# CVEs published 2026-03-31

271 CVEs were published on March 31, 2026: 36 critical, 78 high. Days are UTC.

- [CVE-2026-5240](https://cve.now/CVE-2026-5240.md): code-projects BloodBank Managing System admin\_state.php cross site scripting (CVSS 5.3, code-projects BloodBank Managing System)
- [CVE-2026-5238](https://cve.now/CVE-2026-5238.md): itsourcecode Payroll Management System Parameter view\_employee.php sql injection (CVSS 6.9, itsourcecode Payroll Management System)
- [CVE-2026-4668](https://cve.now/CVE-2026-4668.md): Amelia \<= 2.1.2 - Authenticated (Manager+) SQL Injection via 'sort' Parameter (CVSS 6.5, ameliabooking Booking for Appointments and Events Calendar…)
- [CVE-2026-5237](https://cve.now/CVE-2026-5237.md): itsourcecode Payroll Management System Parameter manage\_user.php sql injection (CVSS 6.9, itsourcecode Payroll Management System)
- [CVE-2026-5236](https://cve.now/CVE-2026-5236.md): Axiomatic Bento4 DSI v1 Ap4Dac4Atom.cpp SkipBits heap-based overflow (CVSS 4.8, Axiomatic Bento4)
- [CVE-2026-2480](https://cve.now/CVE-2026-2480.md): WP Shortcodes Plugin — Shortcodes Ultimate \<= 7.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max\_width' Shortcode… (CVSS 6.4, gn\_themes WP Shortcodes Plugin — Shortcodes Ultimate)
- [CVE-2026-34556](https://cve.now/CVE-2026-34556.md): iccDEV: HBO in icAnsiToUtf8() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34555](https://cve.now/CVE-2026-34555.md): iccDEV: SBO in CIccTagFixedNum::GetValues() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34554](https://cve.now/CVE-2026-34554.md): iccDEV: HBO in CIccApplyCmmSearch::costFunc() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34553](https://cve.now/CVE-2026-34553.md): iccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe() (CVSS 4.0, InternationalColorConsortium iccDEV)
- [CVE-2026-34552](https://cve.now/CVE-2026-34552.md): iccDEV: UB at IccTagLut.cpp (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-5235](https://cve.now/CVE-2026-5235.md): Axiomatic Bento4 MP4 File Ap4Dac4Atom.cpp ReadCache heap-based overflow (CVSS 4.8, Axiomatic Bento4)
- [CVE-2026-34551](https://cve.now/CVE-2026-34551.md): iccDEV: NPD in CIccTagLut16::Write() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34550](https://cve.now/CVE-2026-34550.md): iccDEV: UB at IccIO.cpp (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34549](https://cve.now/CVE-2026-34549.md): iccDEV: UB at IccUtil.cpp (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34548](https://cve.now/CVE-2026-34548.md): iccDEV: UB at IccUtilXml.cpp (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34547](https://cve.now/CVE-2026-34547.md): iccDEV: UB at IccUtil.cpp (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34546](https://cve.now/CVE-2026-34546.md): iccDEV: UB at TiffImg.h (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34542](https://cve.now/CVE-2026-34542.md): iccDEV: SBO in CIccCalculatorFunc::Apply() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34541](https://cve.now/CVE-2026-34541.md): iccDEV: UB in CIccCombinedConnectionConditions::CIccCombinedConnectionConditions() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34540](https://cve.now/CVE-2026-34540.md): iccDEV: HBO in icMemDump() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34539](https://cve.now/CVE-2026-34539.md): iccDEV: HBO in CTiffImg::WriteLine() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34537](https://cve.now/CVE-2026-34537.md): iccDEV: UB in CIccOpDefEnvVar::Exec() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34536](https://cve.now/CVE-2026-34536.md): iccDEV: SO in SIccCalcOp::ArgsUsed() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34535](https://cve.now/CVE-2026-34535.md): iccDEV: SEGV in CIccTagArray::Cleanup() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34534](https://cve.now/CVE-2026-34534.md): iccDEV: HBO in CIccMpeSpectralMatrix::Describe() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34533](https://cve.now/CVE-2026-34533.md): iccDEV: UB in CIccCalculatorFunc::ApplySequence() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34605](https://cve.now/CVE-2026-34605.md): SiYuan: Reflected XSS via SVG namespace prefix bypass in SanitizeSVG ( getDynamicIcon, unauthenticated ) (CVSS 8.6, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-34585](https://cve.now/CVE-2026-34585.md): SiYuan: Stored XSS in imported .sy.zip content leads to arbitrary command execution (CVSS 8.6, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-34449](https://cve.now/CVE-2026-34449.md): SiYuan: Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injection (CVSS 9.7, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-34448](https://cve.now/CVE-2026-34448.md): SiYuan: Stored XSS in Attribute View gallery/kanban cover rendering allows arbitrary command execution in the desktop client (CVSS 9.1, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-34453](https://cve.now/CVE-2026-34453.md): SiYuan: Broken access control in /api/bookmark/getBookmark allows unauthenticated publish visitors to read password-protected bookmarked… (CVSS 7.5, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-34451](https://cve.now/CVE-2026-34451.md): Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories (CVSS 6.3, anthropics anthropic-sdk-typescript · @anthropic-ai/sdk)
- [CVE-2026-34450](https://cve.now/CVE-2026-34450.md): Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool (CVSS 4.8, anthropics anthropic-sdk-python · anthropic)
