# CVEs published 2026-03-02

220 CVEs were published on March 2, 2026: 43 critical, 95 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-1566](https://cve.now/CVE-2026-1566.md): LatePoint \<= 5.2.7 - Authenticated (Agent+) Privilege Escalation (CVSS 8.8, LatePoint – Calendar Booking Plugin for Appointments and Ev…)
- [CVE-2026-1336](https://cve.now/CVE-2026-1336.md): AI ChatBot with ChatGPT and Content Generator by AYS \<= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification (CVSS 5.3, ays-pro AI ChatBot with ChatGPT and Content Generator by AYS)
- [CVE-2026-2583](https://cve.now/CVE-2026-2583.md): Blocksy \<= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via \`blocksy\_meta\` Fields (CVSS 6.4, creativethemeshq Blocksy)
- [CVE-2026-3338](https://cve.now/CVE-2026-3338.md): PKCS7\_verify Signature Validation Bypass in AWS-LC (CVSS 7.5, AWS-LC · aws-lc-sys)
- [CVE-2026-3337](https://cve.now/CVE-2026-3337.md): Timing Side-Channel in AES-CCM Tag Verification in AWS-LC (CVSS 5.9, AWS-LC · AWS-LC-FIPS +2)
- [CVE-2026-3336](https://cve.now/CVE-2026-3336.md): PKCS7\_verify Certificate Chain Validation Bypass in AWS-LC (CVSS 7.5, AWS-LC · aws-lc-sys)
- [CVE-2026-2256](https://cve.now/CVE-2026-2256.md): Command injection vulnerability in ModelScope's ms-agent (CVSS 6.5, ModelScope ms-agent · ms-agent)
- [CVE-2026-25884](https://cve.now/CVE-2026-25884.md): Exiv2: Out-of-bounds read in CrwMap::decode0x0805 (CVSS 2.7, exiv2)
- [CVE-2026-27596](https://cve.now/CVE-2026-27596.md): Exiv2: Integer Underflow in LoaderNative::getData() Causes Heap Buffer Overflow (CVSS 2.7, exiv2)
- [CVE-2026-27631](https://cve.now/CVE-2026-27631.md): Exiv2: Uncaught exception - cannot create std::vector larger than max\_size() (CVSS 2.7, exiv2)
- [CVE-2026-21882](https://cve.now/CVE-2026-21882.md): theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution (CVSS 8.4, AsfhtgkDavid theshit · theshit)
- [CVE-2026-25477](https://cve.now/CVE-2026-25477.md): AFFiNE: Open Redirect via Regex Bypass in redirect-proxy (CVSS 6.9, toeverything AFFiNE)
- [CVE-2025-48636](https://cve.now/CVE-2025-48636.md): In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. (CVSS 8.4, Google Android)
- [CVE-2024-31328](https://cve.now/CVE-2024-31328.md): In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on th (CVSS 8.8, Google Android)
- [CVE-2026-21853](https://cve.now/CVE-2026-21853.md): AFFiNE: One-click Remote Code Execution through Custom URL Handling (CVSS 8.8, toeverything AFFiNE)
- [CVE-2026-0047](https://cve.now/CVE-2026-0047.md): In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permis (CVSS 8.4, Google Android)
- [CVE-2026-0038](https://cve.now/CVE-2026-0038.md): In multiple functions of mem\_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-0037](https://cve.now/CVE-2026-0037.md): In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-0035](https://cve.now/CVE-2026-0035.md): In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic er (CVSS 8.4, Google Android)
- [CVE-2026-0034](https://cve.now/CVE-2026-0034.md): In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. (CVSS 8.4, Google Android)
- [CVE-2026-0032](https://cve.now/CVE-2026-0032.md): In multiple functions of mem\_protect.c, there is a possible out-of-bounds write due to a logic error in the code. (CVSS 7.8, Google Android)
- [CVE-2026-0031](https://cve.now/CVE-2026-0031.md): In multiple functions of mem\_protect.c, there is a possible out of bounds write due to an integer overflow. (CVSS 8.4, Google Android)
- [CVE-2026-0030](https://cve.now/CVE-2026-0030.md): In \_\_host\_check\_page\_state\_range of mem\_protect.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 8.4, Google Android)
- [CVE-2026-0029](https://cve.now/CVE-2026-0029.md): In \_\_pkvm\_init\_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-0028](https://cve.now/CVE-2026-0028.md): In \_\_pkvm\_host\_share\_guest of mem\_protect.c, there is a possible out of bounds write due to an integer overflow. (CVSS 8.4, Google Android)
- [CVE-2026-0027](https://cve.now/CVE-2026-0027.md): In smmu\_detach\_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free. (CVSS 6.7, Google Android)
- [CVE-2026-0026](https://cve.now/CVE-2026-0026.md): In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in (CVSS 7.8, Google Android)
- [CVE-2026-0025](https://cve.now/CVE-2026-0025.md): In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass. (CVSS 8.4, Google Android)
- [CVE-2026-0024](https://cve.now/CVE-2026-0024.md): In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missin (CVSS 4.0, Google Android)
- [CVE-2026-0023](https://cve.now/CVE-2026-0023.md): In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permis (CVSS 7.8, Google Android)
- [CVE-2026-0021](https://cve.now/CVE-2026-0021.md): In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-0020](https://cve.now/CVE-2026-0020.md): In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a per (CVSS 8.4, Google Android)
