CVEs published March 31, 2026
271 CVEs were published on March 31, 2026: 36 critical, 78 high. Browse them by severity, product and exploitation status.
- Published
- 271
- Critical
- 36
- High
- 78
- Medium
- 143
- Low
- 14
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 165
Most affected products
- InternationalColorConsortium iccDEV
- 20
- OpenClaw
- 20
- discourse
- 15
- WWBN AVideo · wwbn/avideo
- 13
- baserproject basercms · baserproject/basercms
- 9
- parse-community parse-server · parse-server
- 9
- PowerDNS DNSdist
- 7
- D-Link DNS-120 · D-Link DNR-202L +18
- 5
- siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- 5
- admidio · admidio/admidio
- 4
Critical 36
- CVE-2026-34449SiYuan: Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injectionsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-34448SiYuan: Stored XSS in Attribute View gallery/kanban cover rendering allows arbitrary command execution in the desktop clientsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-34406APTRS: Privilege Escalation via Mass Assignment of is_superuser in User Edit EndpointAPTRS
- CVE-2026-1579PX4 Autopilot Missing authentication for critical functionPX4 Autopilot
- CVE-2026-3356Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum MonitorAnritsu Remote Spectrum Monitor MS27100A · Anritsu Remot… +2
- CVE-2026-34361HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Thefthapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fhir.…
- CVE-2026-34243wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body`njzjz wenxian
- CVE-2026-34220MikroORM is vulnerable to SQL Injection via specially crafted objectmikro-orm · @mikro-orm/core
- CVE-2026-34532Parse Server: Cloud function validator bypass via prototype chain traversalparse-community parse-server · parse-server
- CVE-2026-0596Command Injection in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2026-33579OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair ApprovalOpenClaw
- CVE-2026-34202Zebra node crash — V5 transaction hash panic (P2P reachable)ZcashFoundation zebra · ZcashFoundation zebra-chain +2
- CVE-2026-34162FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theftlabring FastGPT
- CVE-2026-34156NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Nodenocobase · @nocobase/plugin-workflow-javascript
- CVE-2026-32917OpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCPOpenClaw
- CVE-2026-32916OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin ScopesOpenClaw
- CVE-2025-15618Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret keyMOCK Business::OnlinePayment::StoredTransaction
- CVE-2026-4317SQL inyection in Umami Software applicationUmami Software application Umami Software
- CVE-2026-3107Multiple vulnerabilities in TeampassTeampass
- CVE-2026-3106Multiple vulnerabilities in TeampassTeampass
- CVE-2026-32714SciTokens vulnerable to SQL Injection in KeyCachescitokens
- CVE-2026-3300Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation FieldWPEverest Everest Forms Pro
- CVE-2026-30877baserCMS: OS Command Injection in the baserCMS Update Functionalitybaserproject basercms · baserproject/basercms
- CVE-2026-30880baserCMS: OS command injection vulnerability in installerbaserproject basercms · baserproject/basercms
- CVE-2026-21861baserCMS: OS Command Injection Leading to Remote Code Execution (RCE)baserproject basercms · baserproject/basercms
Show all 36 entriesShow fewer entries
- CVE-2026-30276An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via…
- CVE-2026-30278An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files…
- CVE-2026-30281An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file…
- CVE-2026-30282An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical…
- CVE-2026-30283An arbitrary file overwrite vulnerability in PEAKSEL D.O.O.
- CVE-2026-30285An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files…
- CVE-2026-30286An arbitrary file overwrite vulnerability in Funambol, Inc.
- CVE-2026-30310In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands.
