CVEs published March 1, 2026
20 CVEs were published on March 1, 2026: 0 critical, 6 high.
- Published
- 20
- Critical
- 0
- High
- 6
- Medium
- 14
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Tenda F453
- 5
- ChaiScript
- 3
- FascinatedBox lily
- 3
- wren-lang wren
- 3
- jarikomppa soloud
- 2
- Squirrel
- 2
- MaxSite CMS
- 1
- Tenda AC15
- 1
High 6
- CVE-2026-3400Tenda AC15 TextEditingConversion stack-based overflowTenda AC15
- CVE-2026-3399Tenda F453 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflowTenda F453
- CVE-2026-3398Tenda F453 httpd AdvSetWan fromAdvSetWan buffer overflowTenda F453
- CVE-2026-3380Tenda F453 L7Im frmL7ImForm buffer overflowTenda F453
- CVE-2026-3379Tenda F453 SetIpBind fromSetIpBind buffer overflowTenda F453
- CVE-2026-3378Tenda F453 qossetting fromqossetting buffer overflowTenda F453
Medium, low and unrated 14
- CVE-2026-3395MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injectionMaxSite CMS
- CVE-2026-3394jarikomppa soloud WAV File soloud_wav.cpp loadwav memory corruptionjarikomppa soloud
- CVE-2026-3393jarikomppa soloud Audio File soloud_wav.cpp loadflac heap-based overflowjarikomppa soloud
- CVE-2026-3392FascinatedBox lily lily_emitter.c eval_tree null pointer dereferenceFascinatedBox lily
- CVE-2026-3391FascinatedBox lily lily_emitter.c clear_storages out-of-boundsFascinatedBox lily
- CVE-2026-3390FascinatedBox lily Error Reporting lily_build_error.c patch_line_end out-of-boundsFascinatedBox lily
- CVE-2026-3389Squirrel sqstdrex.cpp sqstd_rex_newnode null pointer dereferenceSquirrel
- CVE-2026-3388Squirrel sqcompiler.cpp UnaryOP recursionSquirrel
- CVE-2026-3387wren-lang wren wren_compiler.c getByteCountForArguments null pointer dereferencewren-lang wren
- CVE-2026-3386wren-lang wren wren_compiler.c emitOp out-of-boundswren-lang wren
- CVE-2026-3385wren-lang wren wren_compiler.c resolveLocal recursionwren-lang wren
- CVE-2026-3384ChaiScript chaiscript_eval.hpp Function_Push_Pop recursionChaiScript
- CVE-2026-3383ChaiScript boxed_number.hpp go divide by zeroChaiScript
- CVE-2026-3382ChaiScript boxed_number.hpp get_as memory corruptionChaiScript