# CVEs published 2026-04-01

235 CVEs were published on April 1, 2026: 29 critical, 87 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-21767](https://cve.now/CVE-2026-21767.md): HCL BigFix Platform is affected by insufficient authentication (CVSS 4.0, HCLSoftware BigFix Platform)
- [CVE-2026-21765](https://cve.now/CVE-2026-21765.md): HCL BigFix Platform is affected by insecure permissions on private cryptographic keys (CVSS 8.8, HCLSoftware BigFix Platform)
- [CVE-2026-5315](https://cve.now/CVE-2026-5315.md): Nothings stb TTF File stb\_truetype.h stbtt\_\_buf\_get8 out-of-bounds (CVSS 5.3, Nothings stb)
- [CVE-2025-66487](https://cve.now/CVE-2025-66487.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 2.7, IBM Aspera Shares)
- [CVE-2025-66486](https://cve.now/CVE-2025-66486.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 4.8, IBM Aspera Shares)
- [CVE-2025-66485](https://cve.now/CVE-2025-66485.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 5.4, IBM Aspera Shares)
- [CVE-2026-32929](https://cve.now/CVE-2026-32929.md): V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get\_macro\_mem\_COM. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-32928](https://cve.now/CVE-2026-32928.md): V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::\_conv\_AnimationItem. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2025-66484](https://cve.now/CVE-2025-66484.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 5.5, IBM Aspera Shares)
- [CVE-2026-32927](https://cve.now/CVE-2026-32927.md): V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set\_temp\_type\_default. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-32926](https://cve.now/CVE-2026-32926.md): V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load\_link\_inf. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-32925](https://cve.now/CVE-2026-32925.md): V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2025-66483](https://cve.now/CVE-2025-66483.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 6.3, IBM Aspera Shares)
- [CVE-2025-36375](https://cve.now/CVE-2025-36375.md): IBM DataPower Gateway vulnerable to CSRF (CVSS 6.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-5314](https://cve.now/CVE-2026-5314.md): Nothings stb TTF File stb\_truetype.h stbtt\_InitFont\_internal out-of-bounds (CVSS 5.3, Nothings stb)
- [CVE-2026-34572](https://cve.now/CVE-2026-34572.md): CI4MS: Account Deactivation Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) (CVSS 8.8, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-3987](https://cve.now/CVE-2026-3987.md): WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2026-34571](https://cve.now/CVE-2026-34571.md): CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account… (CVSS 10.0, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34570](https://cve.now/CVE-2026-34570.md): CI4MS: Account Deletion Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) (CVSS 8.8, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-5313](https://cve.now/CVE-2026-5313.md): Nothings stb GIF Decoder stb\_image.h stbi\_\_gif\_load\_next denial of service (CVSS 5.3, Nothings stb)
- [CVE-2026-34569](https://cve.now/CVE-2026-34569.md): CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 10.0, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34568](https://cve.now/CVE-2026-34568.md): CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34567](https://cve.now/CVE-2026-34567.md): CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34566](https://cve.now/CVE-2026-34566.md): CI4MS: Pages Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34565](https://cve.now/CVE-2026-34565.md): CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34564](https://cve.now/CVE-2026-34564.md): CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34563](https://cve.now/CVE-2026-34563.md): CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34562](https://cve.now/CVE-2026-34562.md): CI4MS: System Settings (Company Information) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via… (CVSS 4.7, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34561](https://cve.now/CVE-2026-34561.md): CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via… (CVSS 4.7, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34560](https://cve.now/CVE-2026-34560.md): CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34559](https://cve.now/CVE-2026-34559.md): CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-2475](https://cve.now/CVE-2026-2475.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 3.1, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-34543](https://cve.now/CVE-2026-34543.md): OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo\_pxr24\_impl) (CVSS 8.7, AcademySoftwareFoundation openexr · openexr)
