CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- danvei233 xiaoheifsxiaoheiFS Vulnerable to RCE via Unrestricted Plugin Installation (Manifest Manipulation)7.2 High
arrowOSS-FuzzSegv on unknown address in arrow::Array::IsNullNo score- No product listedThe WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface...9.1 Critical
- No product listedA command injection vulnerability exists in the web management interface of the WiFi Extender...9.8 Critical
- No product listedThe WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication...9.8 Critical
- No product listedThe web interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) contains...9.1 Critical
- No product listedA Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of...6.1 Medium
- No product listedA zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows...7.5 High
@developer.notchatbot/webchatnpmNotChatbot WebChat has a stored cross-site scripting (XSS) vulnerability5.4 Medium- aapanelAn arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary...9.8 Critical
- aapanelA lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion ...7.5 High
- aapanelAn issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows...7.5 High
- grafana tempoS3 SSE-C Encryption Key Exposed in Plaintext via Config Endpoint (CVE-2025-41118 Pattern)7.5 High
- giflib project giflib, red hat ai inference server 3.2, build of openjdk 1.8 +24 more +26 moreBuffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of...8.2 High
- murasoftware mura cmsMura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.9.8 Critical
- murasoftware mura cmsMura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.9.8 Critical
- No product listedMicrosoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation...8.8 High
- murasoftware mura cmsMuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently...8.1 High
- murasoftware mura cmsThe update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate...7.1 High
- murasoftware mura cmsThe Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore...8.8 High
- murasoftware mura cmsMuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality ...6.5 Medium
- murasoftware mura cmsMuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user...8.0 High
- murasoftware mura cmsThe import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and...8.8 High
- ldap-account-manager ldap account manager, ldapaccountmanager lam +1 moreLAM has incorrect regular expression in PDF export component that allows user to upload files of any type4.3 Medium
- ldap-account-manager ldap account manager, ldapaccountmanager lam +1 moreLAM has Authenticated Local File Inclusion (LFI) in PDF export8.8 High
- roxy-wiRoxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCE8.8 High
- portabilis i-educarPortabilis i-Educar Endpoint educar_servidor_curso_lst.php cross site scripting5.1 Medium
- trendnet tew-824druTRENDnet TEW-824DRU Web apply_sec.cgi sub_420A78 cross site scripting5.1 Medium
- getsentry sentrySentry allows unauthorized access to event data across organizational boundaries5.7 Medium
- glpi-project glpi inventory, glpi-inventory-plugin +1 moreGLPI Inventory Plugin has SQL Injection on dropdown_calendar Report7.1 High
- glpi-project glpiGLPI has a MFA bypass6.5 Medium
- cloudfoundry cloud foundryCloud Foundry unprotected internal endpoints7.5 High
- oracle corporation edge cloud infrastructure designer and visualisation toolkit, oracle okit +1 moreVulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product...9.8 Critical
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls7.1 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service7.5 High
- apple ipados, macos, safari +3 more +5 moreA cross-origin issue in the Navigation API was addressed with improved input validation. This...5.4 Medium
- ibm db2 recovery expertIBM Db2 Recovery Expert Missing Integrity Check5.3 Medium
libecpg6-9.6TuxCare,libecpg-compat3-9.6TuxCare,libecpg-dev-9.6TuxCare +12 more +14 moreUpdate of postgresql-9.6No score- ibm iIBM i Denial of Service7.5 High
amd64-microcodeTuxCareUpdate of amd64-microcodeNo score- ibm planning analytics localIBM Planning Analytics Information Disclosure6.5 Medium
- ibm planning analytics localIBM Planning Analytics Information Disclosure5.7 Medium
- edimax gs-5008pl firmware, edimax technology co., ltd. gs-5008pl +1 moreEdimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP8.7 High
- edimax gs-5008pl firmware, edimax technology co., ltd. gs-5008pl +1 moreEdimax GS-5008PL <= 1.00.54 CSRF via Management CGI Endpoints5.1 Medium
- edimax gs-5008pl firmware, edimax technology co., ltd. gs-5008pl +1 moreEdimax GS-5008PL <= 1.00.54 Stored XSS via Device Name5.1 Medium
- edimax gs-5008pl firmware, edimax technology co., ltd. gs-5008pl +1 moreEdimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext7.1 High
- edimax gs-5008pl firmware, edimax technology co., ltd. gs-5008pl +1 moreEdimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients9.2 Critical
- duende identityserver4Duende IdentityServer4 Token Renewal Endpoint authorize improper authentication6.3 Medium
- antchfx xpath, github.com/antchfx/xpath +1 moreInfinite loop in github.com/antchfx/xpath7.5 High
- wwbn avideoAVideo vulnerable to unauthenticated SSRF via HTTP redirect bypass in LiveLinks proxy8.6 High
- Show moreLoading…