CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- No product listedchatwoot Signup Endpoint login improper authorization6.9 Medium
- open5gsOpen5GS CCA Message smf_s6b denial of service6.3 Medium
- dloebl cgifdloebl CGIF GIF Image cgif.c cgif_addframe integer overflow5.3 Medium
- streetwriters notesnook ios/android, notesnook web/desktop, notesnook desktop +1 more +3 moreNotesnook vulnerable to RCE via stored XSS in Web Clipper rendering9.7 Critical
- kovah linkaceLinkAce discloses private notesto unauthorized authenticated users via the web link detail page6.5 Medium
- kovah linkaceLinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce8.5 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- ubiquiti unifi network controllerUniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM7.7 High
- capricorn86 happy dom, happy-dom, red hat ansible automation platform 2 +1 more +3 moreHappy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies7.5 High
- ubiquiti unifi network controller, unifi uap firmware, unifi uap-ac firmware +2 more +4 moreUbiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control9.0 Critical
io.root.software.amazon.awssdk:cloudfrontRoot,software.amazon.awssdk:cloudfrontMaven +1 moreAWS SDK for Java 2.0: Improper Handling of Special Characters in CloudFront Signing Utilities7.7 High- windmillWindmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor7.3 High
- aicentre federated learning and interoperability platform, londonaicentre flip +1 moreFLIP doesn't have rate limiting or brute-force protection on login2.7 Low
- totolink lr350, lr350 firmware +1 moreTotolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow8.7 High
- gematik authenticator, app-authenticator +1 moreAuthenticator Vulnerable to Authentication Flow Hijack9.3 Critical
- gematik authenticator, app-authenticator +1 moreAuthenticator vulnerable to Remote Code Execution7.8 High
- clerk javascriptClerk JavaScript: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host7.4 High
- cryptography.io cryptographycryptography has incomplete DNS name constraint enforcement on peer names1.7 Low
aws/aws-sdk-phpPackagistAWS SDK for PHP has CloudFront Policy Document Injection via Special Characters7.7 High- tenda ac15, ac15 firmware +1 moreTenda AC15 POST Request setcfm formSetCfm memory corruption8.7 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption8.7 High
- sourcecodester online quiz systemSourceCodester Online Quiz System add-question.php cross site scripting5.1 Medium
- joinmastodon mastodonMastodon has a denial of service for quote authorization4.8 Medium
- joinmastodon mastodonMastodon has a GET-Based Open Redirect via '/web/%2F<domain>'4.3 Medium
- com.ritense.valtimo web, pi-hole web interface +1 morePi-hole Web Interface has a Command Injection Vulnerability8.9 High
- fogprojectFOG has Stored XSS in Multiple Management Pages5.7 Medium
- langchain core, langchain-ai langchain, red hat openshift lightspeed +4 more +6 moreLangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions7.5 High
- hkuds nanobotZero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling8.9 High
- shopify ruby-lsp, ruby lsp, shopify.ruby-lsp +2 moreRuby LSP has arbitrary code execution through branch setting7.1 High
- home-assistant home assistant supervisor, home assistant operating system +1 moreHome Assistant: Unauthenticated App (Add-on) Endpoints Exposed to Local Network via Host Network Mode9.7 Critical
- varnish-software varnish cache, varnish enterprise, vinyl-cache vinyl cache +2 moreVarnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url...5.4 Medium
- home-assistant core, home-assistant +1 moreHome Assistant has stored XSS in history-graphs7.3 High
- langflow, langflow langflow-base +1 moreLangflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check8.7 High
- home-assistant core, home-assistant +1 moreHome Assistant has stored XSS in Map-card through malicious device name7.3 High
- nektos actact: actions/cache server allows malicious cache injection8.2 High
- flannel-io flannelFlannel vulnerable to cross-node remote code execution via extension backend BackendData injection7.5 High
- danny-avila librechatLibreChat's MCP Server Header Injection Enables OAuth Token Theft6.8 Medium
- danny-avila librechatLibreChat's IDOR in SSE Stream Subscription Allows Reading Other Users' Chats5.3 Medium
- danny-avila librechatLibreChat Server-Side Request Forgery using DNS resolution7.7 High
- danny-avila librechatLibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP8.5 High
- fleetdm fleetFleet Vulnerable to Windows MDM cross-device command disclosure6.6 Medium
- fleetdm fleetFleet's user account creation via invite does not enforce invited email address4.9 Medium
- nektos actact: Unrestricted set-env and add-path command processing enables environment injection7.7 High
- code-projects online reviewer systemcode-projects Online Reviewer System btn_functions.php cross site scripting4.8 Medium
- sourcecodester note taking appSourceCodester Note Taking App cross-site request forgery5.3 Medium
- mobile-next mobile-mcp, mobilenexthq mobile mcp +1 more@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools8.1 High
- fleetdm fleetFleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint6.6 Medium
- dgtlmoon changedetection.io, webtechnologies changedetection +1 moreChangedetection.io Discloses Environment Variables via jq env Builtin in Include Filters8.3 High
- pab1it0 azure data explorer mcp server, adx-mcp-server +1 moreAzure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries8.3 High
- lfprojects mcp ruby sdk, modelcontextprotocol ruby-sdk +1 moreMCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay8.2 High
- Show moreLoading…