CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- b3log siyuanSiYuan has an Incomplete Fix for IsSensitivePath Denylist Allows File Read from /opt, /usr, /home6.8 Medium
- grpc, grpc grpc-go, red hat assisted installer for red hat openshift container platform 2 +166 more +168 moregRPC-Go has an authorization bypass via missing leading slash in :path9.1 Critical
- qluster deepdiffDeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT8.7 High
- dynaconfdynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver7.5 High
- hapifhir org.hl7.fhir.core, red hat fuse 7 +1 moreHAPI FHIR HTTP authentication leak in redirects7.5 High
- filamentphp filamentFilament: Unvalidated Range and Values summarizer values can be used for XSS7.3 High
- free5gc, free5gc udm +1 morefree5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request6.9 Medium
- free5gc, free5gc udm +1 morefree5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference8.7 High
- free5gc ausf, free5gc +1 morefree5GC AUSF UE Authentication Panic on Nil SuciSupiMap Interface Conversion8.7 High
- free5gc, free5gc nrf +1 morefree5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameter8.7 High
- mesop-dev mesopMesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py9.8 Critical
- mesop-dev mesopMesop: Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion10.0 Critical
- statamic cms, statamic +1 moreStatamic is missing authorization check on taxonomy term creation via fieldtype4.3 Medium
- statamic cms, statamic +1 moreStatamic has a path traversal in file dictionary fieldtype4.3 Medium
- htslibHTSlib CRAM decoder vulnerable to buffer overflow7.1 High
- statamic cms, statamic +1 moreStatamic has Stored XSS via SVG Sanitization Bypass8.7 High
- qameta allure report, allure-framework allure2 +1 moreAllure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers)8.6 High
- htslibHTSlib BGZF index file reader has a heap buffer overflow7.1 High
- parse-community parse-serverParse Server leaks protected fields via LiveQuery afterEvent trigger8.2 High
- apostrophecms import-exportApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction10.0 Critical
- apostrophecms apostrophe, apostrophecms +1 moreApostropheCMS MFA/TOTP Bypass via Incorrect MongoDB Query in Bearer Token Middleware8.1 High
- htslibHTSlib CRAM decoder has a heap buffer overflow7.1 High
- devolutions hub reporting serviceImproper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier...8.1 High
- htslibHTSlib CRAM decoder vulnerable to buffer overflow8.8 High
- htslibHTSlib CRAM reader has out-of-bounds read due to improper validation of input6.9 Medium
- htslibHTSlib CRAM reader has out-of-bounds read due to improper validation of input6.9 Medium
- htslibHTSlib CRAM reader has out-of-bounds reads due to improper validation of input6.9 Medium
- htslibHTSlib CRAM decoder has a NULL Pointer Dereference6.9 Medium
- htslibHTSlib CRAM reader has heap buffer overflow due to improper validation of input8.8 High
- python software foundation cpythonpkgutil.get_data() does not enforce documented restrictions0.0 None
- htslibHTSlib CRAM reader has heap buffer overflow due to improper validation of input8.8 High
- nghttp2, red hat jboss core services for rhel 8, jboss core services on rhel 7 +37 more +39 morenghttp2 Denial of service: Assertion failure due to the missing state validation7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks7.8 High
- linux, linux kernel +1 moreapparmor: validate DFA start states are in bounds in unpack_pdb7.1 High
- linux, linux kernel +1 moreapparmor: fix unprivileged local user can do privileged policy management7.8 High
- linux, linux kernel +1 moref2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes5.5 Medium
- linux, linux kernel +1 morefbdev: rivafb: fix divide error in nv3_arb()5.5 Medium
- linux, linux kernel +1 moref2fs: fix to do sanity check on node footer in {read,write}_end_io5.5 Medium
- linux, linux kernel +1 moreRevert "drm/amd: Check if ASPM is enabled from PCIe subsystem"5.5 Medium
- linux, linux kernel +1 moreio_uring/zcrx: fix page array leak5.5 Medium
- linux, linux kernel +1 moregve: Fix stats report corruption on queue count change7.8 High
- linux, linux kernel +1 morenvme-fc: release admin tagset if init fails5.5 Medium
- linux, linux kernel +1 moreregmap: maple: free entry on mas_store_gfp() failure5.5 Medium
- linux, linux kernel +1 moreio_uring/rw: free potentially allocated iovec on cache put failure5.5 Medium
- linux, linux kernel +1 morenet: liquidio: Initialize netdev pointer before queue setup5.5 Medium
- linux, linux kernel +1 morenet: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup5.5 Medium
- linux, linux kernel +1 morenet: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: add proper RCU protection to /proc/net/ptype5.5 Medium
- linux, linux kernel +1 morenet: gro: fix outer network offset5.5 Medium
- linux, linux kernel +1 moreLoongArch: Enable exception fixup for specific ADE subcode5.5 Medium
- Show moreLoading…