11.0%2026-03-10NucleiEmerging ThreatsKCVFix
CVE-2026-27825MCP Atlassian confluence_download_attachment tool path traversal9.1CNA v3.11.5%2026-03-10KCVFix
CVE-2026-27689Denial of service (DOS) in SAP Supply Chain Management7.7CNA v3.10.5%2026-03-10Fix
CVE-2026-27688Missing authorization check in SAP NetWeaver Application Server for ABAP5.0CNA v3.10.3%2026-03-10Fix
CVE-2026-27687Missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal5.8CNA v3.10.3%2026-03-10Fix
CVE-2026-27686Missing authorization check in SAP Business Warehouse (Service API)5.9CNA v3.10.3%2026-03-10Fix
CVE-2026-27685Insecure deserialization in SAP NetWeaver Enterprise Portal Administration9.1CNA v3.10.6%2026-03-10Fix
CVE-2026-27684SQL injection vulnerability in SAP NetWeaver (Feedback Notification)6.4CNA v3.10.3%2026-03-10Fix
CVE-2026-27661Siemens SINEC Security Monitor information disclosure5.3CNA v4.00.3%2026-03-10Fix
CVE-2026-27281DNG SDK integer overflow or wraparound5.5CNA v3.10.3%2026-03-10Fix
CVE-2026-27280DNG SDK out-of-bounds write7.8CNA v3.10.3%2026-03-10Exploit codeFix
CVE-2026-27279Adobe Substance3D Stager out-of-bounds write7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-27278Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-27277Adobe Substance3D Stager use-after-free7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-27276Adobe Substance3D Stager use-after-free7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-27275Adobe Substance3D Stager out-of-bounds write7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-27274Adobe Substance3D Stager out-of-bounds write7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-27273Adobe Substance3D Stager out-of-bounds write7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-27272Adobe Illustrator out-of-bounds write7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-27271Adobe Illustrator heap-based buffer overflow7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-27270Adobe Illustrator out-of-bounds read5.5CNA v3.10.3%2026-03-10Fix
CVE-2026-27269Adobe Premiere Pro out-of-bounds read7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-27268Adobe Illustrator out-of-bounds read5.5CNA v3.10.3%2026-03-10Fix
CVE-2026-27267Adobe Illustrator stack-based buffer overflow7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-27221Adobe Acrobat Reader improper certificate validation5.5CNA v3.10.1%2026-03-10Fix
CVE-2026-27220Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-27219Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.3%2026-03-10Fix
CVE-2026-27218Adobe Substance3D Painter null pointer dereference5.5CNA v3.10.2%2026-03-10Fix
CVE-2026-27217Adobe Substance3D Painter null pointer dereference5.5CNA v3.10.2%2026-03-10Fix
CVE-2026-27216Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.3%2026-03-10Fix
CVE-2026-27215Adobe Substance3D Painter null pointer dereference5.5CNA v3.10.2%2026-03-10Fix
CVE-2026-27214Adobe Substance3D Painter null pointer dereference5.5CNA v3.10.2%2026-03-10Fix
CVE-2026-26982Ghostty affected by arbitrary command execution6.3CNA v3.10.5%2026-03-10Fix
CVE-2026-26801Pdfmake is vulnerable to server-side request forgery (SSRF)7.5CISA ADP v3.10.6%2026-03-10Exploit codeFix
CVE-2026-26742Dronecode PX4 Drone Autopilot missing authorization8.1CISA ADP v3.10.3%2026-03-10
CVE-2026-26741Dronecode PX4 Drone Autopilot missing authorization8.1CISA ADP v3.10.3%2026-03-10
CVE-2026-26738Uderzo Spacesniffer Uderzo software buffer overflow7.8CISA ADP v3.10.3%2026-03-10
CVE-2026-26330Envoy rate limit filter use-after-free5.3CNA v3.10.4%2026-03-10Fix
CVE-2026-26311Envoy HTTP: Filter chain execution on reset streams causing UAF crash5.9CNA v3.10.5%2026-03-10Fix
CVE-2026-26310Crash for scoped ip address in Envoy during DNS5.9CNA v3.10.5%2026-03-10Fix
