CVE-2026 records published in March 2026

Page five of six: records 4,001 to 5,000 of the 5,228 published in March 2026, newest first. The first page carries the figures for March 2026.

CVE-2026 records published in March 2026, newest first: records 4,001 to 5,000 of 5,228
CVE	Summary	CVSS	EPSS	Published	Signals
CVE-2026-0114	Google Android Modem out-of-bounds write	9.8CISA ADP v3.1	0.3%	2026-03-10	Fix
CVE-2026-0113	Google Android ns_SmscbUtilities.c out-of-bounds write	9.8CISA ADP v3.1	0.3%	2026-03-10	Fix
CVE-2026-0112	Google Android vpu_ioctl.c use-after-free	7.4CISA ADP v3.1	0.1%	2026-03-10	Fix
CVE-2026-0111	Google Android ns_SmscbUtilities.c out-of-bounds write	9.8CISA ADP v3.1	0.3%	2026-03-10	Fix
CVE-2026-0110	Google Android cn_NrSmMsgHdlrFromMM.cpp elevation of privilege	9.8CISA ADP v3.1	0.3%	2026-03-10	Fix
CVE-2026-0109	Google Android dhd_ip.c denial of service	7.5CISA ADP v3.1	0.3%	2026-03-10	Fix
CVE-2026-0108	Google Android information disclosure	4.0CISA ADP v3.1	0.1%	2026-03-10	Fix
CVE-2026-0107	Google Android gmc_mba_ddr.c privilege escalation	8.4CISA ADP v3.1	0.1%	2026-03-10	Fix
CVE-2026-31816	Budibase Universal Auth Bypass via Webhook Query Param injection	9.1CNA v3.1	2.2%	2026-03-09	Reported exploitedNucleiExploit code
CVE-2026-30896	Qsee Client uncontrolled search path	8.4CNA v4.0	0.2%	2026-03-09
CVE-2026-30240	Budibase PWA ZIP upload path traversal	9.6CNA v3.1	0.3%	2026-03-09
CVE-2026-30140	Tenda W15E improper access control	7.5CISA ADP v3.1	0.4%	2026-03-09
CVE-2026-29023	Keygraph Shannon Hard-coded Router API Key	6.9CNA v4.0	0.4%	2026-03-09
CVE-2026-28693	ImageMagick has an integer overflow in DIB coder can result in out-of-bounds read or write	8.1CNA v3.1	0.6%	2026-03-09	Fix
CVE-2026-28691	ImageMagick has an uninitialized pointer dereference in JBIG decoder	7.5CNA v3.1	0.6%	2026-03-09	Fix
CVE-2026-25960	SSRF Protection Bypass in vLLM	7.1CNA v3.1	0.7%	2026-03-09	Fix
CVE-2026-25866	MobaXterm Notepad++ unquoted service path	8.5CNA v4.0	0.2%	2026-03-09	Fix
CVE-2026-25737	Budibase arbitrary file upload leading to multiple Critical vulnerabilities (SSRF, stored XSS)	8.9CNA v3.1	0.4%	2026-03-09
CVE-2026-25604	Apache Airflow AWS Auth Manager host header injection leading to SAML authentication bypass	5.4CISA ADP v3.1	0.5%	2026-03-09	Exploit codeFix
CVE-2026-25045	Budibase Critical privilege escalation and IDOR	8.7CNA v4.0	0.3%	2026-03-09
CVE-2026-25041	Budibase has a command injection in PostgreSQL Dump command	8.6CNA v4.0	0.5%	2026-03-09	Fix
CVE-2026-24713	Apache IoTDB: JEXL Expression injection	9.8v3.1	0.7%	2026-03-09	Fix
CVE-2026-24015	Apache IoTDB: Insecure default Configuration	9.8v3.1	0.6%	2026-03-09	Fix
CVE-2026-21736	GPU Ddk insufficient permission check in PhysmemWrapExtMem when write attribute support enabled	4.4CISA ADP v3.1	0.1%	2026-03-09	Fix
CVE-2026-3823	Atop Technologies｜EHG2408 series switch stack-based buffer overflow	9.8v3.1	1.0%	2026-03-09	Fix
CVE-2026-3822	Taipower｜Taipower APP(Android) improper certificate validation	4.8NVD v3.1	0.2%	2026-03-09	Fix
CVE-2026-3819	SourceCodester Resort Reservation System Reservation Management page cross-site scripting	5.4v3.1	0.3%	2026-03-09
CVE-2026-3818	Tiandy Easy7 CMS Windows GetDBData.jsp SQL injection	9.8v3.1	0.6%	2026-03-09
CVE-2026-3817	SourceCodester Patients Waiting Area Queue Management System patient search improper authorization	6.9CNA v4.0	0.6%	2026-03-09
CVE-2026-3816	OWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service	6.5v3.1	0.7%	2026-03-09	Fix
CVE-2026-3815	UTT HiPER 810G formApMail strcpy buffer overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3814	UTT HiPER 810G getOneApConfTempEntry strcpy buffer overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3813	opencc JFlow WF_CCForm.java Calculate injection	9.8v3.1	0.6%	2026-03-09
CVE-2026-3812	itsourcecode Payroll Management System manage_employee_allowances.php cross-site scripting	6.1v3.1	0.5%	2026-03-09
CVE-2026-3811	Tenda FH1202 P2pListFilter fromP2pListFilter stack-based overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3810	Tenda FH1202 DhcpListClient fromDhcpListClient stack-based overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3809	Tenda FH1202 NatSaticSetting fromNatStaticSetting stack-based overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3808	Tenda FH1202 webtypelibrary formWebTypeLibrary stack-based overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3807	Tenda FH1202 AdvSetWrlsafeset formWrlsafeset stack-based overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3806	SourceCodester/Janobe Resort Reservation System room_rates.php SQL injection	8.8v3.1	0.5%	2026-03-09
CVE-2026-3804	Tenda i3 WifiMacFilterSet formWifiMacFilterSet stack-based overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3803	Tenda i3 WifiMacFilterGet formWifiMacFilterGet stack-based overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3802	Tenda i3 exeCommand formexeCommand stack-based overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3801	Tenda i3 setAutoPing formSetAutoPing stack-based overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3800	SourceCodester/Janobe Resort Reservation System controller.php doInsert unrestricted upload	8.8v3.1	0.5%	2026-03-09
CVE-2026-3799	Tenda i3 setcfm formSetCfm stack-based overflow	8.7CNA v4.0	1.0%	2026-03-09
CVE-2026-3798	Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection	7.2v3.1	10.9%	2026-03-09	Emerging Threats
CVE-2026-3797	Tiandy Video Surveillance System 视频监控平台 CLS_REST_File.java uploadFile unrestricted upload	8.8v3.1	0.5%	2026-03-09
CVE-2026-3796	Qi-ANXIN QAX Virus Removal Mini Filter Driver QKSecureIO_Imp.sys ZwTerminateProcess access control	7.8v3.1	0.2%	2026-03-09	Exploit code
CVE-2026-3795	doramart DoraCMS v1.js createFileBypath path traversal	9.8v3.1	0.8%	2026-03-09
CVE-2026-3794	doramart DoraCMS Email API send improper authentication	9.8v3.1	1.0%	2026-03-09
CVE-2026-3793	SourceCodester Sales and Inventory System GET parameter sales_invoice1.php SQL injection	8.8v3.1	0.5%	2026-03-09
CVE-2026-3792	SourceCodester Sales and Inventory System GET parameter purchase_invoice.php SQL injection	8.8v3.1	0.5%	2026-03-09
CVE-2026-3791	SourceCodester Sales and Inventory System Search dashboard.php SQL injection	8.8v3.1	0.5%	2026-03-09
CVE-2026-3790	SourceCodester Sales and Inventory System POST parameter check_supplier_details.php SQL injection	8.8v3.1	0.5%	2026-03-09
CVE-2026-3789	Bytedesk server-side request forgery	8.8v3.1	0.7%	2026-03-09	Fix
CVE-2026-3788	Bytedesk server-side request forgery	8.8v3.1	0.7%	2026-03-09	Fix
CVE-2026-3638	Devolutions Server user and role restore API endpoints improper access control	5.9CISA ADP v3.1	0.2%	2026-03-09	Fix
CVE-2026-3631	Buffer over-read DoS vulnerability in COMMGR2	7.5CNA v3.1	0.5%	2026-03-09	Fix
CVE-2026-3630	Stack-based buffer overflow vulnerability in COMMGR2	9.8CNA v3.1	0.5%	2026-03-09	Fix
CVE-2026-3588	Server-side request forgery (SSRF) in Ikea dirigera	5.5NVD v3.1	0.2%	2026-03-09
CVE-2026-3288	ingress-nginx rewrite-target nginx configuration injection	8.8CNA v3.1	0.7%	2026-03-09	Exploit codeFix
CVE-2026-3089	Actual Sync Server authenticated path traversal	6.5v3.1	0.4%	2026-03-09	Fix
CVE-2026-3038	FreeBSD local DoS and possible privilege escalation via routing sockets	7.5CISA ADP v3.1	0.4%	2026-03-09	Fix
CVE-2026-2919	Mozilla Focus UI misrepresentation	4.3CISA ADP v3.1	0.2%	2026-03-09	Fix
CVE-2026-2261	FreeBSD blocklistd vulnerability	7.5v3.1	0.4%	2026-03-09	Fix
CVE-2026-1776	owen2345 CamaleonCMS camaleon CMS AWS Uploader Authenticated path traversal arbitrary file read	6.5NVD v3.1	0.8%	2026-03-09	Fix
CVE-2026-0846	nltk/nltk arbitrary file read via Absolute Path Input in nltk.util.filestring	7.5v3.1	0.5%	2026-03-09	Fix
CVE-2026-30910	Crypt::Sodium::XS versions for Perl has potential integer overflows	7.5NVD v3.1	0.4%	2026-03-08	Fix
CVE-2026-30909	Crypt::NaCl::Sodium versions for Perl has potential integer overflows	9.8NVD v3.1	0.8%	2026-03-08	Fix
CVE-2026-3787	UltraVNC Windows service cryptbase.dll uncontrolled search path	7.3CNA v4.0	0.2%	2026-03-08
CVE-2026-3786	EasyCMS request Parameter RbacuserAction.class.php SQL injection	8.8v3.1	0.5%	2026-03-08	Exploit code
CVE-2026-3785	EasyCMS request Parameter RbacnodeAction.class.php SQL injection	8.8v3.1	0.5%	2026-03-08
CVE-2026-3771	SourceCodester/Janobe Resort Reservation System accomodation.php SQL injection	8.8v3.1	0.5%	2026-03-08
CVE-2026-3770	SourceCodester Computer Laboratory Management System cross-site request forgery	8.8v3.1	0.3%	2026-03-08
CVE-2026-3769	Tenda F453 WrlclientSet stack-based overflow	8.7CNA v4.0	1.0%	2026-03-08
CVE-2026-3768	Tenda F453 WrlExtraSet formWrlExtraSet stack-based overflow	8.7CNA v4.0	1.0%	2026-03-08
CVE-2026-3767	itsourcecode sanitize or validate this input teacher-attendance.php SQL injection	8.8v3.1	0.5%	2026-03-08
CVE-2026-3766	SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross-site scripting	5.4v3.1	0.3%	2026-03-08
CVE-2026-3765	itsourcecode University Management System att_single_view.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3764	SourceCodester Client Database Management System superadmin_user_update.php improper authorization	6.9CNA v4.0	0.6%	2026-03-08
CVE-2026-3763	code-projects Simple Flight Ticket Booking System showhistory.php cross-site scripting	6.1v3.1	0.5%	2026-03-08
CVE-2026-3762	SourceCodester Client Database Management System improper authorization	9.8v3.1	0.7%	2026-03-08
CVE-2026-3761	SourceCodester Client Database Management System superadmin_user_delete.php improper authorization	5.3CNA v4.0	0.5%	2026-03-08
CVE-2026-3760	itsourcecode University Management System view_result.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3759	Projectworlds Online Art Gallery Shop adminHome.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3758	Projectworlds Online Art Gallery Shop adminHome.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3757	Projectworlds Online Art Gallery Shop pass SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3756	SourceCodester Sales and Inventory System check_item_details.php SQL injection	8.8v3.1	0.5%	2026-03-08
CVE-2026-3755	SourceCodester Sales and Inventory System POST check_customer_details.php SQL injection	8.8v3.1	0.5%	2026-03-08
CVE-2026-3754	SourceCodester Sales and Inventory System add_stock.php SQL injection	8.8v3.1	0.5%	2026-03-08
CVE-2026-3753	SourceCodester Sales and Inventory System add_sales_print.php SQL injection	8.8v3.1	0.5%	2026-03-08
CVE-2026-3752	SourceCodester Employee Task Management System GET parameter daily-task-report.php SQL injection	7.2v3.1	0.5%	2026-03-08
CVE-2026-3751	SourceCodester Employee Task Management System daily-attendance-report.php SQL injection	7.2v3.1	0.5%	2026-03-08
CVE-2026-3750	ContiNew Admin Storage Management S3ClientFactory.java URI.create server-side request forgery	7.2v3.1	0.6%	2026-03-08
CVE-2026-3749	Bytedesk SVG File UploadRestService.java handleFileUpload unrestricted upload	8.8v3.1	0.7%	2026-03-08	Fix
CVE-2026-3748	Bytedesk SVG File UploadRestController.java uploadFile unrestricted upload	8.8v3.1	0.7%	2026-03-08	Fix
CVE-2026-3747	itsourcecode University Management System add_result.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3746	SourceCodester Simple Responsive Tourism Website Login Login.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3745	code-projects Student Web Portal profile.php SQL injection	8.8v3.1	0.5%	2026-03-08
CVE-2026-3744	code-projects Student Web Portal signup.php valreg_passwdation SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3743	YiFang CMS D_singlePageGroup.php update cross-site scripting	5.4v3.1	0.3%	2026-03-08
CVE-2026-3742	YiFang CMS D_singlePage.php update cross-site scripting	5.4v3.1	0.3%	2026-03-08
CVE-2026-3741	YiFang CMS D_friendLink.php update cross-site scripting	5.4v3.1	0.3%	2026-03-08
CVE-2026-3740	itsourcecode University Management System admin_search_student.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3739	suitenumerique messages ThreadAccess serializers.py ThreadAccessSerializer improper authentication	5.3CNA v4.0	0.5%	2026-03-08	Fix
CVE-2026-3738	SourceCodester Pet Grooming Management Software Financial Report improper authorization	5.3CNA v4.0	0.4%	2026-03-08
CVE-2026-3737	SourceCodester Pet Grooming Management Software User Creation add_user.php improper authorization	5.3CNA v4.0	0.4%	2026-03-08
CVE-2026-3736	code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3735	code-projects Simple Flight Ticket Booking System SearchResultOneway.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3734	SourceCodester Client Database Management System fetch_manager_details.php improper authorization	6.9CNA v4.0	0.6%	2026-03-08
CVE-2026-3733	Xuxueli xxl-job JobInfoController.java server-side request forgery	5.3CNA v4.0	0.4%	2026-03-08
CVE-2026-3732	Tenda F453 exeCommand strcpy stack-based overflow	8.7CNA v4.0	1.0%	2026-03-08
CVE-2026-3731	libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds	7.5v3.1	1.2%	2026-03-08	Fix
CVE-2026-3730	itsourcecode Free Hotel Reservation System index.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3729	Tenda F453 PPTPDClient fromPptpUserAdd stack-based overflow	8.7CNA v4.0	1.0%	2026-03-08
CVE-2026-3728	Tenda F453 setcfm fromSetCfm stack-based overflow	8.7CNA v4.0	1.0%	2026-03-08
CVE-2026-3727	Tenda F453 QuickIndex sub_3C6C0 stack-based overflow	8.7CNA v4.0	1.0%	2026-03-08
CVE-2026-3726	Tenda F453 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow	8.7CNA v4.0	1.0%	2026-03-08
CVE-2026-3725	lab1024 SmartAdmin FreeMarker mail template handler server-side template injection	8.8v3.1	0.6%	2026-03-08