- [CVE-2026-34544](https://cve.now/CVE-2026-34544.md): OpenEXR: integer overflow to OOB write in uncompress\_b44\_impl() (CVSS 8.4, AcademySoftwareFoundation openexr · openexr)
- [CVE-2026-4820](https://cve.now/CVE-2026-4820.md): IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2\_\<workspace\_name\> was not set with secure flag (CVSS 4.3, IBM Maximo Application Suite)
- [CVE-2026-34545](https://cve.now/CVE-2026-34545.md): OpenEXR: integer overflow lead to OOB in HTJ2K decoder (CVSS 8.4, AcademySoftwareFoundation openexr)
- [CVE-2025-36373](https://cve.now/CVE-2025-36373.md): Incorrect administrative access control in IBM DataPower Gateway (CVSS 4.1, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2025-13916](https://cve.now/CVE-2025-13916.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 5.9, IBM Aspera Shares)
- [CVE-2026-1491](https://cve.now/CVE-2026-1491.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.3, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-34531](https://cve.now/CVE-2026-34531.md): Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client (CVSS 6.5, miguelgrinberg Flask-HTTPAuth · flask-httpauth)
- [CVE-2026-34530](https://cve.now/CVE-2026-34530.md): File Browser is vulnerable to Stored Cross-Site Scripting via text/template branding injection (CVSS 6.9, filebrowser · github.com/filebrowser/filebrowser/v2 +1)
- [CVE-2026-2862](https://cve.now/CVE-2026-2862.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.3, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-34528](https://cve.now/CVE-2026-34528.md): File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution (CVSS 8.1, filebrowser · github.com/filebrowser/filebrowser +1)
- [CVE-2026-1345](https://cve.now/CVE-2026-1345.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 7.3, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-34529](https://cve.now/CVE-2026-34529.md): File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file (CVSS 7.6, filebrowser · github.com/filebrowser/filebrowser/v2 +1)
- [CVE-2026-4101](https://cve.now/CVE-2026-4101.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 8.1, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-4364](https://cve.now/CVE-2026-4364.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.4, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-5312](https://cve.now/CVE-2026-5312.md): D-Link DNS-1550-04 dsk\_mgr.cgi Get\_current\_raidtype access control (CVSS 6.9, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-34525](https://cve.now/CVE-2026-34525.md): AIOHTTP: Duplicate Host header accepted (CVSS 6.3, aio-libs aiohttp · aiohttp)
- [CVE-2026-34520](https://cve.now/CVE-2026-34520.md): AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypass (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-34519](https://cve.now/CVE-2026-34519.md): AIOHTTP: HTTP response splitting via \\r in reason phrase (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-34518](https://cve.now/CVE-2026-34518.md): AIOHTTP: Cookie and Proxy-Authorization headers leaked on cross-origin redirect (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-34517](https://cve.now/CVE-2026-34517.md): AIOHTTP: Late size enforcement for non-file multipart fields causes memory DoS (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-34516](https://cve.now/CVE-2026-34516.md): AIOHTTP: Multipart Header Size Bypass (CVSS 6.6, aio-libs aiohttp · aiohttp)
- [CVE-2026-34515](https://cve.now/CVE-2026-34515.md): AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows (CVSS 6.6, aio-libs aiohttp · aiohttp)
- [CVE-2026-34514](https://cve.now/CVE-2026-34514.md): AIOHTTP: CRLF injection in multipart part content type header construction (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-22815](https://cve.now/CVE-2026-22815.md): AIOHTTP: Uncapped memory usage possible through aiohttp allowing unlimited trailer headers (CVSS 6.9, aio-libs aiohttp · aiohttp)
