CVEs published March 17, 2026
113 CVEs were published on March 17, 2026: 10 critical, 34 high. Browse them by severity, product and exploitation status.
- Published
- 113
- Critical
- 10
- High
- 34
- Medium
- 57
- Low
- 10
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 61
Most affected products
- Canva Affinity
- 19
- EDIMAX Technology Co. Edimax GS-5008PL
- 5
- wazuh
- 5
- Apache Software Foundation apache-airflow-core · airflow +1
- 4
- GL-iNet Comet KVM
- 4
- Red Hat Enterprise Linux
- 4
- MongoDB Server
- 3
- ANGEET ES3 KVM
- 2
- Devolutions PowerShell Universal
- 2
- Endpoint DLP Module for Netskope Client
- 2
Critical 10
- CVE-2026-21994Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects…Oracle Edge Cloud Infrastructure Designer and Visualisation…
- CVE-2026-32841Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All ClientsEDIMAX Technology Co. Edimax GS-5008PL
- CVE-2026-25770Wazuh has Privilege Escalation to Root via Cluster Protocol File Writewazuh
- CVE-2026-25769Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserializationwazuh
- CVE-2026-25534Spinnaker clouddriver and orca URL validation bypass via underscores in hostnamesio.spinnaker.clouddriver clouddriver-artifacts · io.spin… +2
- CVE-2026-32297Angeet ES3 KVM unauthenticated arbitrary file writeANGEET ES3 KVM
- CVE-2026-32295JetKVM insufficient login rate limitingJetKVM
- CVE-2026-32292GL-iNet Comet (GL-RM1) KVM insufficient login rate-limitingGL-iNet Comet KVM
- CVE-2026-3564ScreenConnect Instance Level Cryptographic Material ExposureConnectWise ScreenConnect
- CVE-2026-4312DrangSoft｜GCB/FCB Audit Software - Missing AuthenticationDrangSoft GCB/FCB Audit Software
High 34
- CVE-2026-27894LAM has Authenticated Local File Inclusion (LFI) in PDF exportLDAPAccountManager lam
- CVE-2026-27811Roxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCEroxy-wi
- CVE-2026-27459pyOpenSSL DTLS cookie callback buffer overflowpyca pyopenssl · pyopenssl
- CVE-2026-26001GLPI Inventory Plugin has SQL Injection on dropdown_calendar Reportglpi-project glpi-inventory-plugin
- CVE-2026-22727Cloud Foundry unprotected internal endpointsCloudfoundry Cloud Foundry
- CVE-2026-1264IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access ControlsIBM Sterling B2B Integrator
- CVE-2025-14031IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of ServiceIBM Sterling B2B Integrator
- CVE-2026-1376IBM i Denial of ServiceIBM i
- CVE-2026-32838Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTPEDIMAX Technology Co. Edimax GS-5008PL
- CVE-2026-32842Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in CleartextEDIMAX Technology Co. Edimax GS-5008PL
- CVE-2026-32981Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosureray-project Ray · ray
- CVE-2026-4064Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with…Devolutions PowerShell Universal
- CVE-2026-4295Arbitrary code execution via crafted project files in Kiro IDEAWS Kiro IDE
- CVE-2025-66342A type confusion vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-64301An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2026-3207TIBCO BPM Enterprise Remote Code Execution (RCE) VulnerabilityTIBCO BPM Enterprise
- CVE-2026-21570This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0…Atlassian Bamboo Data Center
- CVE-2026-32298Angeet ES3 KVM OS command injectionANGEET ES3 KVM
- CVE-2026-32296Sipeed NanoKVM unauthenticated Wi-Fi configuration endpointSipeed NanoKVM
- CVE-2026-32291GL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial consoleGL-iNet Comet KVM
- CVE-2026-32290GL-iNet Comet (GL-RM1) KVM insufficient firmware verificationGL-iNet Comet KVM
- CVE-2026-4148ExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operatorsMongoDB Server
- CVE-2026-4147Stack memory disclosure in filemd5 commandMongoDB Server
- CVE-2026-24901Outline's IDOR allows unauthorized viewing and seizing of private deleted draftsoutline
- CVE-2026-23759Perle IOLAN STS/SCS Authenticated Command Injection via 'shell ps'Perle Systems IOLAN STS · Perle Systems IOLAN SCS
Show all 34 entriesShow fewer entries
- CVE-2026-4318UTT HiPER 810G formApLbConfig strcpy buffer overflowUTT HiPER
- CVE-2026-3888Local Privilege Escalation in snapdsnapd · Canonical Ubuntu 16.04 LTS +4
- CVE-2026-30911Apache Airflow: Execution API HITL Endpoints Missing Per-Task AuthorizationApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-28779Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applicationsApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-4208Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email)TYPO3 ralffreit/mfa-email · ralffreit/mfa-email
- CVE-2026-4258Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve…sjcl · org.webjars.npm:sjcl
- CVE-2026-0708Libucl: libucl: denial of service via embedded null byte in ucl inputlibucl
- CVE-2026-2579WowStore – Store Builder & Product Blocks for WooCommerce <= 4.4.3 - Unauthenticated SQL Injection via 'search' Parameterwpxpo WowStore – Store Builder & Product Blocks for WooComm…
- CVE-2026-30707An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026.