CVE-2026-3724	SourceCodester Patients Waiting Area Queue Management System checkin.php improper authorization	8.8v3.1	0.5%	2026-03-08
CVE-2026-3723	code-projects Simple Flight Ticket Booking System Admindelete.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3721	1024-lab/lab1024 SmartAdmin Help Documentation HelpDocAddForm.java cross-site scripting	5.4v3.1	0.3%	2026-03-08
CVE-2026-3720	1024-lab/lab1024 SmartAdmin Notice notice-form-drawer.vue cross-site scripting	5.4v3.1	0.3%	2026-03-08
CVE-2026-3719	Tsinghua Unigroup Electronic Archives System downLoad path traversal	6.9CNA v4.0	0.8%	2026-03-08
CVE-2026-3716	Wavlink WL-WN579X3-C adm.cgi sub_401AD4 cross-site scripting	4.8v3.1	0.4%	2026-03-08
CVE-2026-3715	Wavlink WL-WN579X3-C firewall.cgi sub_40139C stack-based overflow	8.7CNA v4.0	1.0%	2026-03-08
CVE-2026-3714	OpenCart Incomplete Fix template.php save special elements used in a template engine	5.1CNA v4.0	0.5%	2026-03-08
CVE-2026-3713	pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow	4.8CNA v4.0	0.2%	2026-03-08	Fix
CVE-2026-3711	code-projects Simple Flight Ticket Booking System Adminupdate.php SQL injection	7.2v3.1	0.5%	2026-03-08
CVE-2026-3710	code-projects Simple Flight Ticket Booking System Adminadd.php SQL injection	7.2v3.1	0.5%	2026-03-08
CVE-2026-3709	code-projects Simple Flight Ticket Booking System register.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3708	code-projects Simple Flight Ticket Booking System login.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3707	MrNanko webp4j gif_decoder.c DecodeGifFromMemory integer overflow	4.8CNA v4.0	0.2%	2026-03-08
CVE-2026-3706	mkj Dropbear S Range Check curve25519.c unpackneg signature verification	6.3CNA v4.0	0.2%	2026-03-08	Fix
CVE-2026-3705	code-projects Simple Flight Ticket Booking System Adminsearch.php SQL injection	9.8v3.1	0.6%	2026-03-08
CVE-2026-3704	Wavlink NU516U1 Incomplete Fix firewall.cgi sub_405B2C command injection	7.2v3.1	5.3%	2026-03-08
CVE-2026-3703	Wavlink NU516U1 login.cgi sub_401A10 out-of-bounds write	9.3CNA v4.0	1.3%	2026-03-08
CVE-2026-3702	SourceCodester Loan Management System index.php cross-site scripting	6.1v3.1	0.5%	2026-03-08
CVE-2026-3701	H3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflow	8.7CNA v4.0	1.1%	2026-03-08
CVE-2026-3700	UTT HiPER 810G formConfigDnsFilterGlobal strcpy buffer overflow	8.7CNA v4.0	1.0%	2026-03-08
CVE-2026-3699	UTT HiPER 810G formRemoteControl strcpy buffer overflow	8.7CNA v4.0	1.0%	2026-03-08
CVE-2026-3698	UTT HiPER 810G NTP strcpy buffer overflow	8.7CNA v4.0	1.0%	2026-03-08	Fix
CVE-2026-3697	Planet ICG-2510 Language Package Configuration httpd sub_40C8E4 stack-based overflow	5.3CNA v4.0	0.4%	2026-03-08
CVE-2026-3696	Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection	9.8v3.1	2.9%	2026-03-08
CVE-2026-3695	SourceCodester Modern Image Gallery App delete.php path traversal	6.9CNA v4.0	0.9%	2026-03-08
CVE-2026-3693	Shy2593666979 AgentChat User endpoint user.py update_user_info resource injection	6.9CNA v4.0	0.6%	2026-03-08
CVE-2026-3683	bufanyun HotGo endpoint upload.go ImageTransferStorage server-side request forgery	5.3CNA v4.0	0.4%	2026-03-08
CVE-2026-3682	welovemedia FFmate ffmpeg.go Execute argument injection	5.3CNA v4.0	0.4%	2026-03-08
CVE-2026-30863	Parse Platform Parse Server third-party authentication adapters improper authentication	9.3CNA v4.0	0.7%	2026-03-07	Exploit codeFix
CVE-2026-30861	WeKnora: Remote code execution (RCE) via command injection in MCP Stdio Configuration Validation	10.0CNA v3.1	2.6%	2026-03-07	Fix
CVE-2026-30860	WeKnora: Remote code execution via SQL injection Bypass in AI Database Query tool	10.0CNA v3.1	0.8%	2026-03-07	Fix
CVE-2026-30859	WeKnora: Broken access control Cross-Tenant data exposure	5.3CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-30858	WeKnora: DNS Rebinding vulnerability in web_fetch tool allows SSRF to Internal Resources	6.5CNA v3.1	0.5%	2026-03-07	Fix
CVE-2026-30857	WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning	5.3CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-30856	Tencent WeKnora MCP client tool naming vulnerability	5.9CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-30855	WeKnora: Broken access control in Tenant Management	8.8CNA v3.1	0.5%	2026-03-07	Fix
CVE-2026-30854	Parse Platform Parse Server GraphQL introspection incorrect authorization	6.9CNA v4.0	0.3%	2026-03-07	Fix
CVE-2026-30852	Caddy: Vars_regexp double-expands user input, leaking env vars and files	5.5CNA v4.0	0.5%	2026-03-07	Fix
CVE-2026-30851	Caddy forward_auth copy_headers privilege escalation	8.1CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-30850	Parse Platform Parse Server file metadata endpoint missing authorization	6.3CNA v4.0	0.4%	2026-03-07	Fix
CVE-2026-30848	Parse Platform Parse Server PagesRouter path traversal	6.3CNA v4.0	0.4%	2026-03-07	Fix
CVE-2026-30842	Wallos: Authenticated missing authorization allows Deletion of other Users’ Uploaded Avatars	4.3CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-30841	Wallos: Reflected XSS via unescaped token and email parameters in passwordreset.php	6.9CNA v4.0	0.3%	2026-03-07	Fix
CVE-2026-30840	Wallos: Server-side request forgery (SSRF) in Notification Testers	8.8CNA v3.0	0.6%	2026-03-07	Fix
CVE-2026-30839	Wallos: SSRF via webhook test endpoint	5.3CNA v4.0	0.4%	2026-03-07	Fix
CVE-2026-30838	League/commonmark: DisallowedRawHtml extension bypass via whitespace in HTML tag names	5.1CNA v4.0	0.3%	2026-03-07	Fix
CVE-2026-30834	PinchTab: SSRF with Full Response Exfiltration via Download handler	7.5CNA v3.1	0.5%	2026-03-07	Fix
CVE-2026-30832	charmbracelet soft-serve soft Serve: SSRF via unvalidated LFS endpoint in repo import	9.1CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-30830	Defuddle: XSS via unescaped string interpolation in _findContentBySchemaText image tag	2.1CNA v4.0	0.3%	2026-03-07	Fix
CVE-2026-30829	Checkmate: Unauthenticated access to Unpublished Status page	5.3CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-30828	Wallos: SSRF via URL parameter leading to File Traversal	8.7CNA v4.0	0.5%	2026-03-07	Fix
CVE-2026-30827	express-rate-limit rate-limit key generator denial of service	7.5CNA v3.1	0.5%	2026-03-07	Fix
CVE-2026-30825	Hoppscotch personal access token revocation endpoint insecure direct object reference	0.0CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-30824	Flowise: Missing authentication on NVIDIA NIM endpoints	7.7CNA v4.0	2.6%	2026-03-07	NucleiExploit codeFix
CVE-2026-30823	Flowise: IDOR leading to account takeover and Enterprise Feature Bypass via SSO Configuration	8.8CNA v3.0	0.5%	2026-03-07	Fix
CVE-2026-30822	Flowise: Mass assignment in `/API/v1/leads` endpoint	7.7CNA v3.0	0.5%	2026-03-07	Fix
CVE-2026-30821	Flowise: Arbitrary file upload via MIME spoofing	8.2CNA v4.0	0.9%	2026-03-07	Fix
CVE-2026-30820	Flowise authorization bypass via Spoofed x-request-from header	8.7CNA v4.0	0.6%	2026-03-07	Fix
CVE-2026-30247	WeKnora: SSRF via Redirection	5.9CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-29787	mcp-memory-service vulnerable to system information disclosure via Health endpoint	5.3CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-29786	Tar has Hardlink path traversal via Drive-Relative Linkpath	8.2CNA v4.0	0.4%	2026-03-07	Exploit codeFix
CVE-2026-29784	Ghost: Incomplete CSRF protections around OTC use	7.5CNA v3.1	0.2%	2026-03-07	Fix
CVE-2026-29781	Sliver: Authenticated Nil-Pointer Dereference in Handlers	2.1CNA v4.0	0.5%	2026-03-07	Exploit code
CVE-2026-29780	GOVCERT.LU eml_parser attachment extraction example script path traversal	5.5CNA v3.1	0.2%	2026-03-07	Exploit codeFix
CVE-2026-29779	UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle	7.5CNA v3.1	0.5%	2026-03-07	Fix
CVE-2026-29778	pyLoad: Arbitrary file write via path traversal in edit_package	7.1CNA v3.1	0.5%	2026-03-07	Fix
CVE-2026-29771	Netmaker: Denial of service via Server Shutdown endpoint	8.7CNA v4.0	0.4%	2026-03-07	Fix
CVE-2026-29196	Netmaker: Service User with Network Access can Access config files with WireGuard Private Keys	8.7CNA v4.0	0.3%	2026-03-07	Fix
CVE-2026-29195	Netmaker: Privilege escalation from Admin to Super-Admin via User Update	6.9CNA v4.0	0.3%	2026-03-07	Fix
CVE-2026-29194	Netmaker: Insufficient authorization in Host Token Verification	8.6CNA v4.0	0.5%	2026-03-07	Fix
CVE-2026-29193	ZITADEL: Bypassing Zitadel Login Behavior and Security Policy in Login V2	8.2CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-29192	ZITADEL: Stored XSS via Default URI Redirect leads to account takeover	7.7CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-29191	ZITADEL: 1-Click account takeover via XSS in /saml-post endpoint	9.3CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-29190	Karapace: Path traversal in Backup Reader	4.1CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-29186	@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key enables arbitrary code execution	7.7CNA v3.1	0.9%	2026-03-07	Fix
CVE-2026-29185	@Backstage/integration: Potential reading of SCM URLs using built in token	2.7CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-29184	@Backstage/plugin-scaffolder-backend: Potential Session Token Exfiltration via Log Redaction Bypass	2.0CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-29076	cpp-httplib multipart filename parsing denial of service	5.9CNA v3.1	0.6%	2026-03-07	Fix
CVE-2026-29067	ZITADEL: Account takeover due to Improper Instance Validation in V2 Login	8.1CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-27797	Homarr: Unauthenticated SSRF in rssFeed.ts	5.3CNA v3.1	0.5%	2026-03-07	Fix
CVE-2026-27796	Homarr: Unauthenticated information disclosure (Integration Metadata leak)	5.3CNA v3.1	1.2%	2026-03-07	NucleiFix
CVE-2026-25073	XikeStor SKS8310-8X stored XSS via System Name	5.4v3.1	0.2%	2026-03-07
CVE-2026-25072	XikeStor SKS8310-8X predictable session Identifiers	9.8v3.1	0.5%	2026-03-07
CVE-2026-25071	XikeStor SKS8310-8X switch_config.src missing authentication	7.5v3.1	0.5%	2026-03-07
CVE-2026-25070	XikeStor SKS8310-8X PingTestSet command injection	9.8v3.1	3.1%	2026-03-07
CVE-2026-24308	Apache ZooKeeper: Sensitive information disclosure in client configuration handling	7.5v3.1	1.2%	2026-03-07	Fix
CVE-2026-24281	Apache ZooKeeper ZKTrustManager improper certificate validation	7.4v3.1	0.6%	2026-03-07	Fix
CVE-2026-3681	welovemedia FFmate webhook.go fireWebhook server-side request forgery	5.3CNA v4.0	0.4%	2026-03-07
CVE-2026-3680	RyuzakiShinji biome-mcp-server biome-mcp-server.ts command injection	5.3CNA v4.0	1.9%	2026-03-07
CVE-2026-3679	Tenda FH451 QuickIndex formQuickIndex stack-based overflow	8.7CNA v4.0	1.0%	2026-03-07
CVE-2026-3678	Tenda FH451 AdvSetWan sub_3C434 stack-based overflow	8.7CNA v4.0	1.0%	2026-03-07
CVE-2026-3677	Tenda FH451 setcfm fromSetCfm stack-based overflow	8.7CNA v4.0	1.0%	2026-03-07
CVE-2026-3675	Freedom Factory dGEN1 org.ethosmobile.ethoslauncher FakeAppReceiver improper authorization	4.8CNA v4.0	0.2%	2026-03-07
CVE-2026-3674	Freedom Factory dGEN1 org.ethosmobile.ethoslauncher FakeAppProvider improper authorization	4.8CNA v4.0	0.2%	2026-03-07
CVE-2026-3672	JeecgBoot getDictItems isExistSqlInjectKeyword SQL injection	5.3CNA v4.0	0.3%	2026-03-07
CVE-2026-3671	Freedom Factory dGEN1 TokenBalanceContentProvider improper authorization	4.8CNA v4.0	0.2%	2026-03-07
CVE-2026-3670	Freedom Factory dGEN1 com.dgen.alarm improper authorization	4.8CNA v4.0	0.2%	2026-03-07
CVE-2026-3669	Freedom Factory dGEN1 com.dgen.alarm AlarmService improper authorization	4.8CNA v4.0	0.2%	2026-03-07
CVE-2026-3668	Freedom Factory dGEN1 org.ethosmobile.webpwaemul AndroidEthereum access control	2.3CNA v4.0	0.4%	2026-03-07
CVE-2026-3667	Freedom Factory dGEN1 org.ethosmobile.ethoslauncher FakeAppService improper authorization	4.8CNA v4.0	0.2%	2026-03-07
CVE-2026-3665	xlnt-community xlnt XLSX file xlsx_consumer.cpp read_office_document null pointer dereference	5.5v3.1	0.2%	2026-03-07
CVE-2026-3664	xlnt-community xlnt Encrypted XLSX file compound_document.cpp read_directory out-of-bounds	5.5v3.1	0.2%	2026-03-07
CVE-2026-3663	xlnt-community xlnt XLSX file compound_document.cpp xsgetn out-of-bounds	7.1v3.1	0.2%	2026-03-07
CVE-2026-3662	Wavlink WL-NU516U1 adm.cgi usb_p910 command injection	7.2v3.1	11.3%	2026-03-07
CVE-2026-3661	Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection	7.2v3.1	11.3%	2026-03-07
CVE-2026-3352	Easy PHP Settings WordPress plugin PHP code injection	7.2CNA v3.1	0.7%	2026-03-07	Fix
CVE-2026-2722	Stock Ticker WordPress plugin stored cross-site scripting	4.8CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-2721	MailArchiver WordPress plugin stored cross-site scripting	4.8CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-2671	Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission	2.3CNA v4.0	0.2%	2026-03-07
CVE-2026-2494	ProfileGrid WordPress plugin cross-site request forgery to Group Membership request Approval/Denial	4.3CNA v3.1	0.1%	2026-03-07	Fix
CVE-2026-2488	ProfileGrid WordPress plugin missing authorization authenticated arbitrary Message deletion	4.3CNA v3.1	0.2%	2026-03-07	Fix
CVE-2026-2433	RSS Aggregator WordPress plugin DOM-based cross-site scripting	6.1CNA v3.1	0.2%	2026-03-07	Fix
CVE-2026-2431	CM Custom Reports WordPress plugin reflected cross-site scripting	6.1CNA v3.1	0.2%	2026-03-07	Fix
CVE-2026-2429	Community Events WordPress plugin SQL injection	4.9CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-2420	LotekMedia Popup Form WordPress plugin stored cross-site scripting	4.4CNA v3.1	0.2%	2026-03-07
CVE-2026-2371	Greenshift WordPress plugin missing authorization unauthenticated Private Reusable block disclosure	5.3CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-2219	Debian dpkg infinite loop	7.5CISA ADP v3.1	0.4%	2026-03-07	Fix