- [CVE-2026-0017](https://cve.now/CVE-2026-0017.md): In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. (CVSS 7.7, Google Android)
- [CVE-2026-0015](https://cve.now/CVE-2026-0015.md): In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. (CVSS 6.2, Google Android)
- [CVE-2026-0014](https://cve.now/CVE-2026-0014.md): In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. (CVSS 6.2, Google Android)
- [CVE-2026-0013](https://cve.now/CVE-2026-0013.md): In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-0012](https://cve.now/CVE-2026-0012.md): In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. (CVSS 6.2, Google Android)
- [CVE-2026-0011](https://cve.now/CVE-2026-0011.md): In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code (CVSS 8.4, Google Android)
- [CVE-2026-0010](https://cve.now/CVE-2026-0010.md): In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 8.4, Google Android)
- [CVE-2026-0008](https://cve.now/CVE-2026-0008.md): In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-0007](https://cve.now/CVE-2026-0007.md): In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. (CVSS 7.8, Google Android)
- [CVE-2026-0006](https://cve.now/CVE-2026-0006.md): In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. (CVSS 9.8, Google Android)
- [CVE-2026-0005](https://cve.now/CVE-2026-0005.md): In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction wit (CVSS 6.2, Google Android)
- [CVE-2025-48654](https://cve.now/CVE-2025-48654.md): In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. (CVSS 7.8, Google Android)
- [CVE-2025-48653](https://cve.now/CVE-2025-48653.md): In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2025-48650](https://cve.now/CVE-2025-48650.md): In multiple locations, there is a possible information disclosure due to SQL injection. (CVSS 8.4, Google Android)
- [CVE-2025-48646](https://cve.now/CVE-2025-48646.md): In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. (CVSS 7.8, Google Android)
- [CVE-2025-48645](https://cve.now/CVE-2025-48645.md): In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation. (CVSS 9.8, Google Android)
- [CVE-2025-48644](https://cve.now/CVE-2025-48644.md): In multiple locations, there is a possible persistent denial of service due to improper input validation. (CVSS 5.5, Google Android)
- [CVE-2025-48642](https://cve.now/CVE-2025-48642.md): In jump\_to\_payload of payload.rs, there is a possible information disclosure due to a logic error in the code. (CVSS 5.5, Google Android)
- [CVE-2025-48641](https://cve.now/CVE-2025-48641.md): In multiple functions of Nfc.h, there is a possible use after free due to a race condition. (CVSS 7.0, Google Android)
- [CVE-2025-48635](https://cve.now/CVE-2025-48635.md): In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code. (CVSS 7.7, Google Android)
- [CVE-2025-48634](https://cve.now/CVE-2025-48634.md): In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. (CVSS 8.4, Google Android)
- [CVE-2025-48630](https://cve.now/CVE-2025-48630.md): In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure. (CVSS 7.4, Google Android)
- [CVE-2025-48619](https://cve.now/CVE-2025-48619.md): In multiple functions of ContentProvider.java, there is a possible way for an app with read-only access to truncate files due to a logic err (CVSS 8.4, Google Android)
- [CVE-2025-48613](https://cve.now/CVE-2025-48613.md): In VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the original image was previously signed with the (CVSS 7.8, Google Android)
- [CVE-2025-48609](https://cve.now/CVE-2025-48609.md): In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS function (CVSS 9.1, Google Android)
- [CVE-2025-48605](https://cve.now/CVE-2025-48605.md): In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2025-48602](https://cve.now/CVE-2025-48602.md): In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic erro (CVSS 8.4, Google Android)
- [CVE-2025-48587](https://cve.now/CVE-2025-48587.md): In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. (CVSS 6.2, Google Android)
- [CVE-2025-48585](https://cve.now/CVE-2025-48585.md): In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. (CVSS 6.2, Google Android)
- [CVE-2025-48582](https://cve.now/CVE-2025-48582.md): In multiple locations, there is a possible way to delete media without the MANAGE\_EXTERNAL\_STORAGE permission due to an intent redirect. (CVSS 8.4, Google Android)
- [CVE-2025-48579](https://cve.now/CVE-2025-48579.md): In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2025-48578](https://cve.now/CVE-2025-48578.md): In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE\_EXTERNAL\_STORAGE permission due to a missing permis (CVSS 7.8, Google Android)