- CVE-2026-30311Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security…
- CVE-2026-30312DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security…
- CVE-2026-30314Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security…
High 78
- CVE-2026-34605SiYuan: Reflected XSS via SVG namespace prefix bypass in SanitizeSVG ( getDynamicIcon, unauthenticated )siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-34585SiYuan: Stored XSS in imported .sy.zip content leads to arbitrary command executionsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-34453SiYuan: Broken access control in /api/bookmark/getBookmark allows unauthenticated publish visitors to read password-protected bookmarked…siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-5214D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflowD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2026-34731AVideo: Unauthenticated Live Stream Termination via RTMP Callback on_publish_done.phpWWBN AVideo · wwbn/avideo
- CVE-2026-34394AVideo: CSRF on Admin Plugin Configuration Enables Payment Credential HijackingWWBN AVideo · wwbn/avideo
- CVE-2026-34381Admidio: Unauthenticated Access to Role-Restricted documents via neutralized .htaccessadmidio · admidio/admidio
- CVE-2026-34367InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes FieldInvoiceShelf
- CVE-2026-5213D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflowD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2026-5212D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflowD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2026-34366InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes FieldInvoiceShelf
- CVE-2026-34365InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes FieldInvoiceShelf
- CVE-2026-34784Parse Server: Streaming file download bypasses afterFind file trigger authorizationparse-community parse-server · parse-server
- CVE-2026-34215Parse Server: Auth data exposed via verify password endpointparse-community parse-server · parse-server
- CVE-2026-34204MinIO is Vulnerable to SSE Metadata Injection via Replication Headersminio · github.com/minio/minio
- CVE-2026-5211D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflowD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2026-4800lodash vulnerable to Code Injection via `_.template` imports key nameslodash · lodash-es +2
- CVE-2026-2123Privilege escalation vulnerability in Operations AgentOpenText Operations Agent
- CVE-2026-5190AWS C Event Stream Streaming Decoder Stack Buffer Overflowaws-c-event-stream
- CVE-2026-32725SciTokens C++: Relative Path Traversal Vulnerabilityscitokens-cpp
- CVE-2026-32726SciTokens C++: Sibling-Path Authorization Bypassscitokens-cpp
- CVE-2026-34359HAPI FHIR: Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect in HAPI FHIR Corehapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +1
- CVE-2026-24165NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data.NVIDIA BioNeMo Framework
- CVE-2026-24164NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data.NVIDIA BioNeMo Framework
- CVE-2026-24154NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line…NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson…
Show all 78 entriesShow fewer entries
- CVE-2026-24148NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the…NVIDIA Jetson Xavier Series and Jetson Orin Series
- CVE-2026-5087PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurelyJJNAPIORK PAGI::Middleware::Session::Store::Cookie
- CVE-2026-34219libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflowrust-libp2p · libp2p-gossipsub
- CVE-2026-5204Tenda CH22 Parameter webtypelibrary formWebTypeLibrary stack-based overflowTenda CH22
- CVE-2026-34240jose vulnerable to untrusted JWK header key acceptance during signature verificationappsup-dart jose
- CVE-2026-34221MikroORM has Prototype Pollution in Utils.mergemikro-orm · @mikro-orm/core
- CVE-2026-34573Parse Server: GraphQL complexity validator exponential fragment traversal DoSparse-community parse-server · parse-server
- CVE-2026-34363Parse Server: LiveQuery protected field leak via shared mutable state across concurrent subscribersparse-community parse-server · parse-server
- CVE-2026-34214Trino: Iceberg REST catalog static and vended credentials are accessible via query JSONtrinodb trino · io.trino:trino-iceberg