CVE-2026-2020	JS Archive List WordPress plugin PHP object injection	7.5CNA v3.1	0.4%	2026-03-07	Fix
CVE-2026-1981	Winston AI WordPress plugin missing authorization authenticated arbitrary plugin settings deletion	4.3CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-1902	Hammas Calendar WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2026-03-07	Fix
CVE-2026-1825	Show YouTube video WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2026-03-07
CVE-2026-1824	Infomaniak Connect for OpenID WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2026-03-07
CVE-2026-1823	Consensus Embed WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2026-03-07
CVE-2026-1820	Media Library Alt Text Editor WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2026-03-07
CVE-2026-1805	DA Media GigList WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2026-03-07
CVE-2026-1650	MDJM Event Management WordPress plugin unauthorized data modification	5.3CNA v3.1	0.3%	2026-03-07	Fix
CVE-2026-1644	WP Frontend Profile WordPress plugin cross-site request forgery	4.3CNA v3.1	0.2%	2026-03-07	Fix
CVE-2026-1574	MyQtip easy qTip2 WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2026-03-07
CVE-2026-1569	Wueen WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2026-03-07
CVE-2026-1087	The Guardian News Feed WordPress plugin cross-site request forgery to settings update	4.3CNA v3.1	0.1%	2026-03-07
CVE-2026-1086	Font Pairing Preview For Landing Pages WordPress plugin cross-site request forgery	4.3CNA v3.1	0.1%	2026-03-07
CVE-2026-1085	True Ranker WordPress plugin cross-site request forgery to unauthorized True Ranker Disconnection	4.3CNA v3.1	0.1%	2026-03-07	Fix
CVE-2026-1074	WP App Bar WordPress plugin unauthenticated stored cross-site scripting	7.2CNA v3.1	0.2%	2026-03-07
CVE-2026-1073	Purchase Button For Affiliate Link WordPress plugin cross-site request forgery to settings update	4.3CNA v3.1	0.1%	2026-03-07
CVE-2026-1071	Carta Online WordPress plugin stored cross-site scripting	4.4CNA v3.1	0.2%	2026-03-07	Fix
CVE-2026-30847	WeKan credential leak via notificationUsers Publication exposes Password Hashes and Session Tokens	6.5NVD v3.1	0.4%	2026-03-06	Fix
CVE-2026-30846	WeKan exposes All Global Webhook Integrations through globalwebhooks Publication	7.5NVD v3.1	0.6%	2026-03-06	Fix
CVE-2026-30845	WeKan exposes Sensitive Data through lack of Field Filtering during Board Publication	8.2NVD v3.1	0.5%	2026-03-06	Fix
CVE-2026-30844	WeKan vulnerable to SSRF through lack of Validation or Filtering in Attachment URL Loading	8.1NVD v3.1	0.4%	2026-03-06	Fix
CVE-2026-30843	WeKan has Cross-Board IDOR in Custom Fields Update endpoints	6.5NVD v3.1	0.4%	2026-03-06	Fix
CVE-2026-30835	Parse Platform Parse Server $regex query parameter vulnerability	6.9CNA v4.0	0.4%	2026-03-06	Fix
CVE-2026-30833	Rocket.Chat: NoSQL injection in the EE ddp-streamer-service	6.9CNA v4.0	0.4%	2026-03-06	Fix
CVE-2026-30831	Rocket.Chat: 2FA bypass and login of deactivated users via EE ddp-streamer	8.0CNA v4.0	0.6%	2026-03-06	Fix
CVE-2026-30244	Plane: Unauthenticated Workspace Member information disclosure	7.5CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-30242	Plane: SSRF via Incomplete IP Validation in Webhook URL Serializer	8.5CNA v3.1	0.3%	2026-03-06	Fix
CVE-2026-30241	Mercurius: QueryDepth limit bypassed for WebSocket subscriptions	2.7CNA v4.0	0.5%	2026-03-06	Fix
CVE-2026-30238	Intermesh groupoffice Group-Office: Reflected XSS in JavaScript context	5.1CNA v4.0	0.3%	2026-03-06	Fix
CVE-2026-30237	Group-Office: Self XSS in GroupOffice Installer License page (install/license.php)	2.1CNA v4.0	0.3%	2026-03-06	Fix
CVE-2026-30233	OliveTin: View permission not being checked when returning dashboards	6.5CNA v3.1	0.5%	2026-03-06	Fix
CVE-2026-30231	Flare: Private File IDOR via raw/direct endpoints	6.0CNA v4.0	0.3%	2026-03-06	Fix
CVE-2026-30230	Flare: Password‑Protected Thumbnail Bypass	8.2CNA v4.0	0.4%	2026-03-06	Fix
CVE-2026-30229	Parse Platform Parse Server loginAs endpoint incorrect authorization	8.5CNA v4.0	0.6%	2026-03-06	Fix
CVE-2026-30228	Parse-server's file creation and deletion bypasses `readOnlyMasterKey` write restriction	6.9CNA v4.0	0.4%	2026-03-06	Fix
CVE-2026-30227	MimeKit: CRLF injection in Quoted Local-Part enables SMTP command injection and Email Forgery	6.9CNA v4.0	1.2%	2026-03-06	Fix
CVE-2026-30225	OliveTin: RestartAction always runs actions as guest	5.3CNA v3.1	0.6%	2026-03-06	Fix
CVE-2026-30224	OliveTin: Session fixation Logout fails to Invalidate Server-Side Session	5.4CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-30223	OliveTin: JWT Audience Validation Bypass in Local Key and HMAC Modes	8.8CNA v3.1	0.3%	2026-03-06	Fix
CVE-2026-29795	Stellar-xdr: `StringM::from_str` bypasses max length validation	4.0CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-29791	Agentgateway: Missing parameter sanitization in MCP to OpenAPI conversion	4.9CNA v3.1	0.3%	2026-03-06	Fix
CVE-2026-29790	Dbt-common's commonprefix doesn't protect against path traversal	2.0CNA v4.0	0.4%	2026-03-06	Fix
CVE-2026-29789	VitoDeploy Vito workflow site-creation actions missing authorization	10.0CNA v3.1	0.6%	2026-03-06	Fix
CVE-2026-29788	TSPortal: Anyone can forge self-deletion requests of any user	8.4CNA v4.0	0.4%	2026-03-06	Fix
CVE-2026-29783	GitHub Copilot CLI Dangerous Shell Expansion Patterns Enable arbitrary code execution	7.5CNA v4.0	0.5%	2026-03-06	Fix
CVE-2026-29183	SiYuan: Unauthenticated reflected XSS via SVG injection in /API/icon/getDynamicIcon endpoint	9.3CNA v3.1	0.7%	2026-03-06	NucleiFix
CVE-2026-29182	Parse Server Cloud Hooks and Cloud Jobs endpoints incorrect authorization	8.6CNA v4.0	0.6%	2026-03-06	Fix
CVE-2026-29178	Lemmy: Unauthenticated SSRF via file_type query parameter injection in image endpoint	7.7CNA v4.0	0.4%	2026-03-06	Fix
CVE-2026-29110	Cryptomator: Leaking of cleartext paths into log file in non-debug mode	2.2CNA v3.1	0.2%	2026-03-06	Fix
CVE-2026-29093	WWBN AVideo: Unauthenticated PHP session store exposed to host network via published memcached port	8.1CNA v3.1	0.6%	2026-03-06	Fix
CVE-2026-29091	Locutus: Remote code execution (RCE) in Locutus call_user_func_array due to code injection	8.1CNA v3.1	1.0%	2026-03-06	Fix
CVE-2026-29089	TimescaleDB uses untrusted search path during extension upgrade	8.8CNA v3.1	0.2%	2026-03-06	Fix
CVE-2026-29087	@Hono/node-server: Authorization bypass for protected static paths	7.5CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-29084	Gokapi: CSRF in Login endpoint	4.6CNA v3.1	0.1%	2026-03-06	Fix
CVE-2026-29082	Kestra: Stored cross-site scripting in Markdown File Preview	7.3CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-29075	mesa code injection	8.3CNA v3.1	0.5%	2026-03-06	Exploit codeFix
CVE-2026-29074	Svgo: DoS through entity expansion in DOCTYPE (billion laughs)	7.5CNA v3.1	1.0%	2026-03-06	Fix
CVE-2026-29073	SiYuan: Direct SQL Query API accessible to Reader-level users enables unauthorized database access	5.7CNA v4.0	0.5%	2026-03-06	Fix
CVE-2026-29068	PJSIP: Stack buffer overflow in Opus codec parser	8.7CNA v4.0	0.5%	2026-03-06	Fix
CVE-2026-29065	Changedetection.io: Zip Slip vulnerability in the backup restore functionality	8.8CNA v4.0	0.6%	2026-03-06	Fix
CVE-2026-29064	Zarf: Symlink targets in archives are not validated against destination directory	8.2CNA v3.1	0.2%	2026-03-06	Fix
CVE-2026-29063	Immutable.js: Improperly controlled modification of object prototype attributes in Immutable	8.7CNA v4.0	1.6%	2026-03-06	Fix
CVE-2026-29062	FasterXML jackson-core UTF8DataInputJsonParser denial of service	8.7CNA v4.0	0.8%	2026-03-06	Fix
CVE-2026-29061	Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion	5.4CNA v3.1	0.2%	2026-03-06	Fix
CVE-2026-29060	Gokapi: Privilege escalation with auth token	5.0CNA v3.1	0.2%	2026-03-06	Fix
CVE-2026-29059	Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly	6.9CNA v4.0	2.1%	2026-03-06	Reported exploitedNucleiExploit codeFix
CVE-2026-29058	WWBN AVideo-Encoder AVideo: Unauthenticated OS command injection	9.8CNA v3.1	6.8%	2026-03-06	Reported exploitedNucleiMetasploitExploit codeFix
CVE-2026-29049	`melange update-cache` has unbounded HTTP download that can exhaust disk in CI	4.3CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-29048	HumHub: XSS in Button component	6.9CNA v4.0	0.3%	2026-03-06	Fix
CVE-2026-29046	TinyWeb: HTTP Header Control Character injection into CGI Environment	9.2CNA v4.0	0.6%	2026-03-06	Fix
CVE-2026-29042	Nuclio Shell Runtime command injection leading to privilege escalation	8.9CNA v4.0	3.4%	2026-03-06	Fix
CVE-2026-29041	Chamilo: Authenticated remote code execution via unrestricted file upload	8.8CNA v3.1	1.1%	2026-03-06	Exploit codeFix
CVE-2026-29039	Changedetection.io: XPath arbitrary file read via unparsed-text	8.8CNA v4.0	0.5%	2026-03-06	Fix
CVE-2026-29038	Changedetection.io: Reflected XSS in RSS Tag Error Response	6.1CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-28804	pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams	6.9CNA v4.0	0.5%	2026-03-06	Fix
CVE-2026-28802	Authlib: Setting `alg: None` and a blank signature appears to bypass signature verification	7.7CNA v4.0	0.6%	2026-03-06	Fix
CVE-2026-28801	NatroTeam NatroMacro Natro Macro: Code injection through Pattern/Path files	6.6CNA v3.1	0.2%	2026-03-06	Fix
CVE-2026-28800	NatroTeam NatroMacro natro Macro: Malicious actions allowed through Discord RC commands by any user	6.4CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-28799	PJSIP: Heap use-after-free in PJSIP presence subscription termination handler	8.7CNA v4.0	0.5%	2026-03-06	Fix
CVE-2026-28795	OpenChatBI: Critical path traversal vulnerability in save_report tool of OpenChatBI	8.7CNA v4.0	0.7%	2026-03-06	Fix
CVE-2026-28794	oRPC: Prototype pollution in `@Orpc/client` via `StandardRPCJsonSerializer` deserialization	9.3CNA v4.0	1.3%	2026-03-06	Fix
CVE-2026-28787	OneUptime WebAuthn authentication authentication bypass	8.2CNA v3.1	0.4%	2026-03-06
CVE-2026-28785	Ghostfolio: Time-based blind SQL injection in Manual Asset Import	9.3CNA v4.0	0.6%	2026-03-06	Fix
CVE-2026-28727	Acronis Cyber Protect 17 incorrect default permissions	7.8CNA v3.0	0.1%	2026-03-06	Fix
CVE-2026-28726	Acronis Cyber Protect 17 incorrect authorization	4.3CNA v3.0	0.3%	2026-03-06	Fix
CVE-2026-28725	Acronis Cyber Protect 17 incorrect permission assignment	5.5CNA v3.0	0.2%	2026-03-06	Fix
CVE-2026-28724	Acronis Cyber Protect 17 incorrect authorization	4.3CNA v3.0	0.3%	2026-03-06	Fix
CVE-2026-28723	Acronis Cyber Protect 17 incorrect authorization	4.3CNA v3.0	0.3%	2026-03-06	Fix
CVE-2026-28722	Acronis Cyber Protect 17 externally controlled resource reference	7.3CNA v3.0	0.2%	2026-03-06	Fix
CVE-2026-28721	Acronis Cyber Protect 17 externally controlled resource reference	7.3CNA v3.0	0.2%	2026-03-06	Fix
CVE-2026-28720	Acronis Cyber Protect 17 incorrect authorization	4.3CNA v3.0	0.3%	2026-03-06	Fix
CVE-2026-28719	Acronis Cyber Protect 17 incorrect authorization	4.3CNA v3.0	0.3%	2026-03-06	Fix
CVE-2026-28718	Acronis Cyber Protect 17 authentication logging denial of service	5.3CNA v3.0	0.6%	2026-03-06	Fix
CVE-2026-28717	Acronis Cyber Protect 17 incorrect default permissions	5.0CNA v3.0	0.1%	2026-03-06	Fix
CVE-2026-28716	Acronis Cyber Protect 17 incorrect authorization	4.4CNA v3.0	0.1%	2026-03-06	Fix
CVE-2026-28715	Acronis Cyber Protect 17 incorrect authorization	6.5CNA v3.0	0.4%	2026-03-06	Fix
CVE-2026-28714	Acronis Cyber Protect 17 insufficiently protected credentials	4.8CNA v3.0	0.2%	2026-03-06	Fix
CVE-2026-28713	Acronis Cyber Protect Cloud Agent default credentials	7.1CNA v3.0	0.3%	2026-03-06	Fix
CVE-2026-28712	Acronis Cyber Protect 17 uncontrolled search path	6.3CNA v3.0	0.1%	2026-03-06	Fix
CVE-2026-28711	Acronis Cyber Protect 17 uncontrolled search path	6.3CNA v3.0	0.1%	2026-03-06	Fix
CVE-2026-28710	Acronis Cyber Protect 17 weak authentication	8.1CNA v3.0	0.6%	2026-03-06	Fix
CVE-2026-28709	Acronis Cyber Protect 17 incorrect authorization	4.3CNA v3.0	0.3%	2026-03-06	Fix
CVE-2026-28685	Kimai invoice API endpoint improper authorization	6.5CNA v3.1	0.5%	2026-03-06	Fix
CVE-2026-28683	Gokapi: Stored XSS in SVG Hotlinks	8.7CNA v3.1	0.2%	2026-03-06	Fix
CVE-2026-28682	Gokapi: Data leak in Upload Status Stream	6.4CNA v3.1	0.2%	2026-03-06	Fix
CVE-2026-28681	IRRd: Web UI host header injection allows password reset poisoning	8.1CNA v3.1	0.6%	2026-03-06	Fix
CVE-2026-28680	Ghostfolio: Full-read SSRF in Manual Asset Import	9.3CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-28679	xemle home-gallery HomeGallery: Path traversal (arbitrary file read)	8.6CNA v3.1	0.6%	2026-03-06	Fix
CVE-2026-28677	OpenSift URL ingest pipeline server-side request forgery	8.2CNA v3.1	0.5%	2026-03-06	Fix
CVE-2026-28676	OpenSift storage helpers path traversal	8.8CNA v3.1	0.6%	2026-03-06	Fix
CVE-2026-28675	OpenSift information disclosure through error messages	5.3CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-28514	Rocket.Chat: Users can login with any password via the EE ddp-streamer-service	9.3CNA v4.0	0.8%	2026-03-06	Fix
CVE-2026-28509	LangBot has a cross-site scripting(XSS)	6.3CNA v3.1	0.3%	2026-03-06	Fix
CVE-2026-28508	Idno: Unauthenticated SSRF via URL Unfurl endpoint	9.2CNA v4.0	0.7%	2026-03-06	Fix
CVE-2026-28507	Idno: Remote code execution via Chained Import File Write and template path traversal	8.6CNA v4.0	1.0%	2026-03-06	Fix
CVE-2026-28502	WWBN AVideo: Authenticated remote code execution via Unsafe Plugin ZIP Extraction	9.3CNA v4.0	1.0%	2026-03-06	Fix
CVE-2026-28501	WWBN AVideo: Unauthenticated SQL injection via JSON Request Bypass in objects/videos.json.php	9.8CNA v3.1	1.4%	2026-03-06	MetasploitFix