- [CVE-2026-34452](https://cve.now/CVE-2026-34452.md): Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape (CVSS 5.8, anthropics anthropic-sdk-python · anthropic)
- [CVE-2026-34442](https://cve.now/CVE-2026-34442.md): FreeScout: Host Header Injection Leading to External Resource Loading and Open Redirect in FreeScout (CVSS 5.4, freescout-help-desk freescout)
- [CVE-2026-34443](https://cve.now/CVE-2026-34443.md): FreeScout: SSRF protection bypass via broken CIDR check in checkIpByMask() (CVSS 6.9, freescout-help-desk freescout)
- [CVE-2026-34441](https://cve.now/CVE-2026-34441.md): cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body (CVSS 4.8, yhirose cpp-httplib)
- [CVE-2026-34406](https://cve.now/CVE-2026-34406.md): APTRS: Privilege Escalation via Mass Assignment of is\_superuser in User Edit Endpoint (CVSS 9.4, APTRS)
- [CVE-2026-34405](https://cve.now/CVE-2026-34405.md): Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes (CVSS 6.1, nuxt-modules og-image · nuxt-og-image)
- [CVE-2026-34404](https://cve.now/CVE-2026-34404.md): Nuxt OG Image vulnerable to DoS via image generation (CVSS 6.9, nuxt-modules og-image · nuxt-og-image)
- [CVE-2026-5215](https://cve.now/CVE-2026-5215.md): D-Link DNS-1550-04 network\_mgr.cgi cgi\_get\_ipv6 access control (CVSS 5.3, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-5214](https://cve.now/CVE-2026-5214.md): D-Link DNS-1550-04 account\_mgr.cgi cgi\_addgroup\_get\_group\_quota\_minsize stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-34401](https://cve.now/CVE-2026-34401.md): XML Notepad: XML External Entity (XXE) Injection via Unsafe XmlTextReader in XML Diff and Schema Loading (CVSS 6.5, microsoft XmlNotepad)
- [CVE-2026-34400](https://cve.now/CVE-2026-34400.md): alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API (CVSS 6.9, alerta · alerta-server)
- [CVE-2026-34740](https://cve.now/CVE-2026-34740.md): AVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL() Validation (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34739](https://cve.now/CVE-2026-34739.md): AVideo: Reflected XSS via Unescaped ip Parameter in User\_Location testIP.php (CVSS 6.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34738](https://cve.now/CVE-2026-34738.md): AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request Parameter (CVSS 4.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34737](https://cve.now/CVE-2026-34737.md): AVideo: Arbitrary Stripe Subscription Cancellation via Debug Endpoint and retrieveSubscriptions() Bug (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34733](https://cve.now/CVE-2026-34733.md): AVideo: Unauthenticated File Deletion via PHP Operator Precedence Bug in CLI Guard (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34732](https://cve.now/CVE-2026-34732.md): AVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 Endpoints (CVSS 5.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34731](https://cve.now/CVE-2026-34731.md): AVideo: Unauthenticated Live Stream Termination via RTMP Callback on\_publish\_done.php (CVSS 7.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34716](https://cve.now/CVE-2026-34716.md): AVideo: DOM XSS via Unsanitized Display Name in WebSocket Call Notification (CVSS 6.4, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34613](https://cve.now/CVE-2026-34613.md): AVideo: CSRF on Plugin Enable/Disable Endpoint Allows Disabling Security Plugins (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34611](https://cve.now/CVE-2026-34611.md): AVideo: CSRF on emailAllUsers.json.php Enables Mass Phishing Email to All Users (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34396](https://cve.now/CVE-2026-34396.md): AVideo: Stored XSS via Unescaped Plugin Configuration Values in Admin Panel (CVSS 6.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34394](https://cve.now/CVE-2026-34394.md): AVideo: CSRF on Admin Plugin Configuration Enables Payment Credential Hijacking (CVSS 8.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34395](https://cve.now/CVE-2026-34395.md): AVideo: Mass User PII Disclosure via Missing Authorization in YPTWallet users.json.php (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34384](https://cve.now/CVE-2026-34384.md): Admidio: Missing CSRF Protection on Registration Approval Actions (CVSS 4.5, admidio · admidio/admidio)
- [CVE-2026-34383](https://cve.now/CVE-2026-34383.md): Admidio: CSRF and Form Validation Bypass in Inventory Item Save via \`imported\` Parameter (CVSS 4.3, admidio · admidio/admidio)
- [CVE-2026-34382](https://cve.now/CVE-2026-34382.md): Admidio: Missing CSRF Protection on Custom List Deletion in mylist\_function.php (CVSS 4.6, admidio · admidio/admidio)
- [CVE-2026-34381](https://cve.now/CVE-2026-34381.md): Admidio: Unauthenticated Access to Role-Restricted documents via neutralized .htaccess (CVSS 7.5, admidio · admidio/admidio)
- [CVE-2026-34586](https://cve.now/CVE-2026-34586.md): PdfDing: Shared PDF Expiration, Max Views, and Deletion Bypass via Serve/Download Endpoints (CVSS 6.5, mrmn2 PdfDing)
- [CVE-2026-1579](https://cve.now/CVE-2026-1579.md): PX4 Autopilot Missing authentication for critical function (CVSS 9.3, PX4 Autopilot)
- [CVE-2026-3470](https://cve.now/CVE-2026-3470.md): A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption… (CVSS 3.8, SonicWall Email Security)