CVE-2026-26309Envoy has an off-by-one write in JsonEscaper::escapeString5.3CNA v3.10.4%2026-03-10Fix
CVE-2026-26308Envoy has an RBAC Header Validation Bypass via Multi-Value Header Concatenation7.5CNA v3.10.3%2026-03-10Fix
CVE-2026-26148Microsoft Azure AD SSH Login extension for Linux elevation of privilege8.1CNA v3.10.3%2026-03-10Fix
CVE-2026-26144Microsoft Excel information disclosure7.5CNA v3.10.8%2026-03-10Fix
CVE-2026-26141Microsoft Hybrid Worker Extension (Arc‑enabled Windows VMs) elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-26134Microsoft Office elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-26132Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-26131Microsoft .NET elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-26130Microsoft ASP.NET Core denial of service7.5CNA v3.12.4%2026-03-10Fix
CVE-2026-26128Microsoft Windows SMB server elevation of privilege7.8CNA v3.10.4%2026-03-10Exploit codeFix
CVE-2026-26127Microsoft .NET denial of service7.5CNA v3.11.2%2026-03-10Reported exploitedFix
CVE-2026-26123Microsoft Authenticator information disclosure5.5CNA v3.10.5%2026-03-10Fix
CVE-2026-26121Microsoft Azure IOT Explorer spoofing7.5CNA v3.11.0%2026-03-10Fix
CVE-2026-26118Microsoft Azure MCP Server Tools elevation of privilege8.8CNA v3.10.9%2026-03-10Fix
CVE-2026-26117Microsoft Arc Enabled Servers Azure Connected Machine agent elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-26116SQL Server elevation of privilege8.8CNA v3.11.0%2026-03-10Fix
CVE-2026-26115SQL server elevation of privilege8.8CNA v3.11.0%2026-03-10Fix
CVE-2026-26114Microsoft SharePoint server remote code execution8.8CNA v3.12.5%2026-03-10Exploit codeFix
CVE-2026-26113Microsoft Office remote code execution8.4CNA v3.10.4%2026-03-10Fix
CVE-2026-26112Microsoft Excel remote code execution7.8CNA v3.10.5%2026-03-10Fix
CVE-2026-26111Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.0CNA v3.10.8%2026-03-10Fix
CVE-2026-26110Microsoft Office remote code execution8.4CNA v3.10.3%2026-03-10Fix
CVE-2026-26109Microsoft Excel remote code execution8.4CNA v3.10.3%2026-03-10Fix
CVE-2026-26108Microsoft Excel remote code execution7.8CNA v3.10.5%2026-03-10Fix
CVE-2026-26107Microsoft Excel remote code execution7.8CNA v3.10.5%2026-03-10Fix
CVE-2026-26106Microsoft SharePoint server remote code execution8.8CNA v3.11.3%2026-03-10Fix
CVE-2026-26105Microsoft SharePoint server spoofing8.1CNA v3.11.1%2026-03-10Fix
CVE-2026-25972Fortinet FortiSIEM cross-site scripting4.1CNA v3.10.3%2026-03-10Fix
CVE-2026-25836Fortinet FortiSandbox Cloud OS command injection6.7CNA v3.11.6%2026-03-10Fix
CVE-2026-25689Fortinet FortiDeceptor argument injection6.0CNA v3.10.6%2026-03-10Fix
CVE-2026-25605Siemens SICAM SIAPP SDK external control of a file path5.9CNA v4.00.1%2026-03-10Fix
CVE-2026-25573Siemens SICAM SIAPP SDK external control of a file path8.6CNA v4.00.5%2026-03-10Fix
CVE-2026-25572Siemens SICAM SIAPP SDK improper length parameter handling5.9CNA v4.00.1%2026-03-10Fix
CVE-2026-25571Siemens SICAM SIAPP SDK improper length parameter handling5.9CNA v4.00.1%2026-03-10Fix
CVE-2026-25570Siemens SICAM SIAPP SDK stack-based buffer overflow7.5CNA v4.00.1%2026-03-10Fix
CVE-2026-25569Siemens SICAM SIAPP SDK out-of-bounds write7.5CNA v4.00.1%2026-03-10Fix
CVE-2026-25190Microsoft Windows GDI remote code execution7.8CNA v3.10.5%2026-03-10Fix
CVE-2026-25189Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-25188Microsoft Windows Telephony service elevation of privilege8.8CNA v3.10.6%2026-03-10Fix
CVE-2026-25187Microsoft Windows winlogon elevation of privilege7.8CNA v3.13.2%2026-03-10Reported exploitedFix
CVE-2026-25186Microsoft Windows Accessibility Infrastructure (ATBroker.exe) information disclosure5.5CNA v3.10.6%2026-03-10Fix