CVE-2026-28497	TinyWeb: Integer overflow in `_Val` (HTTP request smuggling)	9.3CNA v4.0	0.7%	2026-03-06	Fix
CVE-2026-28438	CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements	6.9CNA v4.0	0.5%	2026-03-06	Fix
CVE-2026-28429	Talishar: Critical path traversal in gameName parameter	7.5CNA v3.1	1.0%	2026-03-06
CVE-2026-28428	Talishar: Authentication bypass via Empty authKey parameter allows Unauthenticated Game Actions	5.3CNA v3.1	0.4%	2026-03-06
CVE-2026-28106	B2BKing Premium WordPress plugin open redirection	4.7CNA v3.1	0.3%	2026-03-06	Fix
CVE-2026-28080	Rank Math SEO PRO WordPress plugin broken access control	4.3CNA v3.1	0.3%	2026-03-06	Fix
CVE-2026-27807	MarkUs: YAML alias (billion laughs) DoS in config upload	4.9CNA v3.1	0.5%	2026-03-06	Fix
CVE-2026-27778	ePower ePower.ie improper restriction of excessive authentication attempts	8.7CNA v4.0	0.8%	2026-03-06	Exploit codeFix
CVE-2026-27777	Mobiliti e-mobi.hu insufficiently protected credentials	6.9CNA v4.0	0.4%	2026-03-06
CVE-2026-27770	ePower ePower.ie insufficiently protected credentials	6.9CNA v4.0	0.4%	2026-03-06	Fix
CVE-2026-27764	Mobiliti E-mobi.hu insufficient session expiration	8.6v3.1	0.6%	2026-03-06
CVE-2026-27605	Chartbrew: Stored cross-site scripting (XSS) via file upload API	6.3CNA v3.1	0.3%	2026-03-06	Fix
CVE-2026-27603	Chartbrew chart filter endpoint missing authentication	8.7CNA v4.0	0.5%	2026-03-06	Fix
CVE-2026-27142	URLs in meta content attribute actions are not escaped in html/template	6.1CISA ADP v3.1	0.3%	2026-03-06	Fix
CVE-2026-27139	FileInfo can escape from a Root in os	2.5CISA ADP v3.1	0.1%	2026-03-06	Fix
CVE-2026-27138	Panic in name constraint checking for malformed certificates in crypto/x509	5.9CISA ADP v3.1	0.3%	2026-03-06	Fix
CVE-2026-27137	Incorrect enforcement of email constraints in crypto/x509	7.5CISA ADP v3.1	0.7%	2026-03-06	Fix
CVE-2026-27027	Everon api.Everon.io insufficiently protected credentials	6.9CNA v4.0	0.4%	2026-03-06
CVE-2026-27005	Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)	8.8CNA v4.0	0.7%	2026-03-06	Fix
CVE-2026-26288	Everon api.Everon.io missing authentication for critical function	9.8v3.1	0.7%	2026-03-06
CVE-2026-26051	Mobiliti E-mobi.hu missing authentication for critical function	9.8v3.1	0.9%	2026-03-06
CVE-2026-26018	CoreDNS Loop Detection denial of service	7.5CNA v3.1	0.8%	2026-03-06	Fix
CVE-2026-26017	CoreDNS ACL plugin race condition	7.7CNA v3.1	0.5%	2026-03-06	Fix
CVE-2026-25962	MarkUs: Zip bomb in config upload enables DoS	6.5CNA v3.1	0.5%	2026-03-06	Fix
CVE-2026-25888	Chartbrew: Remote code execution (RCE) via vulnerable API	8.8CNA v3.1	0.9%	2026-03-06	Fix
CVE-2026-25887	Chartbrew: Remote code execution (RCE) via MongoDB Dataset Query	7.2CNA v3.1	1.0%	2026-03-06	Fix
CVE-2026-25877	Chartbrew: Insecure direct object reference (IDOR) in Chart Operations	6.5CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-25679	Incorrect parsing of IPv6 host literals in net/url	7.5CISA ADP v3.1	0.8%	2026-03-06	Fix
CVE-2026-24912	ePower ePower.ie insufficient session expiration	8.6v3.1	0.4%	2026-03-06	Fix
CVE-2026-24696	Everon api.Everon.io improper restriction of excessive authentication attempts	8.7CNA v4.0	0.4%	2026-03-06
CVE-2026-23925	Zabbix configuration import API incorrect authorization	5.1CNA v4.0	0.3%	2026-03-06	Fix
CVE-2026-22552	ePower ePower.ie missing authentication for critical function	9.8v3.1	0.9%	2026-03-06	Fix
CVE-2026-20882	Mobiliti E-mobi.hu improper restriction of excessive authentication attempts	8.7CNA v4.0	0.4%	2026-03-06
CVE-2026-20748	Everon api.Everon.io insufficient session expiration	8.6v3.1	0.3%	2026-03-06
CVE-2026-3616	DefaultFuction Jeson Customer Relationship Management System edit.php SQL injection	5.3CNA v4.0	0.3%	2026-03-06
CVE-2026-3613	Wavlink WL-NU516U1 login.cgi sub_401A0C stack-based overflow	8.6CNA v4.0	1.2%	2026-03-06
CVE-2026-3612	Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection	8.6CNA v4.0	10.4%	2026-03-06
CVE-2026-3610	HSC Cybersecurity Mailinspector URL mliUserValidation.php cross-site scripting	5.3CNA v4.0	0.5%	2026-03-06
CVE-2026-3589	WooCommerce WordPress plugin arbitrary admin user creation via CSRF	7.5CISA ADP v3.1	0.2%	2026-03-06	Fix
CVE-2026-3419	Fastify's Missing End Anchor in subtypeNameReg allows Malformed Content-Types to Pass Validation	5.3CNA v3.1	0.5%	2026-03-06	Fix
CVE-2026-2830	WP All Import WordPress plugin reflected cross-site scripting via filepath	6.1CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-2754	Navtor NavBox missing authentication	7.5CNA v3.1	0.7%	2026-03-06	Fix
CVE-2026-2753	Navtor NavBox absolute path traversal	7.5CNA v3.1	0.7%	2026-03-06	Fix
CVE-2026-2752	Navtor NavBox information disclosure through error messages	5.3CNA v3.1	0.5%	2026-03-06	Fix
CVE-2026-2589	Greenshift WordPress plugin information disclosure	5.3CNA v3.1	0.4%	2026-03-06	Fix
CVE-2026-2446	Powerpack for LearnDash WordPress plugin unauthenticated arbitrary option update	9.8CISA ADP v3.1	0.4%	2026-03-06	Fix
CVE-2026-2331	SICK Lector83x and Lector85x AppEngine Fileaccess vulnerability	9.8CNA v3.1	0.9%	2026-03-06	Fix
CVE-2026-2330	SICK Lector85x and Lector83x CROWN REST interface vulnerability	9.4CNA v3.1	0.7%	2026-03-06	Fix
CVE-2026-1468	Cross-site request forgery in QuickCMS	5.1CNA v4.0	0.2%	2026-03-06	Fix
CVE-2026-1128	WP eCommerce WordPress plugin Coupon deletion via CSRF	4.3CISA ADP v3.1	0.1%	2026-03-06
CVE-2026-30798	RustDesk Client Accepts Unauthenticated stop-service command via Strategy Payload	7.5v3.1	0.3%	2026-03-05
CVE-2026-30797	RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server	8.1NVD v3.1	0.6%	2026-03-05
CVE-2026-30796	RustDesk Client Transmits Preset Address Book Password Verbatim in Heartbeat Sync	7.5v3.1	0.5%	2026-03-05	Fix
CVE-2026-30795	RustDesk HTTP Client Silently Accepts Invalid TLS Certificates after Handshake failure	7.5v3.1	0.3%	2026-03-05
CVE-2026-30793	RustDesk Flutter URI Handler Sets Permanent Password without Privilege Check or User Confirmation	9.8v3.1	0.4%	2026-03-05
CVE-2026-30792	RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security settings	8.1v3.1	0.3%	2026-03-05	Fix
CVE-2026-30791	RustDesk Client Accepts Pseudo-Encrypted Config Strings without Cryptographic Validation	7.5v3.1	0.3%	2026-03-05
CVE-2026-30789	RustDesk Client login authentication vulnerability	9.8v3.1	0.3%	2026-03-05
CVE-2026-30785	RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce	5.5NVD v3.1	0.2%	2026-03-05
CVE-2026-30783	RustDesk Client can Orphan API Channel to Ignore All Admin commands and ACL Policies	9.8v3.1	0.5%	2026-03-05
CVE-2026-30777	EC-CUBE authentication bypass	6.5v3.1	0.6%	2026-03-05	Fix
CVE-2026-29613	OpenClaw Webhook authentication bypass via Loopback remoteAddress Trust	8.2CNA v4.0	0.6%	2026-03-05	Fix
CVE-2026-29612	OpenClaw denial of service via Large Base64 Media File Decoding	7.5v3.1	0.5%	2026-03-05	Fix
CVE-2026-29611	OpenClaw local file inclusion via mediaPath parameter in BlueBubbles Media Handling	8.2CNA v4.0	0.5%	2026-03-05	Fix
CVE-2026-29610	OpenClaw Command Hijacking via Unsafe path Handling	7.7CNA v4.0	0.9%	2026-03-05	Fix
CVE-2026-29609	OpenClaw denial of service via Unbounded URL-backed Media Fetch	8.7CNA v4.0	0.8%	2026-03-05	Fix
CVE-2026-29606	OpenClaw Webhook signature verification Bypass via ngrok Loopback Compatibility	6.5v3.1	0.5%	2026-03-05	Fix
CVE-2026-29188	filebrowser File Browser: TUS Delete Endpoint Bypasses Delete Permission Check	9.1CNA v3.1	0.6%	2026-03-05	Fix
CVE-2026-29128	IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config credential disclosure	10.0v3.1	0.3%	2026-03-05
CVE-2026-29127	International Datacasting Corporation SFX2100 Satellite Receiver incorrect permission assignment	7.8NVD v3.1	0.2%	2026-03-05
CVE-2026-29126	International Datacasting SFX2100 Satellite Receiver incorrect permission assignment	7.8v3.1	0.2%	2026-03-05
CVE-2026-29125	International Datacasting Corporation SFX2100 Satellite Receiver incorrect permission assignment	4.7NVD v3.1	0.1%	2026-03-05
CVE-2026-29124	International Datacasting Corporation SFX2100 Satellite Receiver privilege escalation	7.8v3.1	0.1%	2026-03-05
CVE-2026-29123	International Datacasting SFX2100 Satellite Receiver improper privilege management	7.8v3.1	0.1%	2026-03-05
CVE-2026-29122	`/bin/date` Binary given SETUID Permissions on IDC SFX2100 leading to potential LPE	5.5NVD v3.1	0.1%	2026-03-05
CVE-2026-29121	`/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 leading to potential LPE	7.8v3.1	0.2%	2026-03-05
CVE-2026-29081	Frappe: Possibility of SQL injection due to improper fieldname sanitization	6.5CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-29077	Frappe: Broken access control in DocShare	7.1CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-29054	Traefik: Lowercase `Connection` tokens can delete traefik-managed forwarded identity headers	7.5CNA v3.1	0.6%	2026-03-05	Fix
CVE-2026-29053	Ghost vulnerable to remote code execution via Malicious Themes	7.7CNA v3.1	5.1%	2026-03-05	MetasploitExploit codeKCVFix
CVE-2026-29052	HumHub Calendar Module: Stored XSS in Event Types	6.9CNA v4.0	0.3%	2026-03-05	Fix
CVE-2026-28790	OliveTin: Unauthenticated Action Termination via KillAction when Guests Must Login	7.5CNA v3.1	0.8%	2026-03-05	Fix
CVE-2026-28789	OliveTin: Unauthenticated DoS via concurrent map writes in OAuth2 state handling	7.5CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-28552	Huawei HarmonyOS out-of-bounds write vulnerability in the IMS module	6.5CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-28551	Huawei HarmonyOS race condition vulnerability in the device security management module	4.7CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28550	Huawei HarmonyOS race condition vulnerability in the security control module	4.0CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28549	Huawei HarmonyOS race condition vulnerability in the permission management service	6.6CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28548	Huawei HarmonyOS vulnerability of improper verification in the email application	7.1CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28547	Huawei HarmonyOS vulnerability of uninitialized pointer access in the scanning module	6.8CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28546	Huawei HarmonyOS buffer overflow vulnerability in the scanning module	5.9CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28545	Huawei HarmonyOS race condition vulnerability in the printing module	5.9CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28544	Huawei HarmonyOS race condition vulnerability in the printing module	6.2CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28543	Huawei HarmonyOS race condition vulnerability in the maintenance and diagnostics module	4.4CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28542	Huawei HarmonyOS permission bypass vulnerability in the system service framework	7.3CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28541	Huawei HarmonyOS permission control vulnerability in the cellular_data module	4.0CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28540	Huawei HarmonyOS out-of-bounds character read vulnerability in Bluetooth	4.0CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28539	Huawei HarmonyOS data processing vulnerability in the certificate management module	6.2CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28538	Huawei HarmonyOS path traversal vulnerability in the certificate management module	5.9CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28537	Huawei HarmonyOS double free vulnerability in the window module	5.1CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-28536	Huawei HarmonyOS authentication bypass vulnerability in the device authentication module	9.6CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-28492	FileBrowser has path traversal in Public Share Links that exposes Files Outside Shared Directory	7.1CNA v4.0	0.5%	2026-03-05	Fix
CVE-2026-28486	OpenClaw path traversal (Zip Slip) in Archive Extraction via Installation commands	5.5v3.1	0.2%	2026-03-05	Fix
CVE-2026-28485	OpenClaw missing authentication in Browser Control HTTP endpoints	7.8v3.1	0.3%	2026-03-05	Fix
CVE-2026-28482	OpenClaw path traversal via Unsanitized sessionId and sessionFile parameters	8.4CNA v4.0	0.2%	2026-03-05	Fix
CVE-2026-28481	OpenClaw Bearer token leakage via MS Teams Attachment Downloader Suffix Matching	7.5v3.1	0.5%	2026-03-05	Fix
CVE-2026-28480	OpenClaw Identity spoofing via Mutable Username in Telegram Allowlist Authorization	6.9CNA v4.0	0.4%	2026-03-05	Fix
CVE-2026-28479	OpenClaw cache poisoning via Deprecated SHA-1 Hash in Sandbox Configuration	9.1v3.1	0.3%	2026-03-05	Fix
CVE-2026-28478	OpenClaw denial of service via Unbounded Webhook Request Body Buffering	8.7CNA v4.0	0.8%	2026-03-05	Fix
CVE-2026-28477	OpenClaw OAuth State Validation Bypass in Manual Chutes Login Flow	5.9CNA v4.0	0.2%	2026-03-05	Fix
CVE-2026-28476	OpenClaw server-side request forgery in Tlon Extension Authentication	5.8NVD v3.1	0.4%	2026-03-05	Fix
CVE-2026-28475	OpenClaw Timing Attack via Hook Token Comparison	3.7NVD v3.1	0.5%	2026-03-05	Fix
CVE-2026-28474	OpenClaw Nextcloud Talk Allowlist Bypass via actor.name Display Name spoofing	9.3CNA v4.0	0.9%	2026-03-05	Fix
CVE-2026-28473	OpenClaw authorization bypass via /approve Chat command	7.2CNA v4.0	0.5%	2026-03-05	Fix
CVE-2026-28472	OpenClaw Device Identity Check Bypass in Gateway WebSocket Connect Handshake	9.8v3.1	0.7%	2026-03-05	Fix
CVE-2026-28471	OpenClaw Allowlist Bypass via displayName and Cross-Homeserver localpart Matching in Matrix plugin	6.3CNA v4.0	0.4%	2026-03-05	Fix
CVE-2026-28470	OpenClaw Exec Allowlist Bypass via Command Substitution in Double Quotes	9.2CNA v4.0	0.9%	2026-03-05	Fix