- [CVE-2026-34513](https://cve.now/CVE-2026-34513.md): AIOHTTP: Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-34456](https://cve.now/CVE-2026-34456.md): Reviactyl: OAuth account takeover via auto-linking (CVSS 9.1, reviactyl panel)
- [CVE-2026-34455](https://cve.now/CVE-2026-34455.md): Hi.Events: SQL Injection via Unvalidated sort\_by Query Parameter in Multiple Repository Classes (CVSS 8.7, HiEventsDev Hi.Events)
- [CVE-2026-34750](https://cve.now/CVE-2026-34750.md): Payload has Insufficient Filename Validation in Client-Upload Signed-URL Endpoints (CVSS 6.5, payloadcms payload · @payloadcms/storage-azure +3)
- [CVE-2026-34749](https://cve.now/CVE-2026-34749.md): Payload has a CSRF Protection Bypass in Authentication Flow (CVSS 5.4, payloadcms payload · payload)
- [CVE-2026-34748](https://cve.now/CVE-2026-34748.md): @payloadcms/next has Stored XSS in Admin Panel (CVSS 8.7, payloadcms payload · @payloadcms/next)
- [CVE-2026-34747](https://cve.now/CVE-2026-34747.md): Payload has an SQL Injection via Query Handling (CVSS 8.5, payloadcms payload · payload)
- [CVE-2026-5311](https://cve.now/CVE-2026-5311.md): D-Link DNS-1550-04 file\_center.cgi Webdav\_Access\_List access control (CVSS 6.9, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-34746](https://cve.now/CVE-2026-34746.md): Payload has Authenticated SSRF via Upload Functionality (CVSS 7.7, payloadcms payload · payload)
- [CVE-2026-35000](https://cve.now/CVE-2026-35000.md): ChangeDetection.io \< 0.54.7 SafeXPath3Parser Bypass Arbitrary File Read (CVSS 7.1, dgtlmoon ChangeDetection.io · changedetection-io)
- [CVE-2026-5199](https://cve.now/CVE-2026-5199.md): Cross Namespace Access via Batch Operation (CVSS 2.3, Temporal Technologies temporal · go.temporal.io/server)
- [CVE-2026-34751](https://cve.now/CVE-2026-34751.md): Payload has Unvalidated Input in Password Recovery Endpoints (CVSS 9.1, payloadcms payload · payload +1)
- [CVE-2026-34447](https://cve.now/CVE-2026-34447.md): ONNX: External Data Symlink Traversal (CVSS 5.5, onnx)
- [CVE-2026-34446](https://cve.now/CVE-2026-34446.md): ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load (CVSS 4.7, onnx)
- [CVE-2026-27489](https://cve.now/CVE-2026-27489.md): ONNX: Path Traversal via Symlink (CVSS 8.7, onnx)
- [CVE-2026-34445](https://cve.now/CVE-2026-34445.md): ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. (CVSS 8.6, onnx)
- [CVE-2026-34397](https://cve.now/CVE-2026-34397.md): himmelblau: NSS fake-primary group lookup reintroduces name collision risk (CVSS 6.3, himmelblau-idm himmelblau)
- [CVE-2026-34376](https://cve.now/CVE-2026-34376.md): PdfDing: Password-protected share bypass via direct serve endpoint (CVSS 7.5, mrmn2 PdfDing)
- [CVE-2026-34236](https://cve.now/CVE-2026-34236.md): Auth0 PHP SDK Insufficient Entropy in Cookie Encryption (CVSS 8.2, auth0-PHP · auth0/auth0-php)
- [CVE-2026-34222](https://cve.now/CVE-2026-34222.md): Open WebUI has Broken Access Control in Tool Valves (CVSS 7.7, open-webui)
- [CVE-2026-34159](https://cve.now/CVE-2026-34159.md): llama.cpp: Unauthenticated RCE via GRAPH\_COMPUTE buffer=0 bypass in llama.cpp RPC backend (CVSS 9.8, ggml-org llama.cpp)
- [CVE-2026-34076](https://cve.now/CVE-2026-34076.md): Clerk JavaScript: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host (CVSS 7.4, clerk javascript · @clerk/backend +3)
- [CVE-2026-34072](https://cve.now/CVE-2026-34072.md): cronmaster: Middleware authentication bypass enabling unauthorized page access and server-action execution (CVSS 8.3, fccview cronmaster)
- [CVE-2026-20090](https://cve.now/CVE-2026-20090.md): Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20089](https://cve.now/CVE-2026-20089.md): Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20087](https://cve.now/CVE-2026-20087.md): Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20088](https://cve.now/CVE-2026-20088.md): Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-5310](https://cve.now/CVE-2026-5310.md): Enter Software Iperius Backup IperiusAccounts.ini hard-coded key (CVSS 2.0, Enter Software Iperius Backup)
- [CVE-2026-20160](https://cve.now/CVE-2026-20160.md): Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability (CVSS 9.8, Cisco Smart Software Manager On-Prem)
- [CVE-2026-20174](https://cve.now/CVE-2026-20174.md): Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability (CVSS 4.9, Cisco Nexus Dashboard)
- [CVE-2026-20151](https://cve.now/CVE-2026-20151.md): Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability (CVSS 7.3, Cisco Smart Software Manager On-Prem)