- [CVE-2025-48577](https://cve.now/CVE-2025-48577.md): In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. (CVSS 7.4, Google Android)
- [CVE-2025-48574](https://cve.now/CVE-2025-48574.md): In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events due to a missing permi (CVSS 8.4, Google Android)
- [CVE-2025-48568](https://cve.now/CVE-2025-48568.md): In multiple locations, there is a possible lockscreen bypass due to a race condition. (CVSS 7.4, Google Android)
- [CVE-2025-48567](https://cve.now/CVE-2025-48567.md): In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrec (CVSS 7.8, Google Android)
- [CVE-2025-32313](https://cve.now/CVE-2025-32313.md): In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 8.4, Google Android)
- [CVE-2024-43766](https://cve.now/CVE-2024-43766.md): In multiple functions of btm\_ble\_sec.cc, there is a possible unencrypted communication due to Invalid error handling. (CVSS 6.5, Google Android)
- [CVE-2026-0654](https://cve.now/CVE-2026-0654.md): Command injection on TP-Link Deco BE25 (CVSS 8.5, TP-Link Systems Deco BE25)
- [CVE-2026-0655](https://cve.now/CVE-2026-0655.md): Path Traversal on TP-Link Deco BE25 (CVSS 6.9, TP-Link Systems Deco BE25)
- [CVE-2026-3180](https://cve.now/CVE-2026-3180.md): Contest Gallery \<= 28.1.4 - Unauthenticated SQL Injection (CVSS 7.5, contest-gallery Contest Gallery – Upload & Vote Photos, Med…)
- [CVE-2026-3132](https://cve.now/CVE-2026-3132.md): Master Addons for Elementor Premium \<= 2.1.3 - Authenticated (Subscriber+) Remote Code Execution via render\_preview (CVSS 8.8, Jewel Theme Master Addons for Elementor Premium)
- [CVE-2026-21385](https://cve.now/CVE-2026-21385.md): Integer Overflow or Wraparound in Graphics (CVSS 7.8, KEV, Qualcomm Snapdragon)
- [CVE-2025-59603](https://cve.now/CVE-2025-59603.md): Out-of-bounds Write in Computer Vision (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-59600](https://cve.now/CVE-2025-59600.md): Buffer Over-read in Graphics (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47386](https://cve.now/CVE-2025-47386.md): Use After Free in Automotive Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47385](https://cve.now/CVE-2025-47385.md): Improper Access Control for Register Interface in SCE-Mink (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47384](https://cve.now/CVE-2025-47384.md): Reachable Assertion in FW (CVSS 6.5, Qualcomm Snapdragon)
- [CVE-2025-47383](https://cve.now/CVE-2025-47383.md): Missing Cryptographic Step in Data Modem (CVSS 7.2, Qualcomm Snapdragon)
- [CVE-2025-47381](https://cve.now/CVE-2025-47381.md): Use After Free in Automotive Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47379](https://cve.now/CVE-2025-47379.md): Use After Free in Automotive Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47378](https://cve.now/CVE-2025-47378.md): Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS (CVSS 7.1, Qualcomm Snapdragon)
- [CVE-2025-47377](https://cve.now/CVE-2025-47377.md): Use After Free in Automotive Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47376](https://cve.now/CVE-2025-47376.md): Use After Free in Automotive Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47375](https://cve.now/CVE-2025-47375.md): Use After Free in Automotive Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47373](https://cve.now/CVE-2025-47373.md): Out-of-bounds Write in Automotive (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47371](https://cve.now/CVE-2025-47371.md): Reachable Assertion in Modem (CVSS 6.5, Qualcomm Snapdragon)
- [CVE-2025-64427](https://cve.now/CVE-2025-64427.md): ZimaOS is vulnerable to Server-Side Request Forgery (SSRF) (CVSS 7.1, IceWhaleTech ZimaOS)
- [CVE-2026-28286](https://cve.now/CVE-2026-28286.md): ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via API (CVSS 8.6, IceWhaleTech ZimaOS)
- [CVE-2026-28401](https://cve.now/CVE-2026-28401.md): NocoDB: Stored Cross-Site Scripting via Rich Text Cells (CVSS 5.3, nocodb)
- [CVE-2026-28399](https://cve.now/CVE-2026-28399.md): NocoDB: SQL Injection via DATEADD Formula (CVSS 6.2, nocodb)
- [CVE-2026-28398](https://cve.now/CVE-2026-28398.md): NocoDB: Stored Cross-Site Scripting via Comments and Rich Text Cells (CVSS 5.3, nocodb)
- [CVE-2026-28397](https://cve.now/CVE-2026-28397.md): NocoDB: Stored Cross-Site Scripting via Comments (CVSS 5.3, nocodb)
- [CVE-2026-28396](https://cve.now/CVE-2026-28396.md): NocoDB: Refresh Tokens Not Revoked on Password Reset (CVSS 4.9, nocodb)
- [CVE-2026-28361](https://cve.now/CVE-2026-28361.md): NocoDB: Missing Ownership Validation in MCP Token Operations (CVSS 4.9, nocodb)
- [CVE-2026-28360](https://cve.now/CVE-2026-28360.md): NocoDB: Plaintext Storage of Shared View Passwords (CVSS 2.7, nocodb)
- [CVE-2026-28359](https://cve.now/CVE-2026-28359.md): NocoDB: Stored Cross-Site Scripting via Rich Text Field (CVSS 5.3, nocodb)
- [CVE-2026-28358](https://cve.now/CVE-2026-