CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- tenda fh1201, fh1201 firmware +1 moreTenda FH1201 Parameter WrlclientSet stack-based overflow8.7 High
- linux, linux kernel +1 morerust_binder: call set_notification_done() without proc lock5.5 Medium
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 Setting formSetSystemSettings stack-based overflow8.7 High
libcrux-chacha20poly1305crates.iolibcrux: Potential Panic on Overlong Ciphertext Buffer8.2 High- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 Parameter formSetPassword stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 Parameter formCrossBandSwitch stack-based overflow8.7 High
- code-projects chamber of commerce membership management systemcode-projects Chamber of Commerce Membership Management System pageMail.php fwrite command injection5.1 Medium
mxmlDebianmxml mxmlIndexNew mxml-index.c index_sort stack-based overflow4.8 Medium- tenda 4g06, 4g06 firmware +1 moreTenda 4G06 Endpoint DhcpListClient fromDhcpListClient stack-based overflow8.7 High
- code-projects accounting systemcode-projects Accounting System Parameter view_work.php sql injection6.9 Medium
- nodejs node, node.js +1 moreA flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server...5.3 Medium
- code-projects accounting systemcode-projects Accounting System Parameter edit_costumer.php sql injection6.9 Medium
- code-projects accounting systemcode-projects Accounting System Parameter view_costumer.php sql injection6.9 Medium
- bichitrogan isp billing softwareBichitroGan ISP Billing Software Endpoint users-view resource injection5.3 Medium
- totolink nr1800x, nr1800x firmware +1 moreTotolink NR1800X Telnet Service cstecgi.cgi NTPSyncWithHost command injection5.3 Medium
- d-link dir-513, dlink dir-513 firmware +1 moreD-Link DIR-513 formSetEmail stack-based overflow8.7 High
- dedeveloper23 codebase-mcpDeDeveloper23 codebase-mcp RepoMix codebase.ts saveCodebase os command injection4.8 Medium
- twentig supercharged block editor – blocks, patterns, starter sites, portfolioTwentig <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'featuredImageSizeWidth'6.4 Medium
- tenda f453, f453 firmware +1 moreTenda F453 httpd PPTPUserSetting fromPPTPUserSetting stack-based overflow8.7 High
- totolink a3600r, a3600r firmware +1 moreTotolink A3600R Parameter cstecgi.cgi setNoticeCfg command injection5.3 Medium
- casiano grid::machine, grid\ +1 moreGRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization9.8 Critical
vlcOSS-FuzzHeap-buffer-overflow in DecodeBlockNo score- carmelo simple food order systemcode-projects Simple Food Order System Parameter all-orders.php sql injection6.9 Medium
- carmelo simple food order systemcode-projects Simple Food Order System Parameter register-router.php sql injection6.9 Medium
- carmelo simple food order systemcode-projects Simple Food Order System Parameter all-tickets.php sql injection6.9 Medium
- elecv2 elecv2pelecV2 elecV2P URL mock eAxios server-side request forgery6.9 Medium
- elecv2 elecv2pelecV2 elecV2P Endpoint logs cross site scripting5.3 Medium
- elecv2 elecv2pelecV2 elecV2P Wildcard log path.join path traversal6.9 Medium
- elecv2 elecv2pelecV2 elecV2P :key path.join path traversal6.9 Medium
- elecv2 elecv2pelecV2 elecV2P rpc pm2run os command injection6.9 Medium
- ktat http::session, http\ +1 moreHTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids9.8 Critical
- tokuhirom amon2Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions9.8 Critical
- elecv2 elecv2pelecV2 elecV2P JSON webhook runJSFile code injection5.3 Medium
- kazuph mcp-docs-ragkazuph mcp-docs-rag add_git_repository/add_text_file index.ts cloneRepository os command injection4.8 Medium
- wavlink wl-wn579x3-c, wl-wn579x3-c firmware +1 moreWavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow8.7 High
- promtengineer localgptPromtEngineer localGPT Web api_server.py handle_index information disclosure6.9 Medium
- promtengineer localgptPromtEngineer localGPT LLM Prompt server.py _route_using_overviews injection6.9 Medium
hackage-serverHackageHackage package metadata stored XSS vulnerability9.9 Criticalhackage-serverHackageHackage CSRF vulnerability9.6 Critical- promtengineer localgptPromtEngineer localGPT server.py do_POST unrestricted upload6.9 Medium
- promtengineer localgptPromtEngineer localGPT API Endpoint server.py LocalGPTHandler missing authentication6.9 Medium
- z-9527 adminz-9527 admin isImg Check upload.js uploadFile path traversal5.3 Medium
- sinaptik ai pandasaiSinaptik AI PandasAI Chat Message code_executor.py CodeExecutor.execute code injection6.9 Medium
- sinaptik ai pandasaiSinaptik AI PandasAI sql_sanitizer.py is_sql_query_safe path traversal6.9 Medium
- flatassembler flat assemblerFlat Assembler 1.71.21 Stack-Based Buffer Overflow ROP8.6 High
- sippSIPP 3.3 Stack-Based Buffer Overflow via Configuration File8.6 High
- pms, kimtore practical music search +1 morePMS 0.42 Stack-Based Buffer Overflow via Configuration File8.6 High
- crashmail, ftnapps crashmail ii +1 moreCrashmail 1.6 Stack-based Buffer Overflow Remote Code Execution9.3 Critical
- scSC v7.16 Stack-Based Buffer Overflow Remote Code Execution8.6 High
- echatserver echat server, easy chat server +1 moreEChat Server 3.1 Buffer Overflow via chat.ghp username Parameter9.3 Critical
- Show moreLoading…