CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- wwbn avideoAVideo's Video Moderator Privilege Escalation via Ownership Transfer Enables Arbitrary Video Deletion7.6 High
- wwbn avideoAVideo's GET-Based CSRF in setPermission.json.php Enables Privilege Escalation via Arbitrary Permission Modification8.1 High
- wwbn avideoAVideo Vulnerable to OS Command Injection via Unsanitized `users_id` and `liveTransmitionHistory_id` in Restreamer Log File Path8.8 High
- wwbn avideoAVideo Vulnerable to Remote Code Execution via MIME/Extension Mismatch in ImageGallery File Upload8.8 High
- tp-link archer nx200 firmware, archer nx210 firmware, archer nx500 firmware +12 more +14 moreHardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX6008.5 High
- tp-link archer nx200 firmware, archer nx210 firmware, archer nx500 firmware +12 more +14 moreCommand Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX6008.5 High
- tp-link archer nx200 firmware, archer nx210 firmware, archer nx500 firmware +12 more +14 moreCommand Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX6008.5 High
- tp-link archer nx200 firmware, archer nx210 firmware, archer nx500 firmware +12 more +14 moreAuthorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX6008.6 High
- erupts erupterupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injection6.9 Medium
- erupts erupterupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injection5.3 Medium
- kalcaddle kodboxkalcaddle kodbox Password Login index.class.php tfaVerify improper authentication6.3 Medium
- jkuhlmann cgltfjkuhlmann / cgltf <= 1.15 Sparse Accessor Validation Integer Overflow6.9 Medium
libnss3TuxCare,libnss3-devTuxCare,libnss3-toolsTuxCare +2 moreUpdate of nssNo score- vim, red hat ai inference server 3.2, ai inference server 3.3 +28 more +30 moreVim affected by Command injection via newline in glob()5.6 Medium
- kalcaddle kodboxkalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection5.1 Medium
- harborUse of hard coded credentials in GoHarbor Harbor9.4 Critical
- kalcaddle kodboxkalcaddle kodbox loginSubmit API index.class.php cross-site request forgery2.3 Low
- @clerk fastifyFastify request.protocol and request.host spoofable via X-Forwarded-Proto/Host from untrusted connections when trustProxy uses restrictive trust function6.1 Medium
- pixarra blob studioBlob Studio 2.17 Denial of Service via Malformed Input6.9 Medium
- pixarra liquid studioLiquid Studio 2.17 Denial of Service via Malformed Input6.9 Medium
- pixarra luminance studioLuminance Studio 2.17 Denial of Service via Malformed Input6.9 Medium
- pixarra paint studioPaint Studio 2.17 Denial of Service via Malformed Input6.9 Medium
- pixarra pixel studioPixel Studio 2.17 Denial of Service via Malformed Input6.9 Medium
- pixarra tree studioTree Studio 2.17 Denial of Service via Malformed Input6.9 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library6.1 Medium
- kalcaddle kodboxkalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery5.3 Medium
- sinturnoSQL Injection in Sinturno9.3 Critical
- kalcaddle kodboxkalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key6.3 Medium
hybridauth/hybridauthPackagistHybridAuth SSL Curl.php certificate validation6.3 Medium- bri klinikaxp, klinikaxp insertino +1 moreHard-coded passwords in KlinikaXP8.7 High
- nexxt solutions nebula 300+, nexxtsolutions nebula300plus firmware +1 moreNexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks7.7 High
- nexxt solutions nebula 300+, nexxtsolutions nebula300plus firmware +1 morePlaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+6.8 Medium
- nexxt solutions nebula 300+, nexxtsolutions nebula300plus firmware +1 moreMissing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+7.2 High
- nexxt solutions nebula 300+, nexxtsolutions nebula300plus firmware +1 moreReversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+8.7 High
- codephiliax chat2dbCodePhiliaX Chat2DB JDBC Driver Upload JdbcDriverController.java upload unrestricted upload5.3 Medium
- cuantisSQL Injection in Cuantis9.3 Critical
- nexxt solutions nebula 300+, nexxtsolutions nebula300plus firmware +1 moreHidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+8.5 High
- nexxt solutions nebula 300+ / tenda f3 v2.0 firmwareUnauthenticated Credential Disclosure via /goform/ate in Nexxt Nebula 300+7.1 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 morePre-Auth Blind SQLi in userinfo Endpoint7.5 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated RCE in com_mb24sysapi9.8 Critical
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform Configuration ImportSystemConfiguration.jsp os command injection9.3 Critical
- shenzhen hcc technology mpos m6 plusShenzhen HCC Technology MPOS M6 PLUS Cardholder Data cleartext transmission2.3 Low
- red hat build of keycloak, build of keycloak 26.4.12 +1 moreKeycloak: keycloak: user enumeration via differential error messages3.7 Low
- shenzhen hcc technology mpos m6 plusShenzhen HCC Technology MPOS M6 PLUS Bluetooth authentication replay2.3 Low
- arekinath esamlXXE in esaml SAML library allows local file read and potential SSRF6.3 Medium
- shenzhen hcc technology mpos m6 plusShenzhen HCC Technology MPOS M6 PLUS Bluetooth missing authentication2.3 Low
- code-projects simple laundry systemcode-projects Simple Laundry System Parameters checklogin.php sql injection6.9 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameters checkupdatestatus.php sql injection6.9 Medium
- red hat build of keycloak, build of keycloak 26.4.12, jboss enterprise application platform 8 +2 more +4 moreKeycloak: org.keycloak.authorization: keycloak: unauthorized resource modification due to improper access control4.3 Medium
- wago industrial managed switch 852-1305, industrial managed switch 852-1305-000-001, industrial managed switch 852-1505 +13 more +15 moreHidden CLI Function Allows Root Access10.0 Critical
- Show moreLoading…