CVE-2026-25185Microsoft Windows Shell Link Processing spoofing5.3CNA v3.11.0%2026-03-10Fix
CVE-2026-25181Microsoft Windows GDI+ information disclosure7.5CNA v3.11.4%2026-03-10Fix
CVE-2026-25180Windows Graphics component information disclosure5.5CNA v3.10.7%2026-03-10Fix
CVE-2026-25179Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.3%2026-03-10Fix
CVE-2026-25178Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.3%2026-03-10Fix
CVE-2026-25177Microsoft Windows active Directory Domain services elevation of privilege8.8CNA v3.11.3%2026-03-10Fix
CVE-2026-25176Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-25175Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-25174Microsoft Windows Extensible File Allocation Table elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-25173Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.0CNA v3.10.9%2026-03-10Fix
CVE-2026-25172Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.0CNA v3.10.9%2026-03-10Fix
CVE-2026-25171Microsoft Windows Authentication elevation of privilege7.0CNA v3.10.3%2026-03-10Fix
CVE-2026-25170Microsoft Windows Hyper-V elevation of privilege7.0CNA v3.10.3%2026-03-10Fix
CVE-2026-25169Microsoft Windows Graphics component denial of service6.2CNA v3.10.5%2026-03-10Fix
CVE-2026-25168Microsoft Windows Graphics component denial of service6.2CNA v3.10.5%2026-03-10Fix
CVE-2026-25167Microsoft Brokering File System elevation of privilege7.4CNA v3.10.3%2026-03-10Fix
CVE-2026-25166Microsoft Windows System Image Manager Assessment and Deployment Kit (ADK) remote code execution7.8CNA v3.11.6%2026-03-10Fix
CVE-2026-25165Microsoft Performance Counters for Windows elevation of privilege7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-24641Fortinet FortiWeb null pointer dereference2.5CNA v3.10.4%2026-03-10Fix
CVE-2026-24640Fortinet FortiWeb stack-based buffer overflow5.9CNA v3.10.6%2026-03-10Fix
CVE-2026-24317DLL hijacking vulnerability in SAP GUI for Windows with active GuiXT5.0CNA v3.10.2%2026-03-10Fix
CVE-2026-24316Server-side request forgery (SSRF) in SAP NetWeaver Application Server for ABAP6.4CNA v3.10.2%2026-03-10Fix
CVE-2026-24313Missing authorization check in SAP Solution Tools Plug-In (ST-PI)5.0CNA v3.10.2%2026-03-10Fix
CVE-2026-24311Insecure Storage Protection vulnerability in SAP Customer Checkout5.6CNA v3.10.1%2026-03-10Fix
CVE-2026-24310Missing authorization check in SAP NetWeaver Application Server for ABAP3.5CNA v3.10.2%2026-03-10Fix
CVE-2026-24309Missing authorization check in SAP NetWeaver Application Server for ABAP6.4CNA v3.10.2%2026-03-10Fix
CVE-2026-24297Microsoft Windows Kerberos security feature bypass6.5CNA v3.10.3%2026-03-10Fix
CVE-2026-24296Microsoft Windows Device Association service elevation of privilege7.0CNA v3.10.2%2026-03-10Fix
CVE-2026-24295Microsoft Windows Device Association service elevation of privilege7.0CNA v3.10.2%2026-03-10Fix
CVE-2026-24294Microsoft Windows SMB server elevation of privilege7.8CNA v3.14.7%2026-03-10Exploit codeFix
CVE-2026-24293Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.5%2026-03-10Fix
CVE-2026-24292Microsoft Windows Connected Devices Platform service elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-24291Microsoft Windows Accessibility Infrastructure (ATBroker.exe) elevation of privilege7.8CNA v3.13.2%2026-03-10Exploit codeFix
CVE-2026-24290Microsoft Windows Projected File System elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-24289Microsoft Windows Kernel elevation of privilege7.8CNA v3.14.5%2026-03-10Fix
CVE-2026-24288Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.4%2026-03-10Fix
CVE-2026-24287Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-24285Microsoft Office win32k elevation of privilege7.0CNA v3.10.5%2026-03-10Fix