CVE-2026-28469	OpenClaw Cross-Account Policy Context Misrouting via Shared Webhook Path Ambiguity	8.2CNA v4.0	0.5%	2026-03-05	Fix
CVE-2026-28468	OpenClaw authentication bypass in Sandbox Browser Bridge Server	7.7v3.1	0.2%	2026-03-05	Fix
CVE-2026-28467	OpenClaw SSRF via Attachment Media URL Hydration	8.6v3.1	0.5%	2026-03-05	Fix
CVE-2026-28466	OpenClaw remote code execution via Node Invoke Approval Bypass	9.4CNA v4.0	0.7%	2026-03-05	Exploit codeFix
CVE-2026-28465	OpenClaw voice-call Webhook Verification Bypass via Forwarded headers	7.5v3.1	0.7%	2026-03-05	Fix
CVE-2026-28464	OpenClaw Timing Attack in Hooks Token Authentication	7.5v3.1	0.7%	2026-03-05	Fix
CVE-2026-28463	OpenClaw arbitrary file read via Shell Expansion in Safe Bins Allowlist	5.5NVD v3.1	0.3%	2026-03-05	Fix
CVE-2026-28462	OpenClaw path traversal in Trace and Download Output Paths	9.1v3.1	0.7%	2026-03-05	Fix
CVE-2026-28459	OpenClaw arbitrary file write via Untrusted sessionFile Path	8.1v3.1	0.6%	2026-03-05	Fix
CVE-2026-28458	OpenClaw missing authentication in Browser Relay /cdp WebSocket endpoint	5.4NVD v3.1	0.5%	2026-03-05	Fix
CVE-2026-28457	OpenClaw path traversal in Sandbox Skill Mirroring via Name parameter	7.9v3.1	0.2%	2026-03-05	Fix
CVE-2026-28456	OpenClaw arbitrary code execution via Unsafe Hook Module Path Handling	8.6CNA v4.0	0.8%	2026-03-05	Fix
CVE-2026-28454	OpenClaw authorization bypass via Unauthenticated Telegram Webhook	9.8v3.1	0.4%	2026-03-05	Fix
CVE-2026-28453	OpenClaw Zip Slip path traversal in TAR Archive Extraction	9.8v3.1	0.6%	2026-03-05	Fix
CVE-2026-28452	OpenClaw denial of service via Unguarded Archive Extraction in extractArchive	6.5v3.1	0.5%	2026-03-05	Fix
CVE-2026-28451	OpenClaw SSRF via Feishu Extension Media Fetching	9.3v3.1	0.4%	2026-03-05	Fix
CVE-2026-28450	OpenClaw Unauthenticated Profile tampering via Nostr Plugin HTTP endpoints	8.2v3.1	0.5%	2026-03-05	Fix
CVE-2026-28448	OpenClaw authorization bypass in Twitch plugin allowFrom Access Control	9.4v3.1	0.6%	2026-03-05	Fix
CVE-2026-28447	OpenClaw path traversal in Plugin Installation via Package Name	6.5NVD v3.1	0.5%	2026-03-05	Fix
CVE-2026-28446	OpenClaw has an inbound allowlist policy bypass in voice-call extension	9.8v3.1	1.0%	2026-03-05	Fix
CVE-2026-28443	OpenReplay: SQL injection in cards/search via unvalidated sort field parameter	6.9CNA v4.0	0.5%	2026-03-05	Fix
CVE-2026-28442	ZimaOS: Arbitrary Deletion of Internal System files via API Path Manipulation	8.6CNA v3.1	0.4%	2026-03-05
CVE-2026-28436	Frappe: Stored XSS in avatar_macro.html	1.3CNA v4.0	0.3%	2026-03-05	Fix
CVE-2026-28413	Products.Isurlinportal: Possible open redirect when using more than 2 forward slashes	5.3CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-28410	The Graph: Revocable vesting contracts allows early access to locked tokens	5.3CNA v4.0	0.4%	2026-03-05	Fix
CVE-2026-28405	MarkUs: Stored XSS in Submission HTML Preview enables Instructor-Context Actions	8.0CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-28395	OpenClaw Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl	9.1v3.1	0.7%	2026-03-05	Fix
CVE-2026-28394	OpenClaw denial of service via Unbounded Response Parsing in web_fetch tool	6.9CNA v4.0	0.6%	2026-03-05	Fix
CVE-2026-28393	OpenClaw arbitrary JavaScript Module Loading via Hook Transform path traversal	9.8v3.1	0.6%	2026-03-05	Fix
CVE-2026-28392	OpenClaw privilege escalation in Slack Slash command handler via Direct messages	9.8v3.1	0.6%	2026-03-05	Fix
CVE-2026-28391	OpenClaw command injection via cmd.exe Parsing Bypass in Allowlist Enforcement	9.2CNA v4.0	0.9%	2026-03-05	Fix
CVE-2026-28353	Aqua Security Trivy VSCode Extension embedded malicious code	10.0CNA v4.0	0.4%	2026-03-05
CVE-2026-28350	lxml_html_clean Cleaner vulnerability	6.1CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-28348	fedora-python lxml_html_clean lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes	6.1CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-28343	CKEditor: Cross-site scripting (XSS) in the HTML Support package	6.4CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-28342	OliveTin: Unauthenticated denial of service via memory exhaustion in PasswordHash API endpoint	7.5CNA v3.1	0.8%	2026-03-05	Fix
CVE-2026-28287	FreePBX: Authenticated remote code execution via Recordings Module AJAX endpoints	8.6CNA v4.0	1.6%	2026-03-05	Emerging ThreatsFix
CVE-2026-28284	FreePBX: Authenticated SQL injection vulnerabilities in FreePBX Logfiles module	8.6CNA v4.0	0.5%	2026-03-05	Fix
CVE-2026-28277	LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading	6.8CNA v3.1	0.7%	2026-03-05	KCVFix
CVE-2026-28223	Wagtail: Improper escaping of HTML (cross-site scripting) in simple_translation admin interface	6.1CNA v3.1	0.6%	2026-03-05	Fix
CVE-2026-28222	Wagtail: Improper escaping of HTML (cross-site scripting) on TableBlock class attributes	6.1CNA v3.1	0.6%	2026-03-05	Fix
CVE-2026-28210	FreePBX: Authenticated SQL injection in CDR (Call Data Record) Reports	8.6CNA v4.0	0.6%	2026-03-05	Fix
CVE-2026-28209	Sangoma FreePBX ElevenLabs Text-to-Speech integration command injection	7.5CNA v4.0	1.5%	2026-03-05	Fix
CVE-2026-28137	MediCenter - Health Medical Clinic WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28135	Royal Elementor Addons WordPress plugin Other vulnerability type vulnerability	8.2CISA ADP v3.1	0.4%	2026-03-05	Fix
CVE-2026-28134	JetEngine WordPress plugin remote code execution (RCE)	8.5CNA v3.1	0.4%	2026-03-05	Exploit codeFix
CVE-2026-28133	Filr WordPress plugin arbitrary file upload	8.5CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-28130	UDesign WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28129	Little Birdies WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28128	Verse WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28127	Lawyer Directory WordPress plugin cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28126	RH Frontend Publishing Pro WordPress plugin cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-28125	Midi WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28124	Notarius WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28123	Veil WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28122	ListingPro WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28121	Anderson WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28120	Dr.Patterson WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28119	Nirvana WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28118	Welldone WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28117	smart SEO WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28115	WP Attractive Donations System - Easy Stripe and Paypal donations WordPress plugin SQL injection	9.3CNA v3.1	0.4%	2026-03-05
CVE-2026-28114	WooCommerce License Manager WordPress plugin arbitrary file upload	9.1CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-28113	Ultimate Learning Pro WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28112	AllInOne - Banner Rotator WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28110	LambertGroup - AllInOne - Banner with Playlist WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28109	LambertGroup - AllInOne - Content Slider WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28108	LambertGroup - AllInOne - Banner with Thumbnails WordPress plugin reflected cross-site scripting	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28107	Muzicon WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28105	Good Energy WordPress theme PHP object injection	9.8CNA v3.1	0.6%	2026-03-05
CVE-2026-28104	Site Suggest WordPress plugin broken access control	6.5CNA v3.1	0.3%	2026-03-05
CVE-2026-28103	LBG Zoominoutslider WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28102	UberSlider Classic WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28101	UberSlider MouseInteraction WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28100	UberSlider PerpetuumMobile WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28099	UberSlider Ultra WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28098	Save Life WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28097	Artrium WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28096	WealthCo WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28095	Marcell WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28094	RexCoin WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28093	Ozisti WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28092	Sounder WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28091	Coleo WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28090	Gamezone WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28089	Daiquiri WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28088	Aqualots WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28087	Filmax WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28086	Run Gran WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28085	Mahogany WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28084	Bazinga WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28081	Windsor WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28079	Conquerors WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28078	uListing WordPress plugin arbitrary file download	4.9CNA v3.1	0.5%	2026-03-05
CVE-2026-28077	Vapester WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28076	Guff WordPress theme broken access control	7.5CNA v3.1	0.4%	2026-03-05
CVE-2026-28075	Porto WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28074	Pizza House WordPress theme PHP object injection	9.8CNA v3.1	0.6%	2026-03-05
CVE-2026-28072	pixfort Core WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-28071	pixfort Core WordPress plugin broken access control	6.3CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-28069	Le Truffe WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28068	Rhythmo WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28067	Bassein WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28066	Legrand WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28065	Eject WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28064	Edge Decor WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28063	Asia Garden WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28062	Happy Baby WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28061	Tiger Claw WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28060	S.King WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28059	Dermatology Clinic WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28058	Dixon WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28057	Mandala WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28056	MCKinney's Politics WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28055	M.Williamson WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28054	Legal Stone WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28053	Miller WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28052	Peter Mason WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28051	Yacht Rental WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28050	Beacon WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28049	Police Department WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28048	FlashMart WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28047	Victo WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28046	Law Office WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28045	N7 Golf Club Sports and Events WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28043	Healer - Doctor, Clinic and Medical WordPress theme local file inclusion	9.8CNA v3.1	0.6%	2026-03-05
CVE-2026-28042	Listify WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28041	Grit WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28039	wpDataTables WordPress plugin local file inclusion	7.5CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-28038	Ultimate Addons for WPBakery Page Builder WordPress plugin broken access control	6.5CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-28037	EventON WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-28036	Ratatouille WordPress theme server side request forgery (SSRF)	6.4CNA v3.1	0.2%	2026-03-05