- [CVE-2026-20155](https://cve.now/CVE-2026-20155.md): Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability (CVSS 8.0, Cisco Evolved Programmable Network Manager)
- [CVE-2026-20096](https://cve.now/CVE-2026-20096.md): Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 6.5, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20097](https://cve.now/CVE-2026-20097.md): Cisco Integrated Management Controller Remote Code Execution Vulnerability (CVSS 6.5, Cisco Unified Computing System)
- [CVE-2026-20094](https://cve.now/CVE-2026-20094.md): Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 8.8, Cisco Unified Computing System)
- [CVE-2026-20095](https://cve.now/CVE-2026-20095.md): Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 6.5, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20093](https://cve.now/CVE-2026-20093.md): Cisco Integrated Management Controller Authentication Bypass Vulnerability (CVSS 9.8, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20085](https://cve.now/CVE-2026-20085.md): Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20041](https://cve.now/CVE-2026-20041.md): Cisco Nexus Dashboard Server Side Request Forgery Vulnerability (CVSS 6.1, Cisco Nexus Dashboard)
- [CVE-2026-20042](https://cve.now/CVE-2026-20042.md): Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability (CVSS 6.5, Cisco Nexus Dashboard)
- [CVE-2026-33990](https://cve.now/CVE-2026-33990.md): Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) (CVSS 6.8, docker model-runner · github.com/docker/model-runner)
- [CVE-2026-33978](https://cve.now/CVE-2026-33978.md): Notesnook: Stored XSS in mobile share editor via unescaped web clip title metadata (CVSS 5.4, streetwriters notesnook)
- [CVE-2026-2265](https://cve.now/CVE-2026-2265.md): Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization (CVSS 6.5, Replicator)
- [CVE-2026-34603](https://cve.now/CVE-2026-34603.md): @tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions (CVSS 7.1, tinacms · @tinacms/graphql)
- [CVE-2026-34604](https://cve.now/CVE-2026-34604.md): @tinacms/graphql's \`FilesystemBridge\` Path Validation Can Be Bypassed via Symlinks or Junctions (CVSS 7.1, tinacms · @tinacms/graphql)
- [CVE-2026-33949](https://cve.now/CVE-2026-33949.md): @tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files (CVSS 8.1, tinacms · @tinacms/graphql)
- [CVE-2026-35099](https://cve.now/CVE-2026-35099.md): Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM. (CVSS 7.4, Lakeside Software SysTrack Agent)
- [CVE-2026-34510](https://cve.now/CVE-2026-34510.md): OpenClaw \< 2026.3.22 - Remote File URL Acceptance in Windows Media Loaders (CVSS 6.9, OpenClaw)
- [CVE-2026-4989](https://cve.now/CVE-2026-4989.md): Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform… (CVSS 4.3, Devolutions Server)
- [CVE-2026-5175](https://cve.now/CVE-2026-5175.md): Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenticated attacker to… (CVSS 5.0, Devolutions Server)
- [CVE-2026-4925](https://cve.now/CVE-2026-4925.md): Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced… (CVSS 5.0, Devolutions Server)
- [CVE-2026-4927](https://cve.now/CVE-2026-4927.md): Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privileges to obtain… (CVSS 6.5, Devolutions Server)
- [CVE-2026-4924](https://cve.now/CVE-2026-4924.md): Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allows a remote… (CVSS 8.2, Devolutions Server)
- [CVE-2026-4828](https://cve.now/CVE-2026-4828.md): Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid… (CVSS 8.2, Devolutions Server)
- [CVE-2026-4829](https://cve.now/CVE-2026-4829.md): Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user… (CVSS 5.4, Devolutions Server)
- [CVE-2025-13535](https://cve.now/CVE-2025-13535.md): King Addons for Elementor \<= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4, kingaddons King Addons for Elementor – 80+ Elementor Widget…)
- [CVE-2026-35094](https://cve.now/CVE-2026-35094.md): Libinput: libinput: information disclosure via dangling pointer in lua plugin handling (CVSS 3.3, Red Hat Enterprise Linux)
- [CVE-2026-35093](https://cve.now/CVE-2026-35093.md): Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins (CVSS 8.8, Red Hat Enterprise Linux)
- [CVE-2026-5271](https://cve.now/CVE-2026-5271.md): Possible to hijack modules in current working directory (CVSS 5.6, Python Software Foundation pymanager)
