# CVEs published 2023-03-26

15 CVEs were published on March 26, 2023: 2 critical, 0 high. Days are UTC.

- [CVE-2023-1646](https://cve.now/CVE-2023-1646.md): IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflow (CVSS 5.3, IObit Malware Fighter)
- [CVE-2023-1645](https://cve.now/CVE-2023-1645.md): IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of service (CVSS 5.5, IObit Malware Fighter)
- [CVE-2023-1644](https://cve.now/CVE-2023-1644.md): IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E010 denial of service (CVSS 5.5, IObit Malware Fighter)
- [CVE-2023-1643](https://cve.now/CVE-2023-1643.md): IObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of service (CVSS 5.5, IObit Malware Fighter)
- [CVE-2023-1642](https://cve.now/CVE-2023-1642.md): IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222040 denial of service (CVSS 5.5, IObit Malware Fighter)
- [CVE-2023-1641](https://cve.now/CVE-2023-1641.md): IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of service (CVSS 5.5, IObit Malware Fighter)
- [CVE-2023-1640](https://cve.now/CVE-2023-1640.md): IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of service (CVSS 5.5, IObit Malware Fighter)
- [CVE-2023-1639](https://cve.now/CVE-2023-1639.md): IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of service (CVSS 5.5, IObit Malware Fighter)
- [CVE-2023-1638](https://cve.now/CVE-2023-1638.md): IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of service (CVSS 5.5, IObit Malware Fighter)
- [CVE-2023-26800](https://cve.now/CVE-2023-26800.md): Ruijie Networks RG-EW1200 Wireless Routers EW\_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path p (no CVSS)
- [CVE-2023-26801](https://cve.now/CVE-2023-26801.md): LB-LINK BL-AC1900\_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a com (CVSS 9.8)
- [CVE-2023-26802](https://cve.now/CVE-2023-26802.md): An issue in the component /network\_config/nsg\_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authe (CVSS 9.8)
- [CVE-2023-27796](https://cve.now/CVE-2023-27796.md): RG-EW1200G PRO Wireless Routers EW\_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW\_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW (no CVSS)
- [CVE-2023-28858](https://cve.now/CVE-2023-28858.md): redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to (no CVSS, redis)
- [CVE-2023-28859](https://cve.now/CVE-2023-28859.md): redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can (no CVSS, redis)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-03-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.