- CVE-2026-34209mppx: Tempo has a session close voucher bypass vulnerability due to settled amount equalitywevm mppx · mppx
- CVE-2026-34503OpenClaw < 2026.3.28 - Incomplete WebSocket Session Termination on Device Removal and Token RevocationOpenClaw
- CVE-2026-33581OpenClaw < 2026.3.24 - Arbitrary File Read via mediaUrl and fileUrl ParametersOpenClaw
- CVE-2026-33577OpenClaw < 2026.3.28 - Insufficient Scope Validation in node.pair.approveOpenClaw
- CVE-2026-34377Zebra has a Consensus Failure due to Improper Verification of V5 TransactionsZcashFoundation zebra · ZcashFoundation zebra-consensus +2
- CVE-2026-34200Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Portnhost
- CVE-2026-20915Stored cross-site scripting in Pending Changes sidebarCheckmk
- CVE-2026-34172Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 EnvironmentGiskard-AI giskard-oss · giskard-agents
- CVE-2026-33276XSS in Unified Search via Unescaped Host/Service NamesCheckmk
- CVE-2026-34163Server-Side Request Forgery via MCP Tools Endpoint in FastGPTlabring FastGPT
- CVE-2026-34155RAUC: Improper Signing of Plain Bundles Exceeding 2 GiBrauc
- CVE-2026-3308CVE-2026-3308Artifex Software Inc. *PyMuPDF* MuPDF
- CVE-2025-14213Cato's Socket WebUI is vulnerable to OS Command InjectionCato Networks Socket
- CVE-2024-14031Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard libraryYVES Sereal::Encoder
- CVE-2024-14030Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard libraryYVES Sereal::Decoder
- CVE-2026-4267Query Monitor <= 3.20.3 - Reflected Cross-Site Scripting via Request URIjohnbillion Query Monitor · johnbillion/query-monitor
- CVE-2026-32982OpenClaw < 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error LogsOpenClaw
- CVE-2026-32976OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel CommandsOpenClaw
- CVE-2026-32971OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended CommandsOpenClaw
- CVE-2026-32920OpenClaw < 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace PluginsOpenClaw
- CVE-2026-4400Multiple vulnerabilities in 1millionbot Millie chatbot1millionbot Millie chat
- CVE-2026-4399Multiple vulnerabilities in 1millionbot Millie chatbot1millionbot Millie chat
- CVE-2025-10559Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x…Dassault Systèmes DELMIA Factory Resource Manager
- CVE-2025-10553Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release…Dassault Systèmes DELMIA Factory Resource Manager
- CVE-2025-10551Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release…Dassault Systèmes ENOVIA Collaborative Industry Innovator
- CVE-2026-5201Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imageRed Hat Enterprise Linux · Red Hat AI Inference Server
- CVE-2026-34070LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functionslangchain-ai langchain · langchain-core
- CVE-2026-34060Ruby LSP has arbitrary code execution through branch settingShopify ruby-lsp · Shopify.ruby-lsp +1
- CVE-2026-34054openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element)microsoft vcpkg
- CVE-2026-34042act: actions/cache server allows malicious cache injectionnektos act · github.com/nektos/act
- CVE-2026-34041act: Unrestricted set-env and add-path command processing enables environment injectionnektos act · github.com/nektos/act
- CVE-2026-34040Moby: AuthZ plugin bypass with oversized request bodymoby · github.com/docker/docker +2
- CVE-2026-32727SciTokens: Authorization Bypass via Path Traversal in Scope Validationscitokens
- CVE-2026-32716SciTokens: Authorization Bypass via Incorrect Scope Path Prefix Checkingscitokens
- CVE-2026-4020Gravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST APIRocketGenius Gravity SMTP
- CVE-2026-32734baserCMS: Multiple vulnerabilities in baserCMSbaserproject basercms · baserproject/basercms
- CVE-2026-30940baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCEbaserproject basercms · baserproject/basercms
- CVE-2025-32957baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE)baserproject basercms · baserproject/basercms
- CVE-2026-29870A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows arbitrary file writes via the…
- CVE-2026-30277An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical…
- CVE-2026-30279An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows attackers to overwrite critical…
