CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreGStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreGStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreGStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreGStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- unraidUnraid Authentication Request Path Traversal Authentication Bypass Vulnerability7.3 High
- unraidUnraid Update Request Path Traversal Remote Code Execution Vulnerability8.8 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability6.3 Medium
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability8.1 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability8.1 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- philips hue bridge, hue bridge v2 firmware +1 morePhilips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- @apollo gateway, federation-internals, query-planner +2 moreApollo Federation has prototype pollution via incomplete key sanitization9.9 Critical
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection9.7 Critical
- ibm cics transaction gateway for multiplatforms, cics transaction gateway +1 moreIBM CICS Transaction Gateway for Multiplatforms Information Disclosure5.1 Medium
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM Permissable CORS policy7.1 High
- scrapyScrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware7.5 High
- simplesamlphp xml-securityxml-security is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption8.2 High
- parse-community parse-serverParse Server GraphQL WebSocket endpoint bypasses security middleware6.9 Medium
- ibm aspera consoleIBM Aspera Console Denial of Service5.3 Medium
- ibm aspera consoleIBM Aspera Console Denial of Service2.7 Low
- ibm aspera consoleIBM Aspera Console Information Disclosure5.3 Medium
- protocol yamux, libp2p rust-yamux +1 moreYamux remote Panic via malformed Data frame with SYN set and len = 2621458.7 High
- robrichards xmlseclibsxmlseclibs is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption8.2 High
- danny-avila librechatLibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos6.5 Medium
- danny-avila librechatLibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link7.6 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection6.5 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting5.4 Medium
- fit2cloud jumpserverJumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering6.8 Medium
- fit2cloud jumpserverJumpServer Improper Certificate Validation in Custom SMS API Client5.0 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure4.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting5.4 Medium
- calibre-ebook calibrecalibre has a Path Traversal Leading to Arbitrary File Write5.0 Medium
- openclawOpenClaw < 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist Enforcement5.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0...5.4 Medium
- courtbouillon cairosvgCairoSVG vulnerable to Exponential DoS via recursive <use> element amplification7.5 High
- protocol yamux, libp2p rust-yamux +1 moreYamux remote Panic via malformed WindowUpdate credit8.7 High
- forceu gokapiGokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload4.3 Medium
- forceu gokapiGokapi vulnerable to DoS in E2E Metadata Parser6.5 Medium
- forceu gokapiGokapi has Privilege Escalation in File Replace4.1 Medium
- drakkan sftpgoSFTPGo improperly sanitizes placeholders in group home directories/key prefixes5.3 Medium
- drakkan sftpgoSFTPGo has a Path Traversal and Permission Bypass via Path Normalization Discrepancy5.3 Medium
- at&t bell labs unixIn UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to...7.4 High
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Cross-Site Scripting6.1 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Information Disclosure3.7 Low
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Information Disclosure5.3 Medium
- Show moreLoading…