CVE-2026-24283Microsoft Windows multiple UNC Provider Kernel driver elevation of privilege8.8CNA v3.10.4%2026-03-10Fix
CVE-2026-24282Microsoft Windows push message Routing service elevation of privilege5.5CNA v3.10.4%2026-03-10Fix
CVE-2026-24018Fortinet FortiClientLinux symlink following7.4CNA v3.10.2%2026-03-10Exploit codeFix
CVE-2026-24017Fortinet FortiWeb improper interaction frequency control7.3CNA v3.10.8%2026-03-10Fix
CVE-2026-23907Apache PDFBox Examples: Path traversal in PDFBox ExtractEmbeddedFiles Example Code5.3CISA ADP v3.10.9%2026-03-10Exploit codeFix
CVE-2026-23868giflib GifMakeSavedImage function double free5.1CISA ADP v3.10.1%2026-03-10Fix
CVE-2026-23674Microsoft Windows MapUrlToZone security feature bypass7.5CNA v3.11.2%2026-03-10Fix
CVE-2026-23673Microsoft Windows Resilient File System (ReFS) elevation of privilege7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-23672Microsoft Windows Universal Disk Format File System Driver (UDFS) elevation of privilege7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-23671Microsoft Windows Bluetooth RFCOM protocol driver elevation of privilege7.0CNA v3.10.2%2026-03-10Fix
CVE-2026-23669Microsoft Windows RPC Runtime library remote code execution8.8CNA v3.10.9%2026-03-10Fix
CVE-2026-23668Microsoft Windows Graphics component elevation of privilege7.0CNA v3.13.6%2026-03-10Fix
CVE-2026-23667Microsoft Windows broadcast DVR elevation of privilege7.0CNA v3.10.3%2026-03-10Fix
CVE-2026-23665Microsoft Linux Azure Diagnostic extension (LAD) elevation of privilege7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-23664Microsoft Azure IoT Explorer information disclosure7.5CNA v3.11.0%2026-03-10Fix
CVE-2026-23662Microsoft Azure IoT Explorer information disclosure7.5CNA v3.10.7%2026-03-10Fix
CVE-2026-23661Microsoft Azure IoT Explorer information disclosure7.5CNA v3.10.7%2026-03-10Fix
CVE-2026-23660Microsoft Windows Admin Center in Azure Portal elevation of privilege7.8CNA v3.10.3%2026-03-10Fix
CVE-2026-23656Microsoft Windows App Installer spoofing5.9CNA v3.10.3%2026-03-10Fix
CVE-2026-23654Microsoft GitHub: Zero Shot SCFoundation remote code execution8.8CNA v3.10.9%2026-03-10Fix
CVE-2026-23240Linux kernel TLS transmit work cancellation race condition9.8CNA v3.10.5%2026-03-10Fix
CVE-2026-23239Linux kernel espintcp socket close race condition7.8CNA v3.10.1%2026-03-10Fix
CVE-2026-22629Fortinet FortiAnalyzer missing brute-force protection3.4CNA v3.10.4%2026-03-10Fix
CVE-2026-22628Fortinet FortiSwitchAXFixed improper access control5.1CNA v3.10.1%2026-03-10Fix
CVE-2026-22627Fortinet FortiSwitchAXFixed buffer overflow7.7CNA v3.10.3%2026-03-10Fix
CVE-2026-22614Eaton EasySoft recoverable password storage6.1CNA v3.10.1%2026-03-10Fix
CVE-2026-22572Fortinet FortiAnalyzer authentication bypass6.8CNA v3.10.6%2026-03-10Fix
CVE-2026-21791HCL Sametime for Android is affected by sensitive information disclosure3.3CNA v3.10.1%2026-03-10Fix
CVE-2026-21365Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.1%2026-03-10Fix
CVE-2026-21364Adobe Substance3D Painter null pointer dereference5.5CNA v3.10.1%2026-03-10Fix
CVE-2026-21363Adobe Substance3D Painter null pointer dereference5.5CNA v3.10.1%2026-03-10Fix
CVE-2026-21362Adobe Illustrator out-of-bounds write7.8CNA v3.10.1%2026-03-10Fix
CVE-2026-21333Adobe Illustrator untrusted search path8.6CNA v3.10.2%2026-03-10Fix
CVE-2026-21262SQL server elevation of privilege8.8CNA v3.12.0%2026-03-10Reported exploitedFix
CVE-2026-20967Microsoft System Center Operations Manager (SCOM) elevation of privilege8.8CNA v3.11.1%2026-03-10Fix
CVE-2026-3862Cross-site scripting vulnerability in SiteMinder Administrative UI4.6CNA v4.00.2%2026-03-10Fix