CVE-2026-28035	Printy WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28034	Progress WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28033	Edifice WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28032	Tuning WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28031	Invetex WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28030	Bonbon WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28029	EmojiNation WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28028	MoneyFlow WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28027	Kayon WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28026	Motorix WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28025	Stargaze WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28024	Helion WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28023	Nuts WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28022	Foodie WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28021	Craftis WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28020	Chroma WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28019	Manoir WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28018	Global Logistics WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28017	Green Thumb WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28016	Luxury Wine WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28015	ShiftCV WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28014	Translogic WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28013	Kratz WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28012	Gridiron WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28011	Yottis WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28010	Scientia WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28009	DroneX WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28007	Coinpress WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-28006	Yungen WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27998	Vixus WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27997	Maxify WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27996	Lingvico WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27995	Justitia WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27994	Tediss WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27993	Aldo WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27992	Meals and Wheels WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27991	Avventure WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27990	ConFix WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27989	Quanzo WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27988	Equadio WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27987	The Qlean WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27986	OsTende WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27985	Humanum WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27984	Widget Options WordPress plugin remote code execution (RCE)	9.0CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-27983	LMS Elementor Pro WordPress plugin privilege escalation	9.8CNA v3.1	0.5%	2026-03-05
CVE-2026-27982	django-allauth has an open redirect	6.1v3.1	0.3%	2026-03-05	Fix
CVE-2026-27944	0xJacky nginx-ui Nginx UI: Unauthenticated Backup Download with Encryption key disclosure	9.8CNA v3.1	1.0%	2026-03-05	Reported exploitedNucleiExploit codeKCVFix
CVE-2026-27750	Avira Internet Security Optimizer TOCTOU	7.0v3.1	0.1%	2026-03-05	Fix
CVE-2026-27749	Avira Internet Security System Speedup insecure deserialization	7.8CNA v3.1	0.8%	2026-03-05	Fix
CVE-2026-27748	Avira Internet Security arbitrary file deletion via Improper Link Resolution	7.1v3.1	0.2%	2026-03-05	Fix
CVE-2026-27723	OpenProject: Insufficient access control leads to create Wiki objects belongs unpermitted projects	4.3CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-27541	Wholesale Suite WordPress plugin privilege escalation	7.1CISA ADP v3.1	0.4%	2026-03-05	Fix
CVE-2026-27439	Dentario WordPress theme PHP object injection	9.8CNA v3.1	0.6%	2026-03-05
CVE-2026-27438	Kingler WordPress theme PHP object injection	9.8CNA v3.1	0.6%	2026-03-05
CVE-2026-27437	Tennis Club WordPress theme PHP object injection	9.8CNA v3.1	0.6%	2026-03-05
CVE-2026-27428	Eagle Booking WordPress plugin SQL injection	8.5CNA v3.1	0.4%	2026-03-05
CVE-2026-27417	Sweet Date WordPress theme PHP object injection	9.8CNA v3.1	0.6%	2026-03-05	Fix
CVE-2026-27411	SiteGuard WP WordPress plugin Captcha bypass vulnerability	5.3CISA ADP v3.1	0.3%	2026-03-05	Fix
CVE-2026-27406	My Tickets WordPress plugin sensitive data exposure	7.5CISA ADP v3.1	0.4%	2026-03-05	Fix
CVE-2026-27396	Directory Pro WordPress plugin broken access control	7.3CNA v3.1	0.3%	2026-03-05
CVE-2026-27390	WeDesignTech Ultimate Booking Addon WordPress plugin account takeover	8.8CNA v3.1	0.6%	2026-03-05
CVE-2026-27389	WeDesignTech Ultimate Booking Addon WordPress plugin account takeover	9.8CNA v3.1	0.7%	2026-03-05
CVE-2026-27388	DesignThemes Booking Manager WordPress plugin broken access control	7.5CNA v3.1	0.4%	2026-03-05
CVE-2026-27386	DesignThemes Directory Addon WordPress plugin broken access control	7.5CNA v3.1	0.4%	2026-03-05
CVE-2026-27385	DesignThemes Portfolio WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-27384	W3 Total Cache WordPress plugin arbitrary code execution	9.0CISA ADP v3.1	0.4%	2026-03-05	Fix
CVE-2026-27383	Metro WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27382	Metro WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-27381	Aora WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27379	NextScripts WordPress plugin PHP object injection	8.8CNA v3.1	0.6%	2026-03-05	Fix
CVE-2026-27376	Claue - Clean, Minimal Elementor WooCommerce WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-27375	Gecko WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-27374	WooCommerce Order Details WordPress plugin broken access control	7.5CNA v3.1	0.4%	2026-03-05
CVE-2026-27373	Tablesome WordPress plugin SQL injection	8.5CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-27370	Chaty WordPress plugin sensitive data exposure	7.5CISA ADP v3.1	0.4%	2026-03-05	Fix
CVE-2026-27369	Celeste WordPress theme PHP object injection	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-27367	Musico WordPress theme cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-27363	WP Bakery Autoresponder Addon WordPress plugin cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-27362	WP Bakery Autoresponder Addon WordPress plugin broken access control	6.5CNA v3.1	0.3%	2026-03-05
CVE-2026-27361	Responsive Posts Carousel Pro WordPress plugin broken access control	7.5CNA v3.1	0.4%	2026-03-05
CVE-2026-27359	Awa Plugins WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-27358	Architecturer WordPress theme cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-27354	WooCommerce Coming Soon Product with Countdown WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2026-03-05
CVE-2026-27353	Grand News Magazine Newspaper WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05
CVE-2026-27352	Starto WordPress theme cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-27348	Photography WordPress theme cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-27344	inseri core WordPress plugin broken access control	5.9CNA v3.1	0.3%	2026-03-05	Exploit code
CVE-2026-27342	TopFit - Fitness and Gym WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27341	TopScorer - Sports WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27340	Apollo Night Club, DJ Event WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27339	Buzz Stone Magazine and Viral Blog WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27338	Car Zone WordPress theme deserialization of untrusted data	8.8CNA v3.1	0.6%	2026-03-05
CVE-2026-27337	Chronicle - Lifestyle Magazine and Blog WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27336	Consultor Consulting, Accounting and Legal Counsel WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27335	Ekoterra - NonProfit, Green Energy and Ecology WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27334	Alchemists WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27332	Agrofood WordPress theme cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-27326	AC Services HVAC, Air Conditioning and Heating Company WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27098	Au Pair Agency - Babysitting and Nanny WordPress theme deserialization of untrusted data	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-27097	CasaMia Property Rental Real Estate WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2026-03-05
CVE-2026-27023	Twenty: SSRF protection bypass via HTTP redirect following in secure HTTP client	5.0CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-26999	Traefik TCP router denial of service	7.5CNA v3.1	0.7%	2026-03-05	Fix
CVE-2026-26998	Traefik: Unbounded io.ReadAll on auth server response body causes OOM denial of service(DOS)	4.4CNA v3.1	0.6%	2026-03-05	Fix
CVE-2026-26418	TCS Cognix Platform missing authentication	7.5CISA ADP v3.1	0.8%	2026-03-05
CVE-2026-26417	TCS Cognix Platform missing authorization	8.1CISA ADP v3.1	0.4%	2026-03-05
CVE-2026-26416	TCS Cognix Platform An authorization bypass	8.8CISA ADP v3.1	0.6%	2026-03-05
CVE-2026-26377	Koha cross-site scripting	5.4v3.1	0.4%	2026-03-05
CVE-2026-26276	Gogs: DOM-based XSS via milestone selection	7.3CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-26196	Gogs: Access tokens get exposed through URL params in API requests	6.9CNA v4.0	0.4%	2026-03-05	Fix
CVE-2026-26195	Gogs: Stored XSS in branch and wiki views through author and committer names	6.9CNA v4.0	0.3%	2026-03-05	Fix
CVE-2026-26194	Gogs release deletion argument injection	8.8CNA v4.0	0.5%	2026-03-05	Fix
CVE-2026-26125	Microsoft Payment Orchestrator Service elevation of privilege	8.6CNA v3.1	1.1%	2026-03-05	Fix
CVE-2026-26124	Microsoft ACI Confidential Containers elevation of privilege	6.7CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-26122	Microsoft ACI Confidential Containers information disclosure	6.5CNA v3.1	1.0%	2026-03-05	Fix
CVE-2026-26034	Dell UPS Multi-UPS Management Console (MUMC) incorrect default permissions	8.5CNA v4.0	0.2%	2026-03-05
CVE-2026-26033	Dell UPS Multi-UPS Management Console (MUMC) unquoted search path	8.4CNA v4.0	0.2%	2026-03-05
CVE-2026-26022	Gogs: Stored XSS via data URI in issue comments	8.7CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-25921	Gogs: Cross-repository LFS object overwrite via missing content hash verification	9.3CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-25702	SUSE Linux Enterprise Server nftables disabled due to incorrect kernel backport	7.3CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-25048	xgrammar vulnerable to DoS via multi-layer nesting	8.7CNA v4.0	0.7%	2026-03-05	Fix
CVE-2026-24963	Amelia WordPress plugin privilege escalation	7.2CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-24960	Charety WordPress theme arbitrary file upload	9.9CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-24457	Eclipse OpenMQ path traversal	9.1CNA v3.1	0.6%	2026-03-05	Fix
CVE-2026-24385	Podlove Web Player WordPress plugin PHP object injection	7.5CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-23802	AI Engine WordPress plugin arbitrary file upload	9.1CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-23801	The Issue WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-23799	Tutor LMS WordPress plugin broken access control	6.5CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-23798	PowerPress Podcasting WordPress plugin PHP object injection	8.8CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-23767	SEIKO EPSON ESC/POS missing authentication	9.8CISA ADP v3.1	0.5%	2026-03-05	Fix
CVE-2026-23651	Microsoft ACI Confidential Containers elevation of privilege	6.7CNA v3.1	0.6%	2026-03-05	Fix
CVE-2026-23546	Classified Listing WordPress plugin sensitive data exposure	6.5CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-22723	UAA User Token Revocation logic error	6.5CNA v3.1	0.2%	2026-03-05	Fix
CVE-2026-22501	Mounthood WordPress theme PHP object injection	9.8CNA v3.1	0.5%	2026-03-05
CVE-2026-22497	Jardi WordPress theme PHP object injection	9.8CNA v3.1	0.5%	2026-03-05
CVE-2026-22479	Easy Post Submission WordPress plugin broken access control	7.5CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-22478	FindAll WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22477	Felizia WordPress theme local file inclusion	8.1CNA v3.1	0.4%	2026-03-05
CVE-2026-22476	Etchy WordPress theme local file inclusion	8.1CNA v3.1	0.4%	2026-03-05
CVE-2026-22475	Estate WordPress theme PHP object injection	9.8CNA v3.1	0.4%	2026-03-05
CVE-2026-22474	Equestrian Centre WordPress theme PHP object injection	9.8CNA v3.1	0.4%	2026-03-05
CVE-2026-22473	Dental Clinic WordPress theme PHP object injection	8.8CNA v3.1	0.4%	2026-03-05
CVE-2026-22471	Secudeal Payments for Ecommerce WordPress plugin PHP object injection	8.8CNA v3.1	0.4%	2026-03-05
CVE-2026-22467	DeepDigital WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.2%	2026-03-05
CVE-2026-22465	BuddyApp WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.2%	2026-03-05
CVE-2026-22460	FormGent WordPress plugin arbitrary file deletion	8.6CNA v3.1	0.4%	2026-03-05
CVE-2026-22459	WordPress CTA plugin broken access control	6.5CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-22457	Wanderland WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22456	Askka WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22455	Thebe WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.2%	2026-03-05
CVE-2026-22454	Solaris WordPress theme PHP object injection	9.8CNA v3.1	0.5%	2026-03-05
CVE-2026-22453	Pets Club WordPress theme PHP object injection	9.8CNA v3.1	0.5%	2026-03-05
CVE-2026-22452	Hoverex WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22451	Handyman WordPress theme PHP object injection	9.8CNA v3.1	0.5%	2026-03-05
CVE-2026-22449	Don Peppe WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22446	Prowess WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22443	Alliance WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22442	Tribe WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22441	Zentrum WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22440	Thecs WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.2%	2026-03-05
CVE-2026-22439	Green Planet WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22438	TheBi WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.2%	2026-03-05