Medium, low and unrated 69
- CVE-2026-27978Next.js: null origin can bypass Server Actions CSRF checksvercel next.js · next
- CVE-2026-27977Next.js: null origin can bypass dev HMR websocket CSRF checksvercel next.js · next
- CVE-2026-27895LAM has incorrect regular expression in PDF export component that allows user to upload files of any typeLDAPAccountManager lam
- CVE-2026-4355Portabilis i-Educar Endpoint educar_servidor_curso_lst.php cross site scriptingPortabilis i-Educar
- CVE-2026-4354TRENDnet TEW-824DRU Web apply_sec.cgi sub_420A78 cross site scriptingTRENDnet TEW-824DRU
- CVE-2026-27448pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callbackpyca pyopenssl · pyopenssl
- CVE-2026-26004Sentry allows unauthorized access to event data across organizational boundariesgetsentry sentry
- CVE-2026-25937GLPI has a MFA bypassglpi-project glpi
- CVE-2026-20643A cross-origin issue in the Navigation API was addressed with improved input validation.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-3856IBM Db2 Recovery Expert Missing Integrity CheckIBM Db2 Recovery Expert
- CVE-2026-1267IBM Planning Analytics Information DisclosureIBM Planning Analytics Local
- CVE-2025-14806IBM Planning Analytics Information DisclosureIBM Planning Analytics Local
- CVE-2026-32839Edimax GS-5008PL <= 1.00.54 CSRF via Management CGI EndpointsEDIMAX Technology Co. Edimax GS-5008PL
- CVE-2026-32840Edimax GS-5008PL <= 1.00.54 Stored XSS via Device NameEDIMAX Technology Co. Edimax GS-5008PL
- CVE-2026-4349Duende IdentityServer4 Token Renewal Endpoint authorize improper authenticationDuende IdentityServer4
- CVE-2026-2809Endpoint DLP Driver DLLEndpoint DLP Module for Netskope Client
- CVE-2026-4359Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated bufferMongoDB C Driver
- CVE-2026-25936GLPI Vulnerable to Authenticated SQL Injectionglpi-project glpi
- CVE-2026-3563Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user…Devolutions PowerShell Universal
- CVE-2026-32836mackron / dr_libs dr_flac.h Excessive Memory Allocation in PICTURE Metadata Parsingmackron dr_libs dr_flac.h
- CVE-2026-32837mackron / miniaudio Out-of-Bounds Read in BEXT Coding History Parsingmackron miniaudio
- CVE-2026-4358Memory safety issues in slot-based execution hash table spillMongoDB Server
- CVE-2025-15584Endpoint DLP Driver Filter Communication Port Integer OverflowEndpoint DLP Module for Netskope Client
- CVE-2025-62500An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-61979An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
Show all 69 entriesShow fewer entries
- CVE-2025-64733An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-66000An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-64776An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-64735An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-66633An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-58427An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-66617An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-47873An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-61952An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-66503An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-66042An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-65119An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2025-62403An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2026-20726An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2026-22882An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Canva Affinity
- CVE-2026-25790Wazuh has Stack-Based Buffer Overflow in Security Configuration Assessment JSON Parserwazuh
- CVE-2026-25772Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflowwazuh
- CVE-2026-25771Wazuh Vulnerable to Denial of Service via Synchronous I/O Blocking in Asynchronous Authentication Middlewarewazuh
- CVE-2026-32294JetKVM insufficient firmware verificationJetKVM
- CVE-2026-32293GL-iNet Comet (GL-RM1) KVM insufficient certificate validationGL-iNet Comet KVM
- CVE-2026-4319code-projects Simple Food Order System add-item.php sql injectioncode-projects Simple Food Order System
- CVE-2026-28506Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Draftsoutline
- CVE-2026-21886OpenCTI's GraphQL Mutations Allow Deletion of Unrelated EntitiesOpenCTI-Platform opencti · pycti
- CVE-2025-13406Scanning for higher HART revision device leads into NULL pointer dereference in live listSofting smartLink SW-HT
- CVE-2026-4324Rubygem-katello: katello: denial of service and potential information disclosure via sql injectionRed Hat Satellite 6.17 for RHEL · Red Hat Satellite 6.18… +3
- CVE-2025-62320HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica PlatformHCL Sametime
- CVE-2025-31966Boolean-Based SQL Injection in Multiple Unica ComponentsHCL Sametime
- CVE-2026-4271Libsoup: libsoup: denial of service via use-after-free in http/2 serverRed Hat Enterprise Linux
- CVE-2026-28563Apache Airflow: DAG authorization bypassApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-26929Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks MetadataApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-3633Libsoup: libsoup: header and http request injection via crlf injectionRed Hat Enterprise Linux
- CVE-2026-3632Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnamesRed Hat Enterprise Linux
- CVE-2026-3634Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type headerRed Hat Enterprise Linux
- CVE-2026-23241audit: add missing syscalls to read classLinux
- CVE-2025-71239audit: add fchmodat2() to change attributes classLinux
- CVE-2026-4202Broken Access Control in extension "Redirect Tab"TYPO3 ayacoo/redirect-tab · ayacoo/redirect-tab
- CVE-2026-1323Insecure Deserialization in extension "Mailqueue" (mailqueue)cpsit/typo3-mailqueue
- CVE-2026-32586WordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerabilityPluggabl Booster for WooCommerce
- CVE-2026-3237In affected versions of Octopus Server it was possible for a low privileged user to manipulate an API request to change the signing key…Octopus Deploy Octopus Server
- CVE-2026-4308frdel/agent0ai agent-zero document_query.py handle_pdf_document server-side request forgeryfrdel agent-zero · agent0ai agent-zero
- CVE-2026-2373Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post…wproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2026-4307frdel/agent0ai agent-zero files.py get_abs_path path traversalfrdel agent-zero · agent0ai agent-zero
- CVE-2026-4289Tiandy Easy7 Integrated Management Platform getRecByTemplateId sql injectionTiandy Easy7 Integrated Management Platform
- CVE-2026-4288Tiandy Easy7 Integrated Management Platform Endpoint getDevDetailedInfo sql injectionTiandy Easy7 Integrated Management Platform