- [CVE-2026-34372](https://cve.now/CVE-2026-34372.md): Sulu checks fix permissions for subentities endpoints (CVSS 5.3, sulu · sulu/sulu)
- [CVE-2026-3469](https://cve.now/CVE-2026-3469.md): A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a… (CVSS 2.7, SonicWall Email Security)
- [CVE-2026-3468](https://cve.now/CVE-2026-3468.md): A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper… (CVSS 4.8, SonicWall Email Security)
- [CVE-2026-34367](https://cve.now/CVE-2026-34367.md): InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Field (CVSS 7.6, InvoiceShelf)
- [CVE-2026-5213](https://cve.now/CVE-2026-5213.md): D-Link DNS-1550-04 account\_mgr.cgi cgi\_adduser\_to\_session stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-5212](https://cve.now/CVE-2026-5212.md): D-Link DNS-1550-04 webdav\_mgr.cgi Webdav\_Upload\_File stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-34366](https://cve.now/CVE-2026-34366.md): InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes Field (CVSS 7.6, InvoiceShelf)
- [CVE-2026-34365](https://cve.now/CVE-2026-34365.md): InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes Field (CVSS 7.6, InvoiceShelf)
- [CVE-2026-34784](https://cve.now/CVE-2026-34784.md): Parse Server: Streaming file download bypasses afterFind file trigger authorization (CVSS 8.2, parse-community parse-server · parse-server)
- [CVE-2026-34215](https://cve.now/CVE-2026-34215.md): Parse Server: Auth data exposed via verify password endpoint (CVSS 8.2, parse-community parse-server · parse-server)
- [CVE-2026-34206](https://cve.now/CVE-2026-34206.md): Captcha Protect: Reflected XSS in challenge page via unsanitized destination rendered with text/template (CVSS 6.1, libops captcha-protect)
- [CVE-2026-34204](https://cve.now/CVE-2026-34204.md): MinIO is Vulnerable to SSE Metadata Injection via Replication Headers (CVSS 7.1, minio · github.com/minio/minio)
- [CVE-2026-5211](https://cve.now/CVE-2026-5211.md): D-Link DNS-1550-04 app\_mgr.cgi UPnP\_AV\_Server\_Path\_Del stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-34203](https://cve.now/CVE-2026-34203.md): Nautobot: Management of users via REST API does not apply configured password validators (CVSS 2.7, nautobot)
- [CVE-2026-4800](https://cve.now/CVE-2026-4800.md): lodash vulnerable to Code Injection via \`\_.template\` imports key names (CVSS 8.1, lodash · lodash-es +2)
- [CVE-2026-2950](https://cve.now/CVE-2026-2950.md): lodash vulnerable to Prototype Pollution via array path bypass in \`\_.unset\` and \`\_.omit\` (CVSS 6.5, lodash · lodash-es +3)
- [CVE-2026-3356](https://cve.now/CVE-2026-3356.md): Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor (CVSS 9.3, Anritsu Remote Spectrum Monitor MS27100A · Anritsu Remot… +2)
- [CVE-2026-5210](https://cve.now/CVE-2026-5210.md): SourceCodester Leave Application System file inclusion (CVSS 6.9, SourceCodester Leave Application System)
- [CVE-2026-5209](https://cve.now/CVE-2026-5209.md): SourceCodester Leave Application System User Management cross site scripting (CVSS 4.8, SourceCodester Leave Application System)
- [CVE-2025-62184](https://cve.now/CVE-2025-62184.md): Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. (CVSS 4.8, Pegasystems Pega Infinity)
- [CVE-2026-33415](https://cve.now/CVE-2026-33415.md): Discourse: Improper Access Control in discourse-ai Allows Unauthorized Category Content Exposure (CVSS 5.1, discourse)
- [CVE-2026-33300](https://cve.now/CVE-2026-33300.md): Discourse: Hidden group names and access metadata are exposed to moderators through the \`category-chatables\` endpoint (CVSS 5.3, discourse)
- [CVE-2026-33185](https://cve.now/CVE-2026-33185.md): Discourse: Group SMTP test endpoint susceptible to SSRF (CVSS 5.3, discourse)
- [CVE-2026-33074](https://cve.now/CVE-2026-33074.md): Discourse: Vulnerability in discourse-subscriptions plugin allowing users to self-grant to higher tier subscriptions (CVSS 6.3, discourse)
- [CVE-2026-32951](https://cve.now/CVE-2026-32951.md): Discourse: Authorization bypass in oneboxer via user-controlled category id (CVSS 4.3, discourse)
- [CVE-2026-32620](https://cve.now/CVE-2026-32620.md): Discourse: Missing post-level authorization allows whisper metadata disclosure (CVSS 5.3, discourse)
- [CVE-2026-32619](https://cve.now/CVE-2026-32619.md): Discourse: Insufficient topic visibility check allows unauthorized poll manipulation in private categories (CVSS 6.3, discourse)
- [CVE-2026-32618](https://cve.now/CVE-2026-32618.md): Discourse: Unauthorized channel membership inference via excluded\_memberships\_channel\_id (CVSS 4.3, discourse)
- [CVE-2026-32615](https://cve.now/CVE-2026-32615.md): Discourse: Category group moderators can perform actions on topics in restricted categories without read access (CVSS 5.3, discourse)
- [CVE-2026-32607](https://cve.now/CVE-2026-32607.md): Discourse: Stored XSS via unescaped assignee name (CVSS 2.1, discourse)
- [CVE-2026-32273](https://cve.now/CVE-2026-32273.md): Discourse: XSS on category description update via API (CVSS 5.4, discourse)
- [CVE-2026-32243](https://cve.now/CVE-2026-32243.md): Discourse: Stored XSS in discourse-ai shared conversations onebox (CVSS 5.3, discourse)
- [CVE-2026-32113](https://cve.now/CVE-2026-32113.md): Discourse: Open redirect via \`sso\_destination\_url\` cookie in \`enter\` (CVSS 5.1, discourse)
- [CVE-2026-32143](https://cve.now/CVE-2026-32143.md): Discourse: Admin-only report can be exported by moderators (CVSS 5.3, discourse)
