CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- matterai axon codeThe command auto-approval module in Axon Code contains an OS Command Injection vulnerability,...9.8 Critical
- coderider-kilo coderiderThe command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability...10.0 Critical
- theunwindai awesome llm appsA path traversal vulnerability exists in the awesome-llm-apps project in commit...7.5 High
- dovecot, open-xchange gmbh ox dovecot pro +1 moreIf auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP...3.7 Low
- dovecot, open-xchange gmbh ox dovecot pro +1 moreA mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too...5.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 moreAttacker can send a specifically crafted message before authentication that causes managesieve to...7.5 High
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 moreSending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory...4.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +4 more +6 moreDoveadm credentials are verified using direct comparison which is susceptible to timing oracle...7.4 High
- dovecot, open-xchange gmbh ox dovecot pro +1 moreDovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth...6.8 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +4 more +6 moreDovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin....7.7 High
- dovecot, open-xchange gmbh ox dovecot pro +1 moreWhen dovecot has been configured to use per-domain passwd files, and they are placed one path...5.3 Medium
- No product listedBS Producten Petcam 33.1.0.0818 is vulnerable to Incorrect Access Control. An unauthenticated...6.5 Medium
- No product listedA buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Camera V7...7.2 High
- lyrasis dspaceA Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5...6.1 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 moreManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be...7.5 High
- dovecot, open-xchange gmbh ox dovecot pro +1 moreDovecot has provided a script to use for attachment to text conversion. This script unsafely...4.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro +1 moreWhen sending invalid base64 SASL data, login process is disconnected from the auth server,...5.3 Medium
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 morevLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out8.8 High
- openwebui open webui, open-webui +1 moreOpen WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories3.1 Low
- openwebui open webui, open-webui +1 moreOpen WebUI has unauthorized deletion of knowledge files5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`4.3 Medium
- ultraviolet cocos ai, ultravioletrs cocos +1 moreCoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys7.5 High
- linuxcontainers incusAbitrary file write through systemd-creds option10.0 Critical
- linuxcontainers incusLocal Incus UI web server vulnerable to nuthentication bypass8.8 High
- tenda ac5, ac5 firmware +1 moreTenda AC5 POST Request WifiWpsOOB formWifiWpsOOB stack-based overflow8.7 High
- tenda ac5, ac5 firmware +1 moreTenda AC5 POST Request setcfm formSetCfm stack-based overflow8.7 High
- linuxcontainers incusIncus vulnerable to arbitrary file read and write through pongo templates10.0 Critical
- linuxcontainers incusIncus vulnerable to denial of source through crafted bucket backup file6.5 Medium
- linuxcontainers incusIncus vulnerable to local privilege escalation through VM screenshot path4.7 Medium
- linuxcontainers incusIncus does not verify combined fingerprint when downloading images from simplestreams servers5.7 Medium
- tigervncIn TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate...8.5 High
- tenda ac5, ac5 firmware +1 moreTenda AC5 POST Request QuickIndex formQuickIndex memory corruption8.7 High
- tenda ac5, ac5 firmware +1 moreTenda AC5 POST Request addressNat fromAddressNat memory corruption8.7 High
c2cciutilsPyPIC2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922)7.5 High- nodemailerNodemailer before 8.0.4 SMTP Command Injection via envelope.size9.3 Critical
github.com/goharbor/harborGoHarbor: LDAP password and OIDC secret are not redacted in the audit log6.9 Medium- capricorn86 happy-dom, happy dom, red hat ansible automation platform 2 +1 more +3 moreHappy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code8.8 High
- handlebars-lang handlebars.js, handlebarsjs handlebars +1 moreHandlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection4.7 Medium
loofahRubyGemsLoofah has improper detection of disallowed URIs via `allowed_uri?`2.3 Low- ellanetworks core, ella core +1 moreElla Core Panics during NAS Authentication Response/Failure with missing IEs6.5 Medium
- ellanetworks core, ella core +1 moreElla Core has Privilege Escalation via Database Restore by NetworkManager role7.2 High
- ellanetworks core, ella core +1 moreElla Core has a Denial of Service via SCTP connection cleanup deadlock6.5 Medium
- ellanetworks core, ella core +1 moreElla Core panics when processing a crafted NGAP LocationReport message6.5 Medium
- imagemagickImageMagick - Memory Leak in META Reader APP1JPEG Error Path4.8 Medium
- imagemagickImageMagick - Memory Leak in ASHLAR Coder Action Failure4.8 Medium
apollo-routercrates.ioApollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery6.3 Medium- digitalbazaar forge, red hat cluster observability operator 1.5.0, cryostat 4 +16 more +18 moreForge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)7.4 High
- digitalbazaar forge, red hat cluster observability operator 1.5.0, cryostat 4 +16 more +18 moreForge has signature forgery in Ed25519 due to missing S > L check7.5 High
- digitalbazaar forgenode-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding8.7 High
- Show moreLoading…