CVE-2026-22437	Playa WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22436	Helvig WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22435	ElectroServ WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22434	Crown Art WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22433	CloudMe WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22432	Woopy WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22431	Wabi-Sabi WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22429	Verdure WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22428	Tooth Fairy WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22427	GoTravel WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22425	Sweet Jane WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22424	Shaha WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22423	SetSail WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22421	Quantum WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22420	Horizon WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22419	Honor WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22418	Great Lotus WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22417	Grand Wedding WordPress theme PHP object injection	9.8CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-22416	FixTeam WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22415	The Mounty WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22414	Marra WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22413	Malgré WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22412	Eona WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22410	Dolcino WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22408	Justicia WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22405	Overton WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22403	Innovio WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-22399	Holmes WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22397	Fleur WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-22395	Fiorello WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22394	Evently WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22392	Cortex WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-22390	Builderall Builder for WordPress plugin remote code execution (RCE)	9.9CNA v3.1	0.5%	2026-03-05
CVE-2026-22389	Cocco WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-22387	Aviana WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-22385	Wolmart WordPress theme local file inclusion	8.1CNA v3.1	0.5%	2026-03-05
CVE-2026-22052	NetApp ONTAP 9 information disclosure through error messages	5.3CNA v4.0	0.2%	2026-03-05	Fix
CVE-2026-21786	HCL Sametime for iOS is affected by sensitive information disclosure	3.3CNA v3.1	0.1%	2026-03-05	Fix
CVE-2026-21628	Extension astroidframe.work unauthenticated remote code execution in Astroid Framework for Joomla	9.8NVD v3.1	0.5%	2026-03-05	Exploit code
CVE-2026-21622	hexpm Password Reset Tokens Do not Expire	9.5CNA v4.0	0.4%	2026-03-05	Fix
CVE-2026-21621	hexpm incorrect authorization	7.0CNA v4.0	0.3%	2026-03-05	Fix
CVE-2026-21536	Microsoft Devices Pricing Program remote code execution	9.8CNA v3.1	1.6%	2026-03-05	Fix
CVE-2026-3606	Ettercap etterfilter ef_output.c add_data_segment out-of-bounds	5.5v3.1	0.2%	2026-03-05	Fix
CVE-2026-3598	RustDesk Server Generates Config Strings using Reversible Encoding Instead of Encryption	7.5v3.1	0.3%	2026-03-05
CVE-2026-3523	Apocalypse Meow WordPress plugin authenticated (Administrator+) SQL injection via type parameter	4.9CNA v3.1	0.6%	2026-03-05	Fix
CVE-2026-3459	glenwpcoder Drag and Drop Multiple File Upload for Contact Form 7 unrestricted file upload	8.1CNA v3.1	0.9%	2026-03-05	Fix
CVE-2026-3381	Compress::Raw::Zlib versions for Perl use potentially insecure versions of zlib	9.8CISA ADP v3.1	0.8%	2026-03-05	Fix
CVE-2026-3257	UnQLite versions for Perl uses a potentially insecure version of the UnQLite library	9.8CISA ADP v3.1	0.7%	2026-03-05	Fix
CVE-2026-3236	Octopus Deploy Octopus Server incorrect authorization	2.3CNA v4.0	0.3%	2026-03-05	Fix
CVE-2026-3072	Media Library Assistant WordPress plugin unauthorized access	4.3CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-3047	Keycloak SAML Broken has authentication bypass by primary weakness	8.8CNA v3.1	0.9%	2026-03-05	Fix
CVE-2026-3034	OoohBoi Steroids for Elementor WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-3009	Red Hat Keycloak identity provider login handling authentication bypass	8.1CNA v3.1	0.5%	2026-03-05	Fix
CVE-2026-2899	Fluent Forms Pro Add On Pack WordPress plugin missing authorization	6.5CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-2893	Page and Post Clone WordPress plugin SQL injection	6.5CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-2836	Cloudflare https://github.com/cloudflare/pingora cache poisoning via insecure-by-default cache key	8.4CNA v4.0	0.2%	2026-03-05	Fix
CVE-2026-2835	Cloudflare https://github.com/cloudflare/pingora HTTP request smuggling	9.3CNA v4.0	0.6%	2026-03-05	Fix
CVE-2026-2833	Cloudflare https://github.com/cloudflare/pingora HTTP request smuggling via Premature Upgrade	9.3CNA v4.0	0.5%	2026-03-05	Fix
CVE-2026-2743	SEPPmail user web interface arbitrary file write to RCE	9.8v3.1	1.0%	2026-03-05	Emerging ThreatsFix
CVE-2026-2599	Database for Contact Form 7 WordPress plugin PHP object injection	9.8CNA v3.1	1.0%	2026-03-05	Fix
CVE-2026-2593	Greenshift animation and page builder blocks WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-2418	Login with Salesforce WordPress plugin unauthenticated authentication bypass	9.1CISA ADP v3.1	0.3%	2026-03-05
CVE-2026-2365	Fluent Forms Pro WordPress plugin unauthenticated stored cross-site scripting	7.2CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-1720	WPXPO WowOptin plugin installation function missing authorization	8.8CNA v3.1	0.3%	2026-03-05	Fix
CVE-2026-1678	zephyrproject-rtos Zephyr DNS: Memory‑safety issue in the DNS name parser	9.4CNA v3.1	0.4%	2026-03-05
CVE-2026-1605	The Eclipse Jetty Server Artifact has a Gzip request memory leak	7.5CNA v3.1	0.7%	2026-03-05	Fix
CVE-2026-1321	Membership Plugin Restrict Content WordPress plugin unauthenticated privilege escalation	8.1CNA v3.1	0.4%	2026-03-05	Fix
CVE-2026-0848	Arbitrary code execution in NLTK StanfordSegmenter via Untrusted JAR Loading	10.0CNA v3.0	0.8%	2026-03-05	Exploit codeFix
CVE-2026-29120	International Datacasting Corporation SFX2100 Satellite Receiver hard-coded credentials	7.8NVD v3.1	0.2%	2026-03-04
CVE-2026-29119	International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the `admin` account. A remote unauthenticated attacker can use these undocumented credentials to access the satellite system directly via the Telnet service, le	9.8v3.1	0.7%	2026-03-04
CVE-2026-29086	Hono: Cookie attribute injection via Unsanitized domain and path in setCookie	5.4CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-29085	Hono: SSE control field injection via CR/LF in writeSSE	6.5CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-29069	Craft has an unauthenticated activation email trigger with potential user enumeration	6.9CNA v4.0	0.3%	2026-03-04	Fix
CVE-2026-29045	Hono: Arbitrary file access via serveStatic vulnerability	7.5CNA v3.1	0.6%	2026-03-04	Fix
CVE-2026-29000	pac4j-jwt JwtAuthenticator authentication bypass	9.3CNA v4.0	0.5%	2026-03-04	Exploit codeFix
CVE-2026-28784	Craft is affected by potential authenticated remote code execution via Twig SSTI	8.6CNA v4.0	0.7%	2026-03-04	Fix
CVE-2026-28783	Craft has a Twig Function Blocklist Bypass	9.4CNA v4.0	0.6%	2026-03-04	Fix
CVE-2026-28782	Craft has a permission bypass and IDOR in Duplicate Entry action	5.3CNA v4.0	0.3%	2026-03-04	Fix
CVE-2026-28781	Craft affected by Entries Authorship spoofing via mass assignment	7.1CNA v4.0	0.5%	2026-03-04	Fix
CVE-2026-28778	Hard-coded FTP Credentials and LPE(via insecure permissions) for `xd` Local Account on IDC SFX2100	9.8v3.1	0.8%	2026-03-04
CVE-2026-28777	International Datacasting Corporation SFX2100 Satellite Receiver hard-coded credentials	9.8v3.1	0.7%	2026-03-04
CVE-2026-28776	International Datacasting Corporation SFX2100 Satellite Receiver hard-coded credentials	9.8v3.1	0.7%	2026-03-04
CVE-2026-28775	International Datacasting Corporation SFX2100 Series SuperFlex SatelliteReceiver unauthenticated RCE	9.8v3.1	1.1%	2026-03-04
CVE-2026-28774	An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver Web Management Interface version 101. An authenticated attacker can inject arbitrary shell metacharacters (such as the pip	8.8NVD v3.1	3.0%	2026-03-04
CVE-2026-28773	International Datacasting Corporation SFX Series SuperFlex Satellite Receiver OS command injection	8.8NVD v3.1	2.6%	2026-03-04
CVE-2026-28772	A Reflected Cross-Site Scripting (XSS) vulnerability in the /IDC_Logging/index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver Web Management Interface version 101 allows a remote attacker to execute arbitrary web scripts or HTML. The vulnerability	6.1v3.1	0.3%	2026-03-04
CVE-2026-28771	A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Management Interface version 101. The application fails to adequately sanitize user-supplied input provided via the `cat`	6.1v3.1	0.3%	2026-03-04
CVE-2026-28770	International Datacasting Corporation SFX Series SuperFlex Satellite Receiver XML injection	8.8v3.1	0.6%	2026-03-04
CVE-2026-28769	International Datacasting Corporation SFX Series SuperFlex Satellite Receiver path traversal	6.5v3.1	0.8%	2026-03-04
CVE-2026-28697	Craft affected by authenticated RCE via craft.app.fs.write in Twig templates	9.4CNA v4.0	1.1%	2026-03-04	Fix
CVE-2026-28696	Craft affected by IDOR via GraphQL @parseRefs	8.7CNA v4.0	0.4%	2026-03-04	Fix
CVE-2026-28695	Craft affected by authenticated RCE via Twig SSTI create function + Symfony Process gadget	7.5CNA v4.0	0.6%	2026-03-04	Exploit codeFix
CVE-2026-28435	cpp-httplib ContentReader streaming denial of service	7.5CNA v3.1	0.6%	2026-03-04	Fix
CVE-2026-28434	Cpp-httplib's default exception handler leaks e.what to clients via EXCEPTION_WHAT response header	5.3CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-28427	OpenDeck affected by path traversal allows arbitrary file read	5.9CNA v4.0	0.5%	2026-03-04	Fix
CVE-2026-27898	Vaultwarden: Unauthorized access via Partial Update API on another User’s Cipher	5.4CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-27803	Vaultwarden: Collection Management Operations Allowed without `manage` Verification for Manager Role	8.3CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-27802	Vaultwarden: Privilege escalation via Bulk Permission Update to Unauthorized Collections by Manager	8.3CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-27801	Vaultwarden: 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement	6.0CNA v4.0	0.3%	2026-03-04	Fix
CVE-2026-27446	Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation	9.3CNA v4.0	1.2%	2026-03-04	Fix
CVE-2026-27445	SEPPmail Secure Email Gateway PGP Signature Reflection	5.3v3.1	0.2%	2026-03-04	Fix
CVE-2026-27444	Header Email Address Parsing	7.5v3.1	0.4%	2026-03-04	Fix
CVE-2026-27443	SEPPmail Secure Email Gateway S/MIME Decryption Tag Sanitization Bypass	7.5v3.1	0.4%	2026-03-04	Fix
CVE-2026-27442	SEPPmail Secure Email Gateway zip_attachments path traversal	7.5NVD v3.1	0.5%	2026-03-04	Fix
CVE-2026-27441	SEPPmail Secure Email Gateway PDF Password CMDi	9.8v3.1	0.6%	2026-03-04	Fix
CVE-2026-26949	Dell Device Management Agent (DDMA) incorrect authorization	5.5CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-26673	DJI Mavic Mini denial of service	7.5CISA ADP v3.1	0.6%	2026-03-04
CVE-2026-26514	xddxdd bird-lg-go An argument injection	7.5CISA ADP v3.1	0.7%	2026-03-04
CVE-2026-26478	Mobvoi Tichome Mini command injection	9.8CISA ADP v3.1	3.0%	2026-03-04
CVE-2026-26002	OnDemand susceptible to malicious input when navigating to a directory	6.3CNA v4.0	0.7%	2026-03-04	Fix
CVE-2026-25907	Dell PowerScale OneFS denial of service	5.3CNA v3.1	0.5%	2026-03-04	Fix
CVE-2026-25750	LangSmith Studio has URL parameter injection vulnerability that enables Token Theft	8.5CNA v4.0	0.5%	2026-03-04	Fix
CVE-2026-24732	Hallo Welt! BlueSpice improper permission checks in Extension:NSFileRepo	6.6CNA v4.0	0.3%	2026-03-04
CVE-2026-23812	HPE Aruba Networking Wireless Operating Systems (AOS-8 and AOS-10) man-in-the-middle	4.3CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-23811	HPE Aruba Networking Wireless Operating Systems (AOS-8 and AOS-10) man-in-the-middle	4.3CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-23810	HPE Aruba Networking Wireless Operating Systems Cross-BSSID GTK Re-encryption and Traffic injection	4.3CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-23809	HPE Aruba Networking Wireless Operating System (AOS-10 and AOS-8) session hijacking	5.4CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-23808	HPE Aruba Networking Wireless Operating System Client Isolation Bypass via GTK Manipulation	5.4CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-23601	HPE Aruba Networking Wireless Operating System Frame injection	5.4CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-23238	Linux kernel romfs mount reachable assertion	5.5v3.1	0.2%	2026-03-04	Fix
CVE-2026-23237	Linux kernel classmate-laptop accelerometer driver null pointer dereference	5.5v3.1	0.2%	2026-03-04	Fix
CVE-2026-23236	Linux kernel smscufx framebuffer driver ioctl handler vulnerability	7.3CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-23235	Linux kernel f2fs sysfs attribute interface out-of-bounds read	7.1v3.1	0.2%	2026-03-04	Fix
CVE-2026-23234	Linux kernel f2fs write completion use-after-free	7.8v3.1	0.1%	2026-03-04	Fix
CVE-2026-23233	Linux kernel f2fs swapfile support out-of-bounds write	7.8v3.1	0.2%	2026-03-04	Fix
CVE-2026-23232	Linux kernel deadlock	5.5v3.1	0.1%	2026-03-04	Fix
CVE-2026-23231	Linux kernel netfilter nf_tables chain management use-after-free	7.8CNA v3.1	0.8%	2026-03-04	Exploit codeFix