- [CVE-2026-33073](https://cve.now/CVE-2026-33073.md): discourse-subscriptions plugin leaking stripe API key in multisite environment (CVSS 2.0, discourse)
- [CVE-2026-5206](https://cve.now/CVE-2026-5206.md): code-projects Simple Gym Management System Payment sql injection (CVSS 5.3, code-projects Simple Gym Management System)
- [CVE-2026-2123](https://cve.now/CVE-2026-2123.md): Privilege escalation vulnerability in Operations Agent (CVSS 8.6, OpenText Operations Agent)
- [CVE-2026-5190](https://cve.now/CVE-2026-5190.md): AWS C Event Stream Streaming Decoder Stack Buffer Overflow (CVSS 7.5, aws-c-event-stream)
- [CVE-2026-32725](https://cve.now/CVE-2026-32725.md): SciTokens C++: Relative Path Traversal Vulnerability (CVSS 8.3, scitokens-cpp)
- [CVE-2026-32726](https://cve.now/CVE-2026-32726.md): SciTokens C++: Sibling-Path Authorization Bypass (CVSS 8.1, scitokens-cpp)
- [CVE-2026-34361](https://cve.now/CVE-2026-34361.md): HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft (CVSS 9.3, hapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fhir.…)
- [CVE-2026-34360](https://cve.now/CVE-2026-34360.md): HAPI FHIR: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probing (CVSS 5.8, hapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fhir.…)
- [CVE-2026-34359](https://cve.now/CVE-2026-34359.md): HAPI FHIR: Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect in HAPI FHIR Core (CVSS 7.4, hapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +1)
- [CVE-2026-5205](https://cve.now/CVE-2026-5205.md): chatwoot Webhook API trigger.rb Trigger server-side request forgery (CVSS 5.3, chatwoot)
- [CVE-2026-24165](https://cve.now/CVE-2026-24165.md): NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA BioNeMo Framework)
- [CVE-2026-24164](https://cve.now/CVE-2026-24164.md): NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. (CVSS 8.8, NVIDIA BioNeMo Framework)
- [CVE-2026-24154](https://cve.now/CVE-2026-24154.md): NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line… (CVSS 7.6, NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson…)
- [CVE-2026-24153](https://cve.now/CVE-2026-24153.md): NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. (CVSS 5.2, NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson…)
- [CVE-2026-24148](https://cve.now/CVE-2026-24148.md): NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the… (CVSS 8.3, NVIDIA Jetson Xavier Series and Jetson Orin Series)
- [CVE-2026-5087](https://cve.now/CVE-2026-5087.md): PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely (CVSS 7.5, JJNAPIORK PAGI::Middleware::Session::Store::Cookie)
- [CVE-2026-34243](https://cve.now/CVE-2026-34243.md): wenxian: Command Injection in GitHub Actions Workflow via \`issue\_comment.body\` (CVSS 9.8, njzjz wenxian)
- [CVE-2026-34219](https://cve.now/CVE-2026-34219.md): libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow (CVSS 8.2, rust-libp2p · libp2p-gossipsub)
- [CVE-2026-5204](https://cve.now/CVE-2026-5204.md): Tenda CH22 Parameter webtypelibrary formWebTypeLibrary stack-based overflow (CVSS 8.7, Tenda CH22)
- [CVE-2026-5203](https://cve.now/CVE-2026-5203.md): CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php \_copyFilesToFolder path traversal (CVSS 5.1, CMS Made Simple)
- [CVE-2026-34240](https://cve.now/CVE-2026-34240.md): jose vulnerable to untrusted JWK header key acceptance during signature verification (CVSS 7.5, appsup-dart jose)
- [CVE-2026-34237](https://cve.now/CVE-2026-34237.md): MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: \*) (CVSS 6.1, modelcontextprotocol java-sdk · io.modelcontextprotocol.sdk…)
- [CVE-2026-34235](https://cve.now/CVE-2026-34235.md): PJSIP: Heap OOB read in VPX unpacketizer (CVSS 6.9, pjsip pjproject)
- [CVE-2026-34231](https://cve.now/CVE-2026-34231.md): Slippers: Cross-Site Scripting (XSS) in \`attrs\` Template Tag (CVSS 6.1, mixxorz slippers · slippers)
- [CVE-2026-22561](https://cve.now/CVE-2026-22561.md): Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local… (CVSS 4.7, Anthropic Claude Desktop - Windows)
- [CVE-2026-34227](https://cve.now/CVE-2026-34227.md): Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface (CVSS 5.9, BishopFox sliver · github.com/bishopfox/sliver)
- [CVE-2026-34220](https://cve.now/CVE-2026-34220.md): MikroORM is vulnerable to SQL Injection via specially crafted object (CVSS 9.3, mikro-orm · @mikro-orm/core)
- [CVE-2026-34221](https://cve.now/CVE-2026-34221.md): MikroORM has Prototype Pollution in Utils.merge (CVSS 8.3, mikro-orm · @mikro-orm/core)
- [CVE-2026-34218](https://cve.now/CVE-2026-34218.md): ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification (CVSS 6.3, craigjbass clearancekit)
- [CVE-2026-34595](https://cve.now/CVE-2026-34595.md): Parse Server: LiveQuery protected-field guard bypass via array-like logical operator value (CVSS 5.3, parse-community parse-server · parse-server)
- [CVE-2026-34574](https://cve.now/CVE-2026-34574.md): Parse Server: Session field immutability bypass via falsy-value guard (CVSS 5.3, parse-community parse-server · parse-server)
- [CVE-2026-34573](https://cve.now/CVE-2026-34573.md): Parse Server: GraphQL complexity validator exponential fragment traversal DoS (CVSS 8.2, parse-community parse-server · parse-server)
- [CVE-2026-4819](https://cve.now/CVE-2026-4819.md): Search Guard audit logs can contain under certain conditions user credentials (CVSS 4.9, floragunn Search Guard FLX)
- [CVE-2026-22569](https://cve.now/CVE-2026-22569.md): Incorrect startup configuration in ZCC (CVSS 5.4, Zscaler Client Connector)