- CVE-2026-30284An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via…
- CVE-2026-30290An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal…
- CVE-2026-30309InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism…
Medium, low and unrated 157
- CVE-2026-5240code-projects BloodBank Managing System admin_state.php cross site scriptingcode-projects BloodBank Managing System
- CVE-2026-5238itsourcecode Payroll Management System Parameter view_employee.php sql injectionitsourcecode Payroll Management System
- CVE-2026-4668Amelia <= 2.1.2 - Authenticated (Manager+) SQL Injection via 'sort' Parameterameliabooking Booking for Appointments and Events Calendar…
- CVE-2026-5237itsourcecode Payroll Management System Parameter manage_user.php sql injectionitsourcecode Payroll Management System
- CVE-2026-5236Axiomatic Bento4 DSI v1 Ap4Dac4Atom.cpp SkipBits heap-based overflowAxiomatic Bento4
- CVE-2026-2480WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max_width' Shortcode…gn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2026-34556iccDEV: HBO in icAnsiToUtf8()InternationalColorConsortium iccDEV
- CVE-2026-34555iccDEV: SBO in CIccTagFixedNum::GetValues()InternationalColorConsortium iccDEV
- CVE-2026-34554iccDEV: HBO in CIccApplyCmmSearch::costFunc()InternationalColorConsortium iccDEV
- CVE-2026-34553iccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe()InternationalColorConsortium iccDEV
- CVE-2026-34552iccDEV: UB at IccTagLut.cppInternationalColorConsortium iccDEV
- CVE-2026-5235Axiomatic Bento4 MP4 File Ap4Dac4Atom.cpp ReadCache heap-based overflowAxiomatic Bento4
- CVE-2026-34551iccDEV: NPD in CIccTagLut16::Write()InternationalColorConsortium iccDEV
- CVE-2026-34550iccDEV: UB at IccIO.cppInternationalColorConsortium iccDEV
- CVE-2026-34549iccDEV: UB at IccUtil.cppInternationalColorConsortium iccDEV
- CVE-2026-34548iccDEV: UB at IccUtilXml.cppInternationalColorConsortium iccDEV
- CVE-2026-34547iccDEV: UB at IccUtil.cppInternationalColorConsortium iccDEV
- CVE-2026-34546iccDEV: UB at TiffImg.hInternationalColorConsortium iccDEV
- CVE-2026-34542iccDEV: SBO in CIccCalculatorFunc::Apply()InternationalColorConsortium iccDEV
- CVE-2026-34541iccDEV: UB in CIccCombinedConnectionConditions::CIccCombinedConnectionConditions()InternationalColorConsortium iccDEV
- CVE-2026-34540iccDEV: HBO in icMemDump()InternationalColorConsortium iccDEV
- CVE-2026-34539iccDEV: HBO in CTiffImg::WriteLine()InternationalColorConsortium iccDEV
- CVE-2026-34537iccDEV: UB in CIccOpDefEnvVar::Exec()InternationalColorConsortium iccDEV
- CVE-2026-34536iccDEV: SO in SIccCalcOp::ArgsUsed()InternationalColorConsortium iccDEV
- CVE-2026-34535iccDEV: SEGV in CIccTagArray::Cleanup()InternationalColorConsortium iccDEV
Show all 157 entriesShow fewer entries
- CVE-2026-34534iccDEV: HBO in CIccMpeSpectralMatrix::Describe()InternationalColorConsortium iccDEV
- CVE-2026-34533iccDEV: UB in CIccCalculatorFunc::ApplySequence()InternationalColorConsortium iccDEV
- CVE-2026-34451Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directoriesanthropics anthropic-sdk-typescript · @anthropic-ai/sdk
- CVE-2026-34450Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Toolanthropics anthropic-sdk-python · anthropic
- CVE-2026-34452Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escapeanthropics anthropic-sdk-python · anthropic
- CVE-2026-34442FreeScout: Host Header Injection Leading to External Resource Loading and Open Redirect in FreeScoutfreescout-help-desk freescout
- CVE-2026-34443FreeScout: SSRF protection bypass via broken CIDR check in checkIpByMask()freescout-help-desk freescout
- CVE-2026-34441cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Bodyyhirose cpp-httplib
- CVE-2026-34405Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributesnuxt-modules og-image · nuxt-og-image
- CVE-2026-34404Nuxt OG Image vulnerable to DoS via image generationnuxt-modules og-image · nuxt-og-image
- CVE-2026-5215D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access controlD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2026-34401XML Notepad: XML External Entity (XXE) Injection via Unsafe XmlTextReader in XML Diff and Schema Loadingmicrosoft XmlNotepad
- CVE-2026-34400alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) APIalerta · alerta-server