CVE-2026-3854Remote code execution via git push option injection in GitHub Enterprise Server8.7CNA v4.01.5%2026-03-10Exploit codeFix
CVE-2026-3847Mozilla memory safety bugs fixed in Firefox8.8CISA ADP v3.10.4%2026-03-10Fix
CVE-2026-3846Mozilla Firefox same-origin policy bypass in the CSS Parsing and Computation component6.5CISA ADP v3.10.2%2026-03-10Fix
CVE-2026-3845Mozilla heap buffer overflow in the Audio/Video: Playback component in Firefox for Android8.8CISA ADP v3.10.4%2026-03-10Fix
CVE-2026-3843SQL injection in Nefteprodukttekhnika BUK TS-G allows remote code execution9.3CNA v4.00.9%2026-03-10
CVE-2026-3585The Events Calendar WordPress plugin arbitrary file read7.5CNA v3.10.5%2026-03-10Fix
CVE-2026-3582GitHub Enterprise Server search REST API incorrect authorization5.3CNA v4.00.4%2026-03-10Fix
CVE-2026-3483Ivanti Desktop and Server Management exposed dangerous method7.8CNA v3.10.4%2026-03-10Fix
CVE-2026-3315Local privilege escalation due to Writable Executable in Privileged Visionline Service Path7.8v3.10.2%2026-03-10Fix
CVE-2026-3306GitHub Enterprise Server Projects improper authorization5.3CNA v4.00.4%2026-03-10Exploit codeFix
CVE-2026-3228NextScripts: Social Networks Auto-Poster WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-03-10Exploit codeFix
CVE-2026-2742Vaadin An authentication bypass5.3CNA v4.00.5%2026-03-10Fix
CVE-2026-2741Vaadin Zip Slip path traversal on Node Unpack2.3CNA v4.00.4%2026-03-10Fix
CVE-2026-2724Unlimited Elements For Elementor WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-03-10Fix
CVE-2026-2713IBM Trusteer Rapport installer affected by uncontrolled search path element7.4CNA v3.10.2%2026-03-10Fix
CVE-2026-2364CODESYS Installer TOCTOU privilege escalation7.3CNA v3.10.1%2026-03-10Fix
CVE-2026-2339RCE in TUBITAK BILGEM's Liderahenk7.5CNA v3.10.8%2026-03-10Fix
CVE-2026-2273Schneider Electric EcoStruxure™ Automation Expert code injection7.2CNA v4.00.2%2026-03-10Fix
CVE-2026-2266GitHub Enterprise Server task list rendering cross-site scripting7.4CNA v4.00.2%2026-03-10Fix
CVE-2026-1920Booktics WordPress plugin missing authorization to Addon plugin installation5.3CNA v3.10.2%2026-03-10Fix
CVE-2026-1919Booktics WordPress plugin missing authorization to Get Items via REST API endpoints5.3CNA v3.10.3%2026-03-10Fix
CVE-2026-1508Court Reservation WordPress plugin Event deletion via CSRF4.3CISA ADP v3.10.1%2026-03-10Fix
CVE-2026-1286Schneider Electric EcoStruxure™ Foxboro DCS deserialization of untrusted data7.0CNA v4.00.3%2026-03-10Fix
CVE-2026-1261MetForm Pro WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-03-10Fix
CVE-2026-0953Tutor LMS Pro WordPress plugin authentication bypass via Social login9.8CNA v3.10.7%2026-03-10Fix
CVE-2026-0489DOM-based cross-site scripting (XSS) vulnerability in SAP Business One (Job service)6.1CNA v3.10.2%2026-03-10Fix
CVE-2026-0124Google Android out-of-bounds write10.0CNA v4.00.1%2026-03-10Fix
CVE-2026-0123Google Android efw_ap_transport.cc out-of-bounds write8.4CISA ADP v3.10.1%2026-03-10Fix
CVE-2026-0122Google Android multiple places out-of-bounds write8.4CISA ADP v3.10.1%2026-03-10Fix
CVE-2026-0121Google Android VPU use-after-free2.9CISA ADP v3.10.1%2026-03-10Fix
CVE-2026-0120Google Android modem out-of-bounds write9.8CISA ADP v3.10.3%2026-03-10Fix
CVE-2026-0119Google Android usim_Registration.c out-of-bounds write6.8CISA ADP v3.10.1%2026-03-10Fix
CVE-2026-0118Google Android oobconfig privilege escalation8.4CISA ADP v3.10.1%2026-03-10Fix
CVE-2026-0117Google Android mfc_dec_v4l2.c out-of-bounds write8.4CISA ADP v3.10.1%2026-03-10Fix
CVE-2026-0116Google Android mfc_core_isr.c out-of-bounds write9.8CISA ADP v3.10.3%2026-03-10Fix
CVE-2026-0115Google Android Trusted Execution Environment information disclosure2.1CISA ADP v3.10.1%2026-03-10Fix