- [CVE-2026-4818](https://cve.now/CVE-2026-4818.md): Some management operations on data streams are not properly restricted when user does not have the necessary privileges (CVSS 6.8, floragunn Search Guard FLX)
- [CVE-2026-34532](https://cve.now/CVE-2026-34532.md): Parse Server: Cloud function validator bypass via prototype chain traversal (CVSS 9.1, parse-community parse-server · parse-server)
- [CVE-2026-4799](https://cve.now/CVE-2026-4799.md): Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests (CVSS 4.3, floragunn Search Guard FLX)
- [CVE-2026-34373](https://cve.now/CVE-2026-34373.md): Parse Server: GraphQL API endpoint ignores CORS origin restriction (CVSS 5.3, parse-community parse-server · parse-server)
- [CVE-2026-34363](https://cve.now/CVE-2026-34363.md): Parse Server: LiveQuery protected field leak via shared mutable state across concurrent subscribers (CVSS 8.2, parse-community parse-server · parse-server)
- [CVE-2026-0596](https://cve.now/CVE-2026-0596.md): Command Injection in mlflow/mlflow (CVSS 9.6, mlflow/mlflow · mlflow)
- [CVE-2026-34224](https://cve.now/CVE-2026-34224.md): Parse Server: MFA single-use token bypass via concurrent authData login requests (CVSS 2.1, parse-community parse-server · parse-server)
- [CVE-2026-34214](https://cve.now/CVE-2026-34214.md): Trino: Iceberg REST catalog static and vended credentials are accessible via query JSON (CVSS 7.7, trinodb trino · io.trino:trino-iceberg)
- [CVE-2026-34209](https://cve.now/CVE-2026-34209.md): mppx: Tempo has a session close voucher bypass vulnerability due to settled amount equality (CVSS 7.5, wevm mppx · mppx)
- [CVE-2026-34504](https://cve.now/CVE-2026-34504.md): OpenClaw \< 2026.3.28 - Server-Side Request Forgery via Unguarded Image Download in fal Provider (CVSS 6.9, OpenClaw)
- [CVE-2026-34503](https://cve.now/CVE-2026-34503.md): OpenClaw \< 2026.3.28 - Incomplete WebSocket Session Termination on Device Removal and Token Revocation (CVSS 8.6, OpenClaw)
- [CVE-2026-33581](https://cve.now/CVE-2026-33581.md): OpenClaw \< 2026.3.24 - Arbitrary File Read via mediaUrl and fileUrl Parameters (CVSS 7.1, OpenClaw)
- [CVE-2026-33580](https://cve.now/CVE-2026-33580.md): OpenClaw \< 2026.3.28 - Brute Force Attack via Missing Rate Limiting on Webhook Shared Secret Authentication (CVSS 6.3, OpenClaw)
- [CVE-2026-33579](https://cve.now/CVE-2026-33579.md): OpenClaw \< 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval (CVSS 9.4, OpenClaw)
- [CVE-2026-33578](https://cve.now/CVE-2026-33578.md): OpenClaw \< 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions (CVSS 5.3, OpenClaw)
- [CVE-2026-33577](https://cve.now/CVE-2026-33577.md): OpenClaw \< 2026.3.28 - Insufficient Scope Validation in node.pair.approve (CVSS 8.6, OpenClaw)
- [CVE-2026-33576](https://cve.now/CVE-2026-33576.md): OpenClaw \< 2026.3.28 - Unauthorized Media Download via Zalo Channel (CVSS 6.9, OpenClaw)
- [CVE-2026-34210](https://cve.now/CVE-2026-34210.md): mppx has Stripe charge credential replay via missing idempotency check (CVSS 6.0, wevm mppx · mppx)
- [CVE-2026-34377](https://cve.now/CVE-2026-34377.md): Zebra has a Consensus Failure due to Improper Verification of V5 Transactions (CVSS 8.4, ZcashFoundation zebra · ZcashFoundation zebra-consensus +2)
- [CVE-2026-34202](https://cve.now/CVE-2026-34202.md): Zebra node crash — V5 transaction hash panic (P2P reachable) (CVSS 9.2, ZcashFoundation zebra · ZcashFoundation zebra-chain +2)
- [CVE-2026-34200](https://cve.now/CVE-2026-34200.md): Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Port (CVSS 7.7, nhost)
- [CVE-2026-20915](https://cve.now/CVE-2026-20915.md): Stored cross-site scripting in Pending Changes sidebar (CVSS 8.5, Checkmk)
- [CVE-2026-34172](https://cve.now/CVE-2026-34172.md): Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment (CVSS 7.7, Giskard-AI giskard-oss · giskard-agents)
- [CVE-2026-33762](https://cve.now/CVE-2026-33762.md): go-git: Missing validation decoding Index v4 files leads to panic (CVSS 2.8, go-git · github.com/go-git/go-git/v5 +2)
- [CVE-2026-34165](https://cve.now/CVE-2026-34165.md): go-git: Maliciously crafted idx file can cause asymmetric memory consumption (CVSS 5.0, go-git · github.com/go-git/go-git +2)
- [CVE-2026-33276](https://cve.now/CVE-2026-33276.md): XSS in Unified Search via Unescaped Host/Service Names (CVSS 8.6, Checkmk)
- [CVE-2026-34162](https://cve.now/CVE-2026-34162.md): FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft (CVSS 10.0, labring FastGPT)
- [CVE-2026-34163](https://cve.now/CVE-2026-34163.md): Server-Side Request Forgery via MCP Tools Endpoint in FastGPT (CVSS 7.7, labring FastGPT)
- [CVE-2026-34156](https://cve.now/CVE-2026-34156.md): NocoBase Affected by Sandbox Escape to RCE via console.\_stdout Prototype Chain Traversal in Workflow Script Node (CVSS 10.0, nocobase · @nocobase/plugin-workflow-javascript)
- [CVE-2026-34155](https://cve.now/CVE-2026-34155.md): RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB (CVSS 7.2, rauc)
- [CVE-2026-3308](https://cve.now/CVE-2026-3308.md): CVE-2026-3308 (CVSS 7.8, Artifex Software Inc. \*PyMuPDF\* MuPDF)
- [CVE-2026-27854](https://cve.now/CVE-2026-27854.md): Use after free when parsing EDNS options in Lua (CVSS 4.8, PowerDNS DNSdist)
- [CVE-2026-27853](https://cve.now/CVE-2026-27853.md): Out-of-bounds write when rewriting large DNS packets (CVSS 5.9, PowerDNS DNSdist)