- CVE-2026-34740AVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL() ValidationWWBN AVideo · wwbn/avideo
- CVE-2026-34739AVideo: Reflected XSS via Unescaped ip Parameter in User_Location testIP.phpWWBN AVideo · wwbn/avideo
- CVE-2026-34738AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request ParameterWWBN AVideo · wwbn/avideo
- CVE-2026-34737AVideo: Arbitrary Stripe Subscription Cancellation via Debug Endpoint and retrieveSubscriptions() BugWWBN AVideo · wwbn/avideo
- CVE-2026-34733AVideo: Unauthenticated File Deletion via PHP Operator Precedence Bug in CLI GuardWWBN AVideo · wwbn/avideo
- CVE-2026-34732AVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 EndpointsWWBN AVideo · wwbn/avideo
- CVE-2026-34716AVideo: DOM XSS via Unsanitized Display Name in WebSocket Call NotificationWWBN AVideo · wwbn/avideo
- CVE-2026-34613AVideo: CSRF on Plugin Enable/Disable Endpoint Allows Disabling Security PluginsWWBN AVideo · wwbn/avideo
- CVE-2026-34611AVideo: CSRF on emailAllUsers.json.php Enables Mass Phishing Email to All UsersWWBN AVideo · wwbn/avideo
- CVE-2026-34396AVideo: Stored XSS via Unescaped Plugin Configuration Values in Admin PanelWWBN AVideo · wwbn/avideo
- CVE-2026-34395AVideo: Mass User PII Disclosure via Missing Authorization in YPTWallet users.json.phpWWBN AVideo · wwbn/avideo
- CVE-2026-34384Admidio: Missing CSRF Protection on Registration Approval Actionsadmidio · admidio/admidio
- CVE-2026-34383Admidio: CSRF and Form Validation Bypass in Inventory Item Save via `imported` Parameteradmidio · admidio/admidio
- CVE-2026-34382Admidio: Missing CSRF Protection on Custom List Deletion in mylist_function.phpadmidio · admidio/admidio
- CVE-2026-34586PdfDing: Shared PDF Expiration, Max Views, and Deletion Bypass via Serve/Download Endpointsmrmn2 PdfDing
- CVE-2026-3470A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption…SonicWall Email Security
- CVE-2026-34372Sulu checks fix permissions for subentities endpointssulu · sulu/sulu
- CVE-2026-3469A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a…SonicWall Email Security
- CVE-2026-3468A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper…SonicWall Email Security
- CVE-2026-34206Captcha Protect: Reflected XSS in challenge page via unsanitized destination rendered with text/templatelibops captcha-protect
- CVE-2026-34203Nautobot: Management of users via REST API does not apply configured password validatorsnautobot
- CVE-2026-2950lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`lodash · lodash-es +3
- CVE-2026-5210SourceCodester Leave Application System file inclusionSourceCodester Leave Application System
- CVE-2026-5209SourceCodester Leave Application System User Management cross site scriptingSourceCodester Leave Application System
- CVE-2025-62184Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.Pegasystems Pega Infinity
- CVE-2026-33415Discourse: Improper Access Control in discourse-ai Allows Unauthorized Category Content Exposurediscourse
- CVE-2026-33300Discourse: Hidden group names and access metadata are exposed to moderators through the `category-chatables` endpointdiscourse
- CVE-2026-33185Discourse: Group SMTP test endpoint susceptible to SSRFdiscourse
- CVE-2026-33074Discourse: Vulnerability in discourse-subscriptions plugin allowing users to self-grant to higher tier subscriptionsdiscourse
- CVE-2026-32951Discourse: Authorization bypass in oneboxer via user-controlled category iddiscourse
- CVE-2026-32620Discourse: Missing post-level authorization allows whisper metadata disclosurediscourse
- CVE-2026-32619Discourse: Insufficient topic visibility check allows unauthorized poll manipulation in private categoriesdiscourse
- CVE-2026-32618Discourse: Unauthorized channel membership inference via excluded_memberships_channel_iddiscourse
- CVE-2026-32615Discourse: Category group moderators can perform actions on topics in restricted categories without read accessdiscourse
- CVE-2026-32607Discourse: Stored XSS via unescaped assignee namediscourse
- CVE-2026-32273Discourse: XSS on category description update via APIdiscourse
- CVE-2026-32243Discourse: Stored XSS in discourse-ai shared conversations oneboxdiscourse
- CVE-2026-32113Discourse: Open redirect via `sso_destination_url` cookie in `enter`discourse
