CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- opentext verticaImproper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.5.1 Medium
- opentext verticaImproper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.5.1 Medium
- opentext verticaUsername Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.5.1 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Information Disclosure5.3 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Information Disclosure3.1 Low
- freerdpFreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar`0.0 None
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions9.3 Critical
- freerdpFreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks6.5 Medium
- freerdpFreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 06.5 Medium
- freerdpFreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write6.5 Medium
- freerdpFreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library3.1 Low
- freerdpFreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId5.3 Medium
- freerdpFreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects5.3 Medium
- lexborType Confusion in Lexbor Fragment Parser8.2 High
- lexborInteger Underflow in Lexbor ISO‑2022‑JP Encoder8.2 High
- gnu inetutilstelnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local...9.8 Critical
- tp-link omada sg2005p-pd firmware, omada sg2008 firmware, omada sg2008p firmware +98 more +100 moreInput Validation Vulnerability on Multiple Omada Switches7.7 High
- emmansun gmsmGo ShangMi SM9 Infinity-Point Ciphertext Forgery Vulnerability7.5 High
- hex hexpmDenial of Service via Oversized Package Upload7.1 High
- jetbrains dataloreIn JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure...6.3 Medium
- openclawOpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs2.0 Low
- openclawOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation5.8 Medium
- openclawOpenClaw < 2026.3.11 - Unauthorized Session Reset via agent Slash Commands6.9 Medium
- openclawOpenClaw < 2026.3.11 - Approval Bypass via Unrecognized Script Runners9.4 Critical
- openclawOpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands7.1 High
- openclawOpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands7.3 High
- openclawOpenClaw < 2026.3.11 - Unbound Interpreter and Runtime Commands Bypass in node-host Approval7.0 High
- openclawOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Subagent Control Surface9.3 Critical
- openclawOpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate9.4 Critical
- openclawOpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes9.2 Critical
- openclawOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit Path5.8 Medium
- google claspArbitrary File Write via Path Traversal in Google clasp leading to RCE8.7 High
- daguDagu has a Path Traversal via `dagRunId` in Inline DAG Execution9.1 Critical
- apache livyApache Livy: Restrict file access6.3 Medium
- apache livyApache Livy: Unauthorized directory access6.3 Medium
- digilent dasylabOut-Of-Bounds Read in Digilent DASYLab8.5 High
- digilent dasylabOut-Of-Bounds Read When Opening a Corrupt File in Digilent DASYLab8.5 High
- daguDagu SSE Authentication Bypass in Basic Auth Mode7.5 High
- digilent dasylabOut-Of-Bounds Write in Digilent DASYLab8.5 High
- digilent dasylabOut-Of-Bounds Write When Opening a Corrupt DSB File in Digilent DASYLab8.5 High
els-os-releaseTuxCareUpdate of els-os-releaseNo score- nyariv sandboxjsSandboxJS has a Sandbox Escape10.0 Critical
- openssl, siemens simatic cn 4100, simatic cn 4100 firmware +2 moreOpenSSL TLS 1.3 server may choose unexpected key agreement group6.5 Medium
- abb awin gw100 rev.2, awin gw120 +1 moreConfiguration Data Spill7.2 High
- abb awin gw100 rev.2, awin gw120 +1 moreDevice Reboot Control7.1 High
- abb awin gw100 rev.2, awin gw120 +1 moreAuthentication Bypass due to Improper Session Validation7.2 High
- red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +22 more +24 moreLibarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive7.5 High
- cyberchimps responsive blocksWordPress Responsive Blocks plugin <= 2.2.0 - Broken Access Control vulnerability5.3 Medium
- raratheme lawyer landing pageWordPress Lawyer Landing Page theme <= 1.2.7 - Broken Access Control vulnerability5.3 Medium
- wptravelengine travel bookingWordPress Travel Booking theme <= 1.3.9 - Broken Access Control vulnerability5.3 Medium
- Show moreLoading…