- [CVE-2026-24030](https://cve.now/CVE-2026-24030.md): Unbounded memory allocation for DoQ and DoH3 (CVSS 5.3, PowerDNS DNSdist)
- [CVE-2026-24029](https://cve.now/CVE-2026-24029.md): DNS over HTTPS ACL bypass (CVSS 6.5, PowerDNS DNSdist)
- [CVE-2026-24028](https://cve.now/CVE-2026-24028.md): Out-of-bounds read when parsing DNS packets via Lua (CVSS 5.3, PowerDNS DNSdist)
- [CVE-2026-0397](https://cve.now/CVE-2026-0397.md): Information disclosure via CORS misconfiguration (CVSS 3.1, PowerDNS DNSdist)
- [CVE-2026-0396](https://cve.now/CVE-2026-0396.md): HTML injection in the web dashboard (CVSS 3.1, PowerDNS DNSdist)
- [CVE-2025-14213](https://cve.now/CVE-2025-14213.md): Cato's Socket WebUI is vulnerable to OS Command Injection (CVSS 8.3, Cato Networks Socket)
- [CVE-2024-14031](https://cve.now/CVE-2024-14031.md): Sereal::Encoder versions from 4.000 through 4.009\_002 for Perl embeds a vulnerable version of the Zstandard library (CVSS 8.1, YVES Sereal::Encoder)
- [CVE-2024-14030](https://cve.now/CVE-2024-14030.md): Sereal::Decoder versions from 4.000 through 4.009\_002 for Perl embeds a vulnerable version of the Zstandard library (CVSS 8.1, YVES Sereal::Decoder)
- [CVE-2026-4267](https://cve.now/CVE-2026-4267.md): Query Monitor \<= 3.20.3 - Reflected Cross-Site Scripting via Request URI (CVSS 7.2, johnbillion Query Monitor · johnbillion/query-monitor)
- [CVE-2026-3191](https://cve.now/CVE-2026-3191.md): Minify HTML \<= 2.1.12 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 5.4, teckel Minify HTML)
- [CVE-2026-3139](https://cve.now/CVE-2026-3139.md): User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor \<= 3.15.5 - Insecure Direct Object Reference to… (CVSS 4.3, cozmoslabs User Profile Builder – Beautiful User Registrati…)
- [CVE-2026-34506](https://cve.now/CVE-2026-34506.md): OpenClaw \< 2026.3.8 - Sender Allowlist Bypass in Microsoft Teams Plugin via Route Allowlist Configuration (CVSS 2.3, OpenClaw)
- [CVE-2026-34505](https://cve.now/CVE-2026-34505.md): OpenClaw \< 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret Validation (CVSS 6.9, OpenClaw)
- [CVE-2026-32988](https://cve.now/CVE-2026-32988.md): OpenClaw \< 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation (CVSS 5.8, OpenClaw)
- [CVE-2026-32982](https://cve.now/CVE-2026-32982.md): OpenClaw \< 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error Logs (CVSS 8.7, OpenClaw)
- [CVE-2026-32977](https://cve.now/CVE-2026-32977.md): OpenClaw \< 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit Path (CVSS 5.8, OpenClaw)
- [CVE-2026-32976](https://cve.now/CVE-2026-32976.md): OpenClaw \< 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands (CVSS 7.1, OpenClaw)
- [CVE-2026-32971](https://cve.now/CVE-2026-32971.md): OpenClaw \< 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands (CVSS 7.3, OpenClaw)
- [CVE-2026-32970](https://cve.now/CVE-2026-32970.md): OpenClaw \< 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs (CVSS 2.0, OpenClaw)
- [CVE-2026-32921](https://cve.now/CVE-2026-32921.md): OpenClaw \< 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.run (CVSS 5.3, OpenClaw)
- [CVE-2026-32920](https://cve.now/CVE-2026-32920.md): OpenClaw \< 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace Plugins (CVSS 8.6, OpenClaw)
- [CVE-2026-32917](https://cve.now/CVE-2026-32917.md): OpenClaw \< 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCP (CVSS 9.2, OpenClaw)
- [CVE-2026-32916](https://cve.now/CVE-2026-32916.md): OpenClaw 2026.3.7 \< 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes (CVSS 9.2, OpenClaw)
- [CVE-2026-5198](https://cve.now/CVE-2026-5198.md): code-projects Student Membership System Admin Login index.php sql injection (CVSS 6.9, code-projects Student Membership System)
- [CVE-2026-34887](https://cve.now/CVE-2026-34887.md): WordPress Kubio AI Page Builder plugin \<= 2.7.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Extend Themes Kubio AI Page Builder)
- [CVE-2026-4400](https://cve.now/CVE-2026-4400.md): Multiple vulnerabilities in 1millionbot Millie chatbot (CVSS 7.0, 1millionbot Millie chat)
- [CVE-2026-4399](https://cve.now/CVE-2026-4399.md): Multiple vulnerabilities in 1millionbot Millie chatbot (CVSS 8.7, 1millionbot Millie chat)
- [CVE-2025-15618](https://cve.now/CVE-2025-15618.md): Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key (CVSS 9.1, MOCK Business::OnlinePayment::StoredTransaction)
- [CVE-2026-5197](https://cve.now/CVE-2026-5197.md): code-projects Student Membership System delete\_user.php sql injection (CVSS 5.3, code-projects Student Membership System)
- [CVE-2026-4317](https://cve.now/CVE-2026-4317.md): SQL inyection in Umami Software application (CVSS 9.3, Umami Software application Umami Software)
- [CVE-2026-5196](https://cve.now/CVE-2026-5196.md): code-projects Student Membership System delete\_member.php sql injection (CVSS 5.3, code-projects Student Membership System)
- [CVE-2026-3107](https://cve.now/CVE-2026-3107.md): Multiple vulnerabilities in Teampass (CVSS 9.3, Teampass)
- [CVE-2025-41357](https://cve.now/CVE-2025-41357.md): Reflected Cross-Site Scripting on Anon Proxy Server (CVSS 5.1, Anon Proxy Server)
- [CVE-2025-41356](https://cve.now/CVE-2025-41356.md): Reflected Cross-Site Scripting in Anon Proxy Server (CVSS 5.1, Anon Proxy Server)
- [CVE-2026-3106](https://cve.now/CVE-2026-3106.md): Multiple vulnerabilities in Teampass (CVSS 9.3, Teampass)
- [CVE-2025-41355](https://cve.now/CVE-2025-41355.md): Reflected Cross-Site Scripting on Anon Proxy Server (CVSS 5.1, Anon Proxy Server)