- [CVE-2026-34430](https://cve.now/CVE-2026-34430.md): ByteDance DeerFlow LocalSandboxProvider Host Bash Escape (CVSS 8.6, Bytedance DeerFlow)
- [CVE-2026-34999](https://cve.now/CVE-2026-34999.md): OpenViking 0.2.5 \< 0.2.14 Bot Proxy Endpoints Allow Unauthenticated Access (CVSS 6.9, Volcengine OpenViking)
- [CVE-2026-35092](https://cve.now/CVE-2026-35092.md): Corosync: corosync: denial of service via integer overflow in join message validation (CVSS 7.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-35091](https://cve.now/CVE-2026-35091.md): Corosync: corosync: denial of service and information disclosure via crafted udp packet (CVSS 8.2, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-3877](https://cve.now/CVE-2026-3877.md): Reflected Cross-Site Scripting in Dashboard Search (CVSS 7.3, VertiGIS FM)
- [CVE-2026-0522](https://cve.now/CVE-2026-0522.md): Local File Inclusion in the File Upload/Download Process (CVSS 7.4, VertiGIS FM)
- [CVE-2026-29014](https://cve.now/CVE-2026-29014.md): MetInfo CMS Unauthenticated PHP Code Injection RCE (CVSS 9.3, MetInfo CMS)
- [CVE-2026-22768](https://cve.now/CVE-2026-22768.md): Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. (CVSS 7.3, Dell AppSync)
- [CVE-2026-22767](https://cve.now/CVE-2026-22767.md): Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. (CVSS 7.3, Dell AppSync)
- [CVE-2026-25601](https://cve.now/CVE-2026-25601.md): Credential Exposure vulnerability in MEPIS RM (CVSS 6.4, Metronik d.o.o. MEPIS RM)
- [CVE-2026-24096](https://cve.now/CVE-2026-24096.md): Insufficient permission validation on multiple REST API Quick Setup endpoints (CVSS 5.3, Checkmk)
- [CVE-2026-0932](https://cve.now/CVE-2026-0932.md): Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server… (CVSS 6.9, M-Files Server)
- [CVE-2026-1879](https://cve.now/CVE-2026-1879.md): Harvard University IQSS Dataverse Theme Customization ThemeAndWidgets.xhtml unrestricted upload (CVSS 5.3, Harvard University IQSS Dataverse)
- [CVE-2024-53828](https://cve.now/CVE-2024-53828.md): Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability (CVSS 5.3, Ericsson Packet Core Controller)
- [CVE-2026-21630](https://cve.now/CVE-2026-21630.md): Joomla! Core - \[20260302\] - SQL injection in com\_content articles webservice endpoint (CVSS 6.9, Joomla! Project Joomla! CMS)
- [CVE-2026-23898](https://cve.now/CVE-2026-23898.md): Joomla! Core - \[20260305\] - Arbitrary file deletion in com\_joomlaupdate (CVSS 8.6, Joomla! Project Joomla! CMS)
- [CVE-2026-21629](https://cve.now/CVE-2026-21629.md): Joomla! Core - \[20260301\] - ACL hardening in com\_ajax (CVSS 6.3, Joomla! Project Joomla! CMS)
- [CVE-2026-23899](https://cve.now/CVE-2026-23899.md): Joomla! Core - \[20260306\] - Improper access check in webservice endpoints (CVSS 8.6, Joomla! Project Joomla! CMS)
- [CVE-2026-21631](https://cve.now/CVE-2026-21631.md): Joomla! Core - \[20260303\] - XSS vector in com\_associations comparison view (CVSS 5.9, Joomla! Project Joomla! CMS)
- [CVE-2026-21632](https://cve.now/CVE-2026-21632.md): Joomla! Core - \[20260304\] - XSS vectors in various article title outputs (CVSS 5.9, Joomla! Project Joomla! CMS)
- [CVE-2026-34889](https://cve.now/CVE-2026-34889.md): WordPress Ultimate Addons for WPBakery Page Builder plugin \< 3.21.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Brainstorm Force Ultimate Addons for WPBakery Page Builder)
- [CVE-2026-23411](https://cve.now/CVE-2026-23411.md): apparmor: fix race between freeing data and fs accessing it (CVSS 7.8, Linux)
- [CVE-2026-23410](https://cve.now/CVE-2026-23410.md): apparmor: fix race on rawdata dereference (CVSS 7.8, Linux)
- [CVE-2026-23409](https://cve.now/CVE-2026-23409.md): apparmor: fix differential encoding verification (no CVSS, Linux)
- [CVE-2026-23408](https://cve.now/CVE-2026-23408.md): apparmor: Fix double free of ns\_name in aa\_replace\_profiles() (CVSS 7.8, Linux)
- [CVE-2026-23407](https://cve.now/CVE-2026-23407.md): apparmor: fix missing bounds check on DEFAULT table in verify\_dfa() (CVSS 7.8, Linux)
- [CVE-2026-23406](https://cve.now/CVE-2026-23406.md): apparmor: fix side-effect bug in match\_char() macro usage (CVSS 7.8, Linux)
- [CVE-2026-23405](https://cve.now/CVE-2026-23405.md): apparmor: fix: limit the number of levels of policy namespaces (no CVSS, Linux)