- CVE-2026-32143Discourse: Admin-only report can be exported by moderatorsdiscourse
- CVE-2026-33073discourse-subscriptions plugin leaking stripe API key in multisite environmentdiscourse
- CVE-2026-5206code-projects Simple Gym Management System Payment sql injectioncode-projects Simple Gym Management System
- CVE-2026-34360HAPI FHIR: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probinghapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fhir.…
- CVE-2026-5205chatwoot Webhook API trigger.rb Trigger server-side request forgerychatwoot
- CVE-2026-24153NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled.NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson…
- CVE-2026-5203CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversalCMS Made Simple
- CVE-2026-34237MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)modelcontextprotocol java-sdk · io.modelcontextprotocol.sdk…
- CVE-2026-34235PJSIP: Heap OOB read in VPX unpacketizerpjsip pjproject
- CVE-2026-34231Slippers: Cross-Site Scripting (XSS) in `attrs` Template Tagmixxorz slippers · slippers
- CVE-2026-22561Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local…Anthropic Claude Desktop - Windows
- CVE-2026-34227Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP InterfaceBishopFox sliver · github.com/bishopfox/sliver
- CVE-2026-34218ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modificationcraigjbass clearancekit
- CVE-2026-34595Parse Server: LiveQuery protected-field guard bypass via array-like logical operator valueparse-community parse-server · parse-server
- CVE-2026-34574Parse Server: Session field immutability bypass via falsy-value guardparse-community parse-server · parse-server
- CVE-2026-4819Search Guard audit logs can contain under certain conditions user credentialsfloragunn Search Guard FLX
- CVE-2026-22569Incorrect startup configuration in ZCCZscaler Client Connector
- CVE-2026-4818Some management operations on data streams are not properly restricted when user does not have the necessary privilegesfloragunn Search Guard FLX
- CVE-2026-4799Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requestsfloragunn Search Guard FLX
- CVE-2026-34373Parse Server: GraphQL API endpoint ignores CORS origin restrictionparse-community parse-server · parse-server
- CVE-2026-34224Parse Server: MFA single-use token bypass via concurrent authData login requestsparse-community parse-server · parse-server
- CVE-2026-34504OpenClaw < 2026.3.28 - Server-Side Request Forgery via Unguarded Image Download in fal ProviderOpenClaw
- CVE-2026-33580OpenClaw < 2026.3.28 - Brute Force Attack via Missing Rate Limiting on Webhook Shared Secret AuthenticationOpenClaw
- CVE-2026-33578OpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser ExtensionsOpenClaw
- CVE-2026-33576OpenClaw < 2026.3.28 - Unauthorized Media Download via Zalo ChannelOpenClaw
- CVE-2026-34210mppx has Stripe charge credential replay via missing idempotency checkwevm mppx · mppx
- CVE-2026-33762go-git: Missing validation decoding Index v4 files leads to panicgo-git · github.com/go-git/go-git/v5 +2
- CVE-2026-34165go-git: Maliciously crafted idx file can cause asymmetric memory consumptiongo-git · github.com/go-git/go-git +2
- CVE-2026-27854Use after free when parsing EDNS options in LuaPowerDNS DNSdist
- CVE-2026-27853Out-of-bounds write when rewriting large DNS packetsPowerDNS DNSdist
- CVE-2026-24030Unbounded memory allocation for DoQ and DoH3PowerDNS DNSdist
- CVE-2026-24029DNS over HTTPS ACL bypassPowerDNS DNSdist
- CVE-2026-24028Out-of-bounds read when parsing DNS packets via LuaPowerDNS DNSdist
- CVE-2026-0397Information disclosure via CORS misconfigurationPowerDNS DNSdist
- CVE-2026-0396HTML injection in the web dashboardPowerDNS DNSdist
- CVE-2026-3191Minify HTML <= 2.1.12 - Cross-Site Request Forgery to Plugin Settings Updateteckel Minify HTML
- CVE-2026-3139User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to…cozmoslabs User Profile Builder – Beautiful User Registrati…
- CVE-2026-34506OpenClaw < 2026.3.8 - Sender Allowlist Bypass in Microsoft Teams Plugin via Route Allowlist ConfigurationOpenClaw
- CVE-2026-34505OpenClaw < 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret ValidationOpenClaw
- CVE-2026-32988OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File CreationOpenClaw
- CVE-2026-32977OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit PathOpenClaw