- [CVE-2025-10559](https://cve.now/CVE-2025-10559.md): Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x… (CVSS 7.1, Dassault Systèmes DELMIA Factory Resource Manager)
- [CVE-2025-10553](https://cve.now/CVE-2025-10553.md): Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release… (CVSS 8.7, Dassault Systèmes DELMIA Factory Resource Manager)
- [CVE-2025-10551](https://cve.now/CVE-2025-10551.md): Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release… (CVSS 8.7, Dassault Systèmes ENOVIA Collaborative Industry Innovator)
- [CVE-2026-5201](https://cve.now/CVE-2026-5201.md): Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image (CVSS 7.5, Red Hat Enterprise Linux · Red Hat AI Inference Server)
- [CVE-2026-5195](https://cve.now/CVE-2026-5195.md): code-projects Student Membership System User Registration sql injection (CVSS 6.9, code-projects Student Membership System)
- [CVE-2026-5186](https://cve.now/CVE-2026-5186.md): Nothings stb Multi-frame GIF File stb\_image.h stbi\_\_load\_gif\_main double free (CVSS 4.8, Nothings stb)
- [CVE-2026-5185](https://cve.now/CVE-2026-5185.md): Nothings stb\_image Multi-frame GIF File stb\_image.h stbi\_\_gif\_load\_next heap-based overflow (CVSS 4.8, Nothings stb\_image)
- [CVE-2026-5184](https://cve.now/CVE-2026-5184.md): TRENDnet TEW-713RE setSysAdm command injection (CVSS 5.3, TRENDnet TEW-713RE)
- [CVE-2026-3881](https://cve.now/CVE-2026-3881.md): Performance Monitor \<= 1.0.6 - Unauthenticated Blind SSRF (CVSS 5.8, Performance Monitor)
- [CVE-2026-5183](https://cve.now/CVE-2026-5183.md): TRENDnet TEW-713RE addRouting sub\_421494 command injection (CVSS 5.3, TRENDnet TEW-713RE)
- [CVE-2026-5182](https://cve.now/CVE-2026-5182.md): SourceCodester Teacher Record System Parameter sql injection (CVSS 6.9, SourceCodester Teacher Record System)
- [CVE-2026-34881](https://cve.now/CVE-2026-34881.md): OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). (CVSS 5.0, OpenStack Glance · glance)
- [CVE-2026-1877](https://cve.now/CVE-2026-1877.md): Auto Post Scheduler \<= 1.84 - Cross-Site Request Forgery to Stored Cross-Site Scripting via aps\_options\_page (CVSS 6.1, johnh10 Auto Post Scheduler)
- [CVE-2026-1834](https://cve.now/CVE-2026-1834.md): Ibtana - WordPress Website Builder \<= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, vowelweb Ibtana – WordPress Website Builder)
- [CVE-2026-5181](https://cve.now/CVE-2026-5181.md): SourceCodester Simple Doctors Appointment System ajax.php unrestricted upload (CVSS 5.3, SourceCodester Simple Doctors Appointment System)
- [CVE-2026-4146](https://cve.now/CVE-2026-4146.md): Loco Translate \<= 2.8.2 - Reflected Cross-Site Scripting via 'update\_href' Parameter (CVSS 6.1, timwhitlock Loco Translate)
- [CVE-2026-1710](https://cve.now/CVE-2026-1710.md): WooPayments \<= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save\_upe\_appearance\_ajax (CVSS 6.5, WooPayments: Integrated WooCommerce Payments)
- [CVE-2026-1797](https://cve.now/CVE-2026-1797.md): Truebooker - Appointment Booking and Scheduler Plugin \<= 1.1.4 - Sensitive Information Exposure via Views Files (CVSS 5.3, themetechmount TrueBooker – Appointment Booking and Schedul…)
- [CVE-2026-5180](https://cve.now/CVE-2026-5180.md): SourceCodester Simple Doctors Appointment System ajax.php sql injection (CVSS 6.9, SourceCodester Simple Doctors Appointment System)
- [CVE-2026-5179](https://cve.now/CVE-2026-5179.md): SourceCodester Simple Doctors Appointment System login.php sql injection (CVSS 6.9, SourceCodester Simple Doctors Appointment System)
- [CVE-2026-5178](https://cve.now/CVE-2026-5178.md): Totolink A3300R cstecgi.cgi setIptvCfg command injection (CVSS 5.3, Totolink A3300R)
- [CVE-2026-34073](https://cve.now/CVE-2026-34073.md): cryptography has incomplete DNS name constraint enforcement on peer names (CVSS 1.7, pyca cryptography · cryptography)
- [CVE-2026-34070](https://cve.now/CVE-2026-34070.md): LangChain Core has Path Traversal vulnerabilites in legacy \`load\_prompt\` functions (CVSS 7.5, langchain-ai langchain · langchain-core)
- [CVE-2026-5177](https://cve.now/CVE-2026-5177.md): Totolink A3300R cstecgi.cgi setWiFiBasicCfg command injection (CVSS 5.3, Totolink A3300R)
- [CVE-2026-34060](https://cve.now/CVE-2026-34060.md): Ruby LSP has arbitrary code execution through branch setting (CVSS 7.1, Shopify ruby-lsp · Shopify.ruby-lsp +1)
- [CVE-2026-34054](https://cve.now/CVE-2026-34054.md): openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element) (CVSS 7.8, microsoft vcpkg)
- [CVE-2026-34043](https://cve.now/CVE-2026-34043.md): Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects (CVSS 5.9, yahoo serialize-javascript · serialize-javascript)
- [CVE-2026-34042](https://cve.now/CVE-2026-34042.md): act: actions/cache server allows malicious cache injection (CVSS 8.2, nektos act · github.com/nektos/act)
- [CVE-2026-34041](https://cve.now/CVE-2026-34041.md): act: Unrestricted set-env and add-path command processing enables environment injection (CVSS 7.7, nektos act · github.com/nektos/act)
- [CVE-2026-34036](https://cve.now/CVE-2026-34036.md): Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php (CVSS 6.5, dolibarr · dolibarr/dolibarr)
- [CVE-2026-33997](https://cve.now/CVE-2026-33997.md): Moby: Off-by-one error in plugin privilege validation (CVSS 6.8, moby · github.com/docker/docker +2)
- [CVE-2026-34040](https://cve.now/CVE-2026-34040.md): Moby: AuthZ plugin bypass with oversized request body (CVSS 8.8, moby · github.com/docker/docker +2)