- [CVE-2026-23404](https://cve.now/CVE-2026-23404.md): apparmor: replace recursive profile removal with iterative approach (no CVSS, Linux)
- [CVE-2026-23403](https://cve.now/CVE-2026-23403.md): apparmor: fix memory leak in verify\_header (no CVSS, Linux)
- [CVE-2026-23402](https://cve.now/CVE-2026-23402.md): KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (no CVSS, Linux)
- [CVE-2026-23401](https://cve.now/CVE-2026-23401.md): KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (CVSS 8.1, Linux)
- [CVE-2026-5261](https://cve.now/CVE-2026-5261.md): Shandong Hoteam InforCenter PLM BaseHandler.ashx uploadFileToIIS unrestricted upload (CVSS 6.9, Shandong Hoteam InforCenter PLM)
- [CVE-2026-4370](https://cve.now/CVE-2026-4370.md): Improper TLS Client/Server authentication and certificate verification on Database Cluster (CVSS 10.0, Canonical Juju · github.com/juju/juju)
- [CVE-2026-28265](https://cve.now/CVE-2026-28265.md): PowerStore, contains a Path Traversal vulnerability in the Service user. (CVSS 4.4, Dell PowerStore)
- [CVE-2026-5259](https://cve.now/CVE-2026-5259.md): AutohomeCorp frostmourne Alarm Preview AlarmController.java server-side request forgery (CVSS 5.3, AutohomeCorp frostmourne)
- [CVE-2026-27101](https://cve.now/CVE-2026-27101.md): Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of… (CVSS 4.7, Dell Secure Connect Gateway)
- [CVE-2026-5258](https://cve.now/CVE-2026-5258.md): Sanster IOPaint File Manager file\_manager.py \_get\_file path traversal (CVSS 6.9, Sanster IOPaint)
- [CVE-2026-4748](https://cve.now/CVE-2026-4748.md): pf silently ignores certain rules (CVSS 7.5, FreeBSD)
- [CVE-2026-5257](https://cve.now/CVE-2026-5257.md): code-projects Simple Laundry System Parameter delstaffinfo.php sql injection (CVSS 6.9, code-projects Simple Laundry System)
- [CVE-2026-5256](https://cve.now/CVE-2026-5256.md): code-projects Simple Laundry System Parameter modify.php sql injection (CVSS 6.9, code-projects Simple Laundry System)
- [CVE-2026-2696](https://cve.now/CVE-2026-2696.md): Export All URLs \< 5.1 - Unauthenticated Sensitive Data Exposure (CVSS 5.3, Export All URLs)
- [CVE-2025-15484](https://cve.now/CVE-2025-15484.md): Order Notification for WooCommerce \< 3.6.3 - Unauthenticated WooCommerce REST Permission Bypass (CVSS 9.1, Order Notification for WooCommerce)
- [CVE-2026-5255](https://cve.now/CVE-2026-5255.md): code-projects Simple Laundry System Parameter delstaffinfo.php cross site scripting (CVSS 5.3, code-projects Simple Laundry System)
- [CVE-2026-5292](https://cve.now/CVE-2026-5292.md): Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read… (CVSS 8.8, Google Chrome)
- [CVE-2026-5291](https://cve.now/CVE-2026-5291.md): Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive… (CVSS 6.5, Google Chrome)
- [CVE-2026-5290](https://cve.now/CVE-2026-5290.md): Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process… (CVSS 9.6, Google Chrome)
- [CVE-2026-5289](https://cve.now/CVE-2026-5289.md): Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process… (CVSS 9.6, Google Chrome)
- [CVE-2026-5288](https://cve.now/CVE-2026-5288.md): Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer… (CVSS 9.6, Google Chrome)
- [CVE-2026-5287](https://cve.now/CVE-2026-5287.md): Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-5273](https://cve.now/CVE-2026-5273.md): Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a… (CVSS 6.3, Google Chrome)
- [CVE-2026-5286](https://cve.now/CVE-2026-5286.md): Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (CVSS 8.8, Google Chrome)
- [CVE-2026-5285](https://cve.now/CVE-2026-5285.md): Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via… (CVSS 8.8, Google Chrome)
- [CVE-2026-5284](https://cve.now/CVE-2026-5284.md): Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to… (CVSS 7.5, Google Chrome)
- [CVE-2026-5283](https://cve.now/CVE-2026-5283.md): Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a… (CVSS 6.5, Google Chrome)
- [CVE-2026-5272](https://cve.now/CVE-2026-5272.md): Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted… (CVSS 8.8, Google Chrome)
- [CVE-2026-5282](https://cve.now/CVE-2026-5282.md): Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read… (CVSS 8.1, Google Chrome)
- [CVE-2026-5281](https://cve.now/CVE-2026-5281.md): Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execut (CVSS 8.8, KEV, Google Chrome)