- CVE-2026-32970OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefsOpenClaw
- CVE-2026-32921OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.runOpenClaw
- CVE-2026-5198code-projects Student Membership System Admin Login index.php sql injectioncode-projects Student Membership System
- CVE-2026-34887WordPress Kubio AI Page Builder plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerabilityExtend Themes Kubio AI Page Builder
- CVE-2026-5197code-projects Student Membership System delete_user.php sql injectioncode-projects Student Membership System
- CVE-2026-5196code-projects Student Membership System delete_member.php sql injectioncode-projects Student Membership System
- CVE-2025-41357Reflected Cross-Site Scripting on Anon Proxy ServerAnon Proxy Server
- CVE-2025-41356Reflected Cross-Site Scripting in Anon Proxy ServerAnon Proxy Server
- CVE-2025-41355Reflected Cross-Site Scripting on Anon Proxy ServerAnon Proxy Server
- CVE-2026-5195code-projects Student Membership System User Registration sql injectioncode-projects Student Membership System
- CVE-2026-5186Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double freeNothings stb
- CVE-2026-5185Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflowNothings stb_image
- CVE-2026-5184TRENDnet TEW-713RE setSysAdm command injectionTRENDnet TEW-713RE
- CVE-2026-3881Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRFPerformance Monitor
- CVE-2026-5183TRENDnet TEW-713RE addRouting sub_421494 command injectionTRENDnet TEW-713RE
- CVE-2026-5182SourceCodester Teacher Record System Parameter sql injectionSourceCodester Teacher Record System
- CVE-2026-34881OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF).OpenStack Glance · glance
- CVE-2026-1877Auto Post Scheduler <= 1.84 - Cross-Site Request Forgery to Stored Cross-Site Scripting via aps_options_pagejohnh10 Auto Post Scheduler
- CVE-2026-1834Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodevowelweb Ibtana – WordPress Website Builder
- CVE-2026-5181SourceCodester Simple Doctors Appointment System ajax.php unrestricted uploadSourceCodester Simple Doctors Appointment System
- CVE-2026-4146Loco Translate <= 2.8.2 - Reflected Cross-Site Scripting via 'update_href' Parametertimwhitlock Loco Translate
- CVE-2026-1710WooPayments <= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save_upe_appearance_ajaxWooPayments: Integrated WooCommerce Payments
- CVE-2026-1797Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Filesthemetechmount TrueBooker – Appointment Booking and Schedul…
- CVE-2026-5180SourceCodester Simple Doctors Appointment System ajax.php sql injectionSourceCodester Simple Doctors Appointment System
- CVE-2026-5179SourceCodester Simple Doctors Appointment System login.php sql injectionSourceCodester Simple Doctors Appointment System
- CVE-2026-5178Totolink A3300R cstecgi.cgi setIptvCfg command injectionTotolink A3300R
- CVE-2026-34073cryptography has incomplete DNS name constraint enforcement on peer namespyca cryptography · cryptography
- CVE-2026-5177Totolink A3300R cstecgi.cgi setWiFiBasicCfg command injectionTotolink A3300R
- CVE-2026-34043Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objectsyahoo serialize-javascript · serialize-javascript
- CVE-2026-34036Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.phpdolibarr · dolibarr/dolibarr
- CVE-2026-33997Moby: Off-by-one error in plugin privilege validationmoby · github.com/docker/docker +2
- CVE-2026-5176Totolink A3300R cstecgi.cgi setSyslogCfg command injectionTotolink A3300R
- CVE-2026-5115Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devicesPapercut NG/MF
- CVE-2026-30879baserCMS: Cross-site scripting vulnerability in blog postbaserproject basercms · baserproject/basercms
- CVE-2026-30878baserCMS: Mail Form Acceptance Bypass via Public APIbaserproject basercms · baserproject/basercms
- CVE-2026-27697baserCMS: SQL injection vulnerability in blog postbaserproject basercms · baserproject/basercms
- CVE-2026-4794Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MFPaperCut NG/MF
- CVE-2026-30280An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to…
- CVE-2026-30520A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0.
- CVE-2026-30521A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation.