CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- craigjbass clearancekitClearanceKit: opfilter policy bypass via non-open file operations8.7 High
- ruckus wireless access point, ruckus unleashed, smartzone 100 (sz-100) (eol) +5 more +7 moreRuckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access6.9 Medium
- ruckus networks unleashed, c110, e510 +27 more +29 moreRuckus Unleashed Authenticated RCE in Gateway Mode7.7 High
- imagemagickImageMagick has an Out-of-bounds Write via InterpretImageFilename5.1 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.11, jboss enterprise application platform 8 +5 more +7 moreKeycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.11, redhat build of keycloak +2 moreKeycloak: keycloak: information disclosure via improper role enforcement in uma 2.0 protection api4.3 Medium
- openclawOpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper7.7 High
- openclawOpenClaw < 2026.3.22 - Unauthenticated Cryptographic Work in Nostr Inbound DM Handling6.9 Medium
- openclawOpenClaw < 2026.3.22 - Webhook Reply Rebinding via Username Resolution in Synology Chat6.0 Medium
- openclawOpenClaw < 2026.3.22 - Remote File URL Acceptance in Windows Media Loaders6.9 Medium
- openclawOpenClaw - Approval Bypass via Environment Variable Normalization6.9 Medium
- tandoor recipesTandoor Recipes Vulnerable to Unrestricted Brute-Force via BasicAuthentication9.1 Critical
- statamic cms, statamic +1 moreStatamic allows unauthorized content access through missing authorization in its revision controllers5.4 Medium
- statamic cms, statamic +1 moreStatamic's sensitive configuration values are exposed to content editors via Antlers-enabled fields6.5 Medium
- tandoor recipesTandoor Recipes's Unauthenticated Debug Parameter Leaks Full Raw SQL Queries Including Schema, Table Names, and Access Control Logic7.7 High
- statamic cms, statamic +1 moreStatamic has an Open Redirect on unauthenticated endpoints via URL parsing differential6.1 Medium
- statamic cms, statamic +1 moreStatamic's live preview token bypasses content protection for unrelated entries4.3 Medium
- statamic cms, statamic +1 moreStatamic has Reflected XSS via unescaped redirect parameter in its password reset form tag6.1 Medium
- tandoor recipesURL Parameter Injection in FDC Food Search API Causes Server Crash and Exposes Internal API Key6.5 Medium
- tandoor recipesTandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII5.3 Medium
- statamic cms, statamic +1 moreStatamic's Markdown preview endpoint exposes sensitive user data6.5 Medium
- path-to-regexppath-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards5.9 Medium
- openclawOpenClaw < 2026.3.23 - Insufficient Access Control in Gateway Agent Session Reset7.2 High
- themactep thingino-firmware, thingino firmware +1 morethingino-firmware api.cgi Unauthenticated Command Injection in Captive Portal8.7 High
- path-to-regexp, red hat cryostat 4, cryostat 4 on rhel 9 +49 more +51 morepath-to-regexp vulnerable to Denial of Service via sequential optional groups7.5 High
- openclawOpenClaw < 2026.3.23 - Authentication Bypass via Local-Direct Requests in Canvas Gateway5.1 Medium
- openclawOpenClaw < 2026.3.23 - Replay Identity Drift via Query-Only Variants in Plivo V2 Verification8.3 High
- tandoor recipesTandoor Recipes has Cross-Space IDOR in SyncViewSet.query_synced_folder: missing space scoping on get_object_or_4045.5 Medium
convictnpmConvict has Prototype Pollution via startsWith() function9.4 Critical- tandoor recipesTandoor Recipes Vulnerable to Host Header Injection8.1 High
convictnpmConvict has prototype pollution via load(), loadFile(), and schema initialization9.4 Critical- ory polisDOM-Based XSS in Ory Polis Login Page8.8 High
- zenc-lang zen c, zenc +1 moreZen-C has Stack-Based Buffer Overflow in Identifier Mangling7.8 High
- langflowLangflow has Authenticated Code Execution in Agentic Assistant Validation9.3 Critical
- juliangruber brace-expansionbrace-expansion: Zero-step sequence causes process hang and memory exhaustion6.5 Medium
- moby buildkitBuildKit Git URL subdir component can cause access to restricted files8.2 High
- moby buildkitBuildKit vulnerable to malicious frontend causing file escape outside of storage root8.4 High
- revelrylabs elixir-nodejselixir-nodejs has Cross-User Data Leakage or Information Disclosure due to Worker Protocol Race Condition7.1 High
- wwbn avideoAVideo has Plaintext Video Password Storage9.1 Critical
- wwbn avideoAVideo has SQL Injection in category.php fixCleanTitle() via Unparameterized clean_title and id Variables7.1 High
- wwbn avideoAVideo has SQL Injection via Partial Prepared Statement — videos_id Concatenated Directly into Query7.1 High
- wwbn avideoAVideo has SSRF Protection Bypass via HTTP Redirect in Image Download Endpoints5.3 Medium
- wwbn avideoAVideo: IDOR in AI Plugin Allows Stealing Other Users' AI-Generated Metadata and Transcriptions4.3 Medium
- wwbn avideoAVideo has an Unauthenticated Video Password Brute-Force Vulnerability via Unrate-Limited Boolean Oracle5.3 Medium
- wwbn avideoAVideo: Unauthenticated Access to Scheduler Plugin Endpoints Leaks Scheduled Tasks, Email Content, and User Mappings5.3 Medium
- wwbn avideoAVideo: Unauthenticated IDOR in playlistsVideos.json.php Exposes Private Playlist Contents5.3 Medium
- librenmsLibreNMS is Vulnerable to Remote Code Execution by Arbitrary File Write8.5 High
com.splunk:splunk-otel-javaagentMavensplunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution9.3 Critical- openfgaOpenFGA has an Authorization Bypass through cached keys5.8 Medium
- imagemagickImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction4.0 Medium
- Show moreLoading…