- [CVE-2026-5280](https://cve.now/CVE-2026-5280.md): Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-5279](https://cve.now/CVE-2026-5279.md): Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via… (CVSS 8.8, Google Chrome)
- [CVE-2026-5278](https://cve.now/CVE-2026-5278.md): Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-5277](https://cve.now/CVE-2026-5277.md): Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer… (CVSS 7.5, Google Chrome)
- [CVE-2026-5276](https://cve.now/CVE-2026-5276.md): Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially… (CVSS 6.5, Google Chrome)
- [CVE-2026-5275](https://cve.now/CVE-2026-5275.md): Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-5274](https://cve.now/CVE-2026-5274.md): Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform arbitrary read/write via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-5254](https://cve.now/CVE-2026-5254.md): welovemedia FFmate Webhook AppJsonTreeView.vue cross site scripting (CVSS 5.1, welovemedia FFmate)
- [CVE-2026-5253](https://cve.now/CVE-2026-5253.md): bufanyun HotGo editNotice Endpoint MessageList.vue cross site scripting (CVSS 5.1, bufanyun HotGo)
- [CVE-2026-5252](https://cve.now/CVE-2026-5252.md): z-9527 admin Message Create Endpoint message.js cross site scripting (CVSS 5.1, z-9527 admin)
- [CVE-2026-5251](https://cve.now/CVE-2026-5251.md): z-9527 admin User Update Endpoint user.js dynamically-determined object attributes (CVSS 5.3, z-9527 admin)
- [CVE-2026-3774](https://cve.now/CVE-2026-3774.md): Self-Modifications Affecting Altered Printing and Redaction in Foxit PDF Editor (CVSS 4.7, Foxit Software Foxit PDF Editor)
- [CVE-2026-3775](https://cve.now/CVE-2026-3775.md): Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-3776](https://cve.now/CVE-2026-3776.md): Null pointer dereference in Foxit PDF Editor/Reader when accessing stamp annotation (CVSS 5.5, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-3780](https://cve.now/CVE-2026-3780.md): Foxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege Escalation (CVSS 7.3, Foxit Software Foxit PDF Reader · Foxit Software Foxit PDF…)
- [CVE-2026-3778](https://cve.now/CVE-2026-3778.md): Stack exhaustion caused by cyclic references in Foxit PDF Editor/Reader (CVSS 6.2, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-3779](https://cve.now/CVE-2026-3779.md): Foxit PDF Editor/Reader List Box Calculate Array Use-After-Free Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-3777](https://cve.now/CVE-2026-3777.md): Use after free of view cache in Foxit PDF Editor/Reader (CVSS 5.5, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-4947](https://cve.now/CVE-2026-4947.md): Insecure Direct Object Reference (IDOR) Leading to Signature Forgery in Foxit eSign (CVSS 7.1, Foxit Software na1.foxitesign.foxit.com)
- [CVE-2026-5249](https://cve.now/CVE-2026-5249.md): gougucms Record Endpoint record.html cross site scripting (CVSS 5.1, gougucms)
- [CVE-2026-3831](https://cve.now/CVE-2026-3831.md): Database for Contact Form 7, WPforms, Elementor forms \<= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive… (CVSS 4.3, crmperks Database for Contact Form 7, WPforms, Elementor fo…)
- [CVE-2026-4374](https://cve.now/CVE-2026-4374.md): Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing… (CVSS 8.8, RTI Connext Professional)
- [CVE-2026-2394](https://cve.now/CVE-2026-2394.md): Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. (CVSS 6.3, RTI Connext Professional)
- [CVE-2026-5248](https://cve.now/CVE-2026-5248.md): gougucms User Registration Login.php reg\_submit dynamically-determined object attributes (CVSS 5.3, gougucms)
- [CVE-2026-35057](https://cve.now/CVE-2026-35057.md): XenForo Stored Cross-Site Scripting via Structured Text Mentions (CVSS 5.1, XenForo)
- [CVE-2026-35056](https://cve.now/CVE-2026-35056.md): XenForo Remote Code Execution via Authenticated Admin (CVSS 8.6, XenForo)
- [CVE-2026-35055](https://cve.now/CVE-2026-35055.md): XenForo Cross-Site Scripting via Lightbox in Posts (CVSS 5.1, XenForo)
- [CVE-2026-35054](https://cve.now/CVE-2026-35054.md): XenForo Stored Cross-Site Scripting via BB Code Rendering (CVSS 5.1, XenForo)
- [CVE-2025-71282](https://cve.now/CVE-2025-71282.md): XenForo Path Disclosure via open\_basedir Exceptions (CVSS 8.7, XenForo)
- [CVE-2025-71281](https://cve.now/CVE-2025-71281.md): XenForo Template Method Call Restriction Bypass (CVSS 8.7, XenForo)