- [CVE-2026-32727](https://cve.now/CVE-2026-32727.md): SciTokens: Authorization Bypass via Path Traversal in Scope Validation (CVSS 8.1, scitokens)
- [CVE-2026-32716](https://cve.now/CVE-2026-32716.md): SciTokens: Authorization Bypass via Incorrect Scope Path Prefix Checking (CVSS 8.1, scitokens)
- [CVE-2026-32714](https://cve.now/CVE-2026-32714.md): SciTokens vulnerable to SQL Injection in KeyCache (CVSS 9.8, scitokens)
- [CVE-2026-3300](https://cve.now/CVE-2026-3300.md): Everest Forms Pro \<= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field (CVSS 9.8, WPEverest Everest Forms Pro)
- [CVE-2026-4020](https://cve.now/CVE-2026-4020.md): Gravity SMTP \<= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST API (CVSS 7.5, RocketGenius Gravity SMTP)
- [CVE-2026-5176](https://cve.now/CVE-2026-5176.md): Totolink A3300R cstecgi.cgi setSyslogCfg command injection (CVSS 6.9, Totolink A3300R)
- [CVE-2026-5115](https://cve.now/CVE-2026-5115.md): Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices (CVSS 3.6, Papercut NG/MF)
- [CVE-2026-32734](https://cve.now/CVE-2026-32734.md): baserCMS: Multiple vulnerabilities in baserCMS (CVSS 7.1, baserproject basercms · baserproject/basercms)
- [CVE-2026-30879](https://cve.now/CVE-2026-30879.md): baserCMS: Cross-site scripting vulnerability in blog post (CVSS 6.9, baserproject basercms · baserproject/basercms)
- [CVE-2026-30940](https://cve.now/CVE-2026-30940.md): baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE (CVSS 7.2, baserproject basercms · baserproject/basercms)
- [CVE-2026-30878](https://cve.now/CVE-2026-30878.md): baserCMS: Mail Form Acceptance Bypass via Public API (CVSS 5.3, baserproject basercms · baserproject/basercms)
- [CVE-2026-30877](https://cve.now/CVE-2026-30877.md): baserCMS: OS Command Injection in the baserCMS Update Functionality (CVSS 9.1, baserproject basercms · baserproject/basercms)
- [CVE-2026-30880](https://cve.now/CVE-2026-30880.md): baserCMS: OS command injection vulnerability in installer (CVSS 9.2, baserproject basercms · baserproject/basercms)
- [CVE-2026-27697](https://cve.now/CVE-2026-27697.md): baserCMS: SQL injection vulnerability in blog post (CVSS 6.9, baserproject basercms · baserproject/basercms)
- [CVE-2026-21861](https://cve.now/CVE-2026-21861.md): baserCMS: OS Command Injection Leading to Remote Code Execution (RCE) (CVSS 9.1, baserproject basercms · baserproject/basercms)
- [CVE-2025-32957](https://cve.now/CVE-2025-32957.md): baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE) (CVSS 8.7, baserproject basercms · baserproject/basercms)
- [CVE-2026-4794](https://cve.now/CVE-2026-4794.md): Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF (CVSS 2.1, PaperCut NG/MF)
- [CVE-2026-29870](https://cve.now/CVE-2026-29870.md): A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows arbitrary file writes via the… (CVSS 7.6)
- [CVE-2026-30276](https://cve.now/CVE-2026-30276.md): An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via… (CVSS 9.8)
- [CVE-2026-30277](https://cve.now/CVE-2026-30277.md): An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical… (CVSS 8.4)
- [CVE-2026-30278](https://cve.now/CVE-2026-30278.md): An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files… (CVSS 9.8)
- [CVE-2026-30279](https://cve.now/CVE-2026-30279.md): An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows attackers to overwrite critical… (CVSS 8.4)
- [CVE-2026-30280](https://cve.now/CVE-2026-30280.md): An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to… (CVSS 5.3)
- [CVE-2026-30281](https://cve.now/CVE-2026-30281.md): An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file… (CVSS 9.8)
- [CVE-2026-30282](https://cve.now/CVE-2026-30282.md): An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical… (CVSS 9.0)
- [CVE-2026-30283](https://cve.now/CVE-2026-30283.md): An arbitrary file overwrite vulnerability in PEAKSEL D.O.O. (CVSS 9.8)
- [CVE-2026-30284](https://cve.now/CVE-2026-30284.md): An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via… (CVSS 8.6)
- [CVE-2026-30285](https://cve.now/CVE-2026-30285.md): An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files… (CVSS 9.8)
- [CVE-2026-30286](https://cve.now/CVE-2026-30286.md): An arbitrary file overwrite vulnerability in Funambol, Inc. (CVSS 9.8)
- [CVE-2026-30290](https://cve.now/CVE-2026-30290.md): An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal… (CVSS 8.4)
- [CVE-2026-30309](https://cve.now/CVE-2026-30309.md): InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism… (CVSS 7.8)
- [CVE-2026-30310](https://cve.now/CVE-2026-30310.md): In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands. (CVSS 9.8)
- [CVE-2026-30311](https://cve.now/CVE-2026-30311.md): Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security… (CVSS 9.8)
- [CVE-2026-30312](https://cve.now/CVE-2026-30312.md): DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security… (CVSS 9.8)
- [CVE-2026-30314](https://cve.now/CVE-2026-30314.md): Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security… (CVSS 9.8)
- [CVE-2026-30520](https://cve.now/CVE-2026-30520.md): A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. (CVSS 5.4)
- [CVE-2026-30521](https://cve.now/CVE-2026-30521.md): A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. (CVSS 6.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2026-03-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.