CVE-2026-22760	Dell Device Management Agent (DDMA) improper check for exceptional conditions	3.3CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-22285	Dell Device Management Agent (DDMA) plaintext password storage	4.4CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-22270	Dell PowerScale OneFS uncontrolled search path	6.7CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-22040	NanoMQ use-after-free leading to Heap Corruption and Broker crash	5.3CNA v3.1	0.2%	2026-03-04
CVE-2026-21426	Dell PowerScale OneFS execution with unnecessary privileges	6.7CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-21425	Dell PowerScale OneFS incorrect privilege assignment	6.7CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-21424	Dell PowerScale OneFS execution with unnecessary privileges	6.7CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-21423	Dell PowerScale OneFS incorrect default permissions	6.7CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-21422	Dell PowerScale OneFS external control of a configuration setting	3.4CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-21421	Dell PowerScale OneFS execution with unnecessary privileges	6.7CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-20149	Cisco Webex Meetings cross-site scripting	6.1CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-20131	Cisco Secure Firewall Management Center (FMC) software and Cisco Security Cloud Control (SCC) Firewall Management deserialization of untrusted data	10.0CNA v3.1	43.2%	2026-03-04	KEVExploit codeFix
CVE-2026-20106	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software memory leak	5.3CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20105	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software memory leak	7.7CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20103	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software resource exhaustion	8.6CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20102	Cisco Secure Firewall ASA and FTD Software SAML single sign-on reflected cross-site scripting	6.1CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20101	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software insufficient randomness	8.6CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20100	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software buffer overflow	7.7CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20082	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software missing resource release	8.6CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20079	Cisco Firewall Management Center authentication bypass using an alternate path or channel	10.0CNA v3.1	88.2%	2026-03-04	KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2026-20073	Cisco Secure Firewall ASA and FTD Software cluster access control rule replication vulnerability	5.8CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20070	Cisco Secure Firewall ASA and FTD Software VPN web services cross-site scripting	6.1CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20069	Cisco Secure Firewall ASA and FTD Software VPN web services vulnerability	4.3CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20068	Cisco Secure Firewall Threat Defense Software Snort 3 RPC parser vulnerability	5.8CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20067	Cisco Secure Firewall Threat Defense Software Snort 3 HTTP header parser out-of-bounds write	5.8CNA v3.1	0.5%	2026-03-04	Fix
CVE-2026-20066	Cisco Secure Firewall Threat Defense Software Snort 3 JSTokenizer resource exhaustion	5.8CNA v3.1	0.5%	2026-03-04	Fix
CVE-2026-20065	Cisco Secure Firewall Threat Defense Software Snort 3 binder module improper locking	5.8CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20064	Cisco Secure Firewall Threat Defense (FTD) Software null pointer dereference	6.5CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-20063	Cisco Secure FTD software authenticated command injection	6.0CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-20062	Cisco Adaptive Security Appliance Software CLI Secure Copy Protocol handling improper access control	7.2CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-20058	Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for application denial of service	5.8CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20057	Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for application denial of service	5.8CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20054	Cisco Cyber Vision infinite loop	5.8CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20053	Cisco Cyber Vision heap-based buffer overflow	5.8CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20052	Cisco Secure Firewall Threat Defense Software Snort 3 memory management denial of service	5.8CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20050	Cisco Secure Firewall Threat Defense Decryption Policy denial of service	6.8CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20049	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software incorrect buffer size calculation	7.7CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20044	Cisco Secure Firewall Management Center command injection	6.0CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-20039	Cisco Secure Firewall ASA and FTD Software VPN web server denial of service	8.6CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20031	Cisco Secure Endpoint ClamAV CSS Image Parsing Error Handling denial of service	5.3CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20025	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software integer overflow	6.8CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-20024	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software denial of service	6.8CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-20023	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software out-of-bounds write	6.1CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-20022	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software out-of-range pointer offset	6.1CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-20021	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software memory leak	4.3CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-20020	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software improper input validation	6.8CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20018	Cisco Firepower Management Center Software and Firepower Threat Defense path traversal	5.9CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20017	Cisco Secure FTD software authenticated command injection	6.0CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-20016	Cisco Secure Firewall Threat Defense (FTD) Software argument injection	6.0CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20015	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software memory leak	5.8CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20014	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software memory leak	7.7CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20013	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software memory leak	5.8CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20009	Cisco Secure Firewall Adaptive Security Appliance SSH Partial Private Key authentication bypass	5.3CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20008	Cisco Secure Firewall ASA and FTD Software CLI code injection	6.0CNA v3.1	0.1%	2026-03-04	Fix
CVE-2026-20007	Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass vulnerability	5.8CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-20006	Cisco Secure Firewall Threat Defense Software denial of service	5.8CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20005	Cisco Secure Firewall Threat Defense Software denial of service	5.8CNA v3.1	0.5%	2026-03-04	Fix
CVE-2026-20003	Cisco Secure Firewall Management Center (FMC) SQL injection	4.9CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-20002	Cisco Secure Firewall Management Center (FMC) SQL injection	8.1CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-20001	Cisco Secure Firewall Management Center Software SQL injection	6.5CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-3545	Google Chrome Navigation improper input validation	9.6CISA ADP v3.1	0.3%	2026-03-04	Fix
CVE-2026-3544	Google Chrome WebCodecs heap-based buffer overflow	8.8CISA ADP v3.1	0.4%	2026-03-04	Fix
CVE-2026-3543	Google Chrome V8 inappropriate implementation	8.8CISA ADP v3.1	0.4%	2026-03-04	Fix
CVE-2026-3542	Google Chrome WebAssembly inappropriate implementation	8.8CISA ADP v3.1	0.4%	2026-03-04	Fix
CVE-2026-3541	Google Chrome CSS inappropriate implementation	8.8CISA ADP v3.1	0.3%	2026-03-04	Fix
CVE-2026-3540	Google Chrome WebAudio inappropriate implementation	8.8CISA ADP v3.1	0.4%	2026-03-04	Fix
CVE-2026-3538	Google Chrome Skia integer overflow	8.8v3.1	0.5%	2026-03-04	Fix
CVE-2026-3537	Google Chrome PowerVR object lifecycle issue	8.8v3.1	0.4%	2026-03-04	Fix
CVE-2026-3536	Google Chrome ANGLE integer overflow	8.8v3.1	0.5%	2026-03-04	Fix
CVE-2026-3520	Multer vulnerable to denial of service via uncontrolled recursion	8.7CNA v4.0	1.0%	2026-03-04	Fix
CVE-2026-3452	Concrete CMS is vulnerable to stored deserialization leading to RCE in the Express Entry List block	8.9CNA v4.0	0.9%	2026-03-04	Fix
CVE-2026-3439	SonicWall SonicOS post-authentication stack-based buffer overflow	4.9CISA ADP v3.1	0.4%	2026-03-04	Fix
CVE-2026-3244	Concrete CMS below is vulnerable to stored XSS in Search results via Page Names	4.8CNA v4.0	0.3%	2026-03-04	Fix
CVE-2026-3242	Concrete CMS is vulnerable to stored XSS in the Switch Language block	4.8CNA v4.0	0.3%	2026-03-04	Fix
CVE-2026-3241	Concrete CMS below is vulnerable to a stored cross-site scripting (XSS) in the Legacy form block	4.8CNA v4.0	0.3%	2026-03-04	Fix
CVE-2026-3240	Concrete CMS is vulnerable to stored XSS via Legacy form	4.8CNA v4.0	0.3%	2026-03-04	Fix
CVE-2026-3125	@opennextjs/cloudflare SSRF vulnerability in opennextjs-cloudflare	6.5NVD v3.1	0.4%	2026-03-04	Fix
CVE-2026-3103	Checkmk deletion of passwords via RestApi	5.3CNA v4.0	0.3%	2026-03-04	Fix
CVE-2026-3094	File Parsing out-of-bounds write in CNCSoft-G2	7.8CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-3058	Seraphinite Accelerator WordPress plugin exposure of sensitive information to an unauthorized actor	6.5v3.1	0.3%	2026-03-04	Fix
CVE-2026-3056	Seraphinite Accelerator WordPress plugin missing authorization authenticated Log Clearing	4.3CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-2994	Concrete CMS is vulnerable to CSRF by a Rogue Admin using the Anti-Spam Allowlist Group	2.3CNA v4.0	0.2%	2026-03-04	Fix
CVE-2026-2748	SEPPmail Secure Email Gateway S/MIME Certificate Subject Whitespace	5.3NVD v3.1	0.2%	2026-03-04	Fix
CVE-2026-2747	SEPPmail Secure Email Gateway PGP Mixed Plaintext and Encrypted Content	7.5v3.1	0.4%	2026-03-04	Fix
CVE-2026-2746	SEPPmail Secure Email Gateway Missing PGP Signature Tag	5.3v3.1	0.2%	2026-03-04	Fix
CVE-2026-2732	Enable Media Replace WordPress plugin unauthorized access	5.4CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-2363	WP-Members Membership WordPress plugin SQL injection	6.5CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-2355	My Calendar Accessible Event Manager WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-2297	Python CPython SourcelessFileLoader does not use io.open_code	5.7CNA v4.0	0.2%	2026-03-04	Fix
CVE-2026-2292	Morkva UA Shipping WordPress plugin stored cross-site scripting	4.4CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-2289	Taskbuilder WordPress plugin stored cross-site scripting	4.4CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-2025	Mail Mint WordPress plugin unauthenticated emails disclosure	7.5CISA ADP v3.1	1.5%	2026-03-04	NucleiFix
CVE-2026-1980	WPBookit WordPress plugin information disclosure	5.3CNA v3.1	0.8%	2026-03-04	NucleiFix
CVE-2026-1945	WPBookit WordPress plugin unauthenticated stored cross-site scripting	7.2CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-1706	All-in-One Video Gallery WordPress plugin reflected cross-site scripting via vi parameter	6.1CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-1674	Gutena Forms WordPress plugin unauthorized access	6.5CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-1651	Email Subscribers and Newsletters WordPress plugin SQL injection	6.5CNA v3.1	0.4%	2026-03-04	Fix
CVE-2026-1273	Post Grid Gutenberg Blocks for News WordPress plugin server-side request forgery	7.2CNA v3.1	0.3%	2026-03-04	Fix
CVE-2026-1236	Envira Gallery for WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2026-03-04	Fix
CVE-2026-0847	Path traversal in nltk/nltk	7.5NVD v3.1	0.9%	2026-03-04	Fix
CVE-2026-29022	mackron / dr_libs dr_wav.h heap buffer overflow via WAV file	7.8v3.1	0.2%	2026-03-03	Fix
CVE-2026-28518	OpenViking .ovpack Import ZIP Slip path traversal	8.4CNA v4.0	0.2%	2026-03-03	Fix
CVE-2026-28289	FreeScout Patch Bypass for via Zero-Width Space Character leads to remote code execution	10.0CNA v3.1	2.7%	2026-03-03	MetasploitExploit codeFix
CVE-2026-27981	HomeBox has an Auth Rate Limit Bypass via IP spoofing	7.4CNA v3.1	0.4%	2026-03-03	Fix
CVE-2026-27971	Qwik affected by unauthenticated RCE via server$ deserialization	9.2CNA v4.0	2.9%	2026-03-03	Reported exploitedNucleiEmerging ThreatsExploit codeFix
CVE-2026-27932	joserfc PBES2 p2c Unbounded Iteration Count enables denial of service (DoS)	7.5CNA v3.1	0.3%	2026-03-03	Fix
CVE-2026-27905	BentoML has an arbitrary file write via Symlink path traversal in Tar Extraction	8.6CNA v4.0	0.2%	2026-03-03	Fix
CVE-2026-27622	OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write	8.4CNA v4.0	0.2%	2026-03-03	Fix