- [CVE-2025-71280](https://cve.now/CVE-2025-71280.md): XenForo Local Account Page Caching Information Disclosure (CVSS 6.9, XenForo)
- [CVE-2025-71279](https://cve.now/CVE-2025-71279.md): XenForo Passkey Security Bypass (CVSS 9.3, XenForo)
- [CVE-2025-71278](https://cve.now/CVE-2025-71278.md): XenForo OAuth2 Unauthorized Scope Request (CVSS 8.7, XenForo)
- [CVE-2024-58342](https://cve.now/CVE-2024-58342.md): XenForo Open Redirect via getDynamicRedirect (CVSS 5.3, XenForo)
- [CVE-2025-13855](https://cve.now/CVE-2025-13855.md): IBM Storage Protect Server is affected by a vulnerability that could allow authenticated users to access administrative metadata through… (CVSS 7.6, IBM Storage Protect Server)
- [CVE-2024-40489](https://cve.now/CVE-2024-40489.md): There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to… (CVSS 9.8)
- [CVE-2024-43028](https://cve.now/CVE-2024-43028.md): A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary… (CVSS 9.8)
- [CVE-2025-66442](https://cve.now/CVE-2025-66442.md): In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's… (CVSS 5.1)
- [CVE-2025-67805](https://cve.now/CVE-2025-67805.md): A non-default configuration in Sage DPW 2025\_06\_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor… (CVSS 5.9)
- [CVE-2025-67806](https://cve.now/CVE-2025-67806.md): The login mechanism of Sage DPW 2021\_06\_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing… (CVSS 3.7)
- [CVE-2025-67807](https://cve.now/CVE-2025-67807.md): The login mechanism of Sage DPW 2025\_06\_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing… (CVSS 4.7)
- [CVE-2026-25833](https://cve.now/CVE-2026-25833.md): Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509\_inet\_pton\_ipv6() function (CVSS 7.5)
- [CVE-2026-25834](https://cve.now/CVE-2026-25834.md): Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade. (CVSS 6.5)
- [CVE-2026-25835](https://cve.now/CVE-2026-25835.md): Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG). (CVSS 7.7)
- [CVE-2026-29598](https://cve.now/CVE-2026-29598.md): Multiple stored cross-site scripting (XSS) vulnerabilities in the submit\_add\_user.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allow… (CVSS 5.4)
- [CVE-2026-30273](https://cve.now/CVE-2026-30273.md): pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base.\_execute\_sql\_query component. (CVSS 7.3)
- [CVE-2026-30287](https://cve.now/CVE-2026-30287.md): An arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4.5 allows attackers to overwrite critical… (CVSS 8.4)
- [CVE-2026-30289](https://cve.now/CVE-2026-30289.md): An arbitrary file overwrite vulnerability in Tinybeans Private Family Album App v5.9.5-prod allows attackers to overwrite critical… (CVSS 8.4)
- [CVE-2026-30291](https://cve.now/CVE-2026-30291.md): An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical… (CVSS 8.4)
- [CVE-2026-30292](https://cve.now/CVE-2026-30292.md): An arbitrary file overwrite vulnerability in Docudepot PDF Reader: PDF Viewer APP v1.0.34 allows attackers to overwrite critical internal… (CVSS 8.4)
- [CVE-2026-30522](https://cve.now/CVE-2026-30522.md): A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. (CVSS 6.5)
- [CVE-2026-30523](https://cve.now/CVE-2026-30523.md): A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. (CVSS 6.5)
- [CVE-2026-30526](https://cve.now/CVE-2026-30526.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0. (CVSS 6.1)
- [CVE-2026-30573](https://cve.now/CVE-2026-30573.md): A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. (CVSS 7.5)
- [CVE-2026-30643](https://cve.now/CVE-2026-30643.md): An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload. (CVSS 9.8)
- [CVE-2026-31027](https://cve.now/CVE-2026-31027.md): TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste\_modules/app.so. (CVSS 9.8)
- [CVE-2026-34871](https://cve.now/CVE-2026-34871.md): An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. (CVSS 6.7)
- [CVE-2026-34872](https://cve.now/CVE-2026-34872.md): An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. (CVSS 9.1)
- [CVE-2026-34873](https://cve.now/CVE-2026-34873.md): An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. (CVSS 9.1)
- [CVE-2026-34874](https://cve.now/CVE-2026-34874.md): An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. (CVSS 7.5)
- [CVE-2026-34875](https://cve.now/CVE-2026-34875.md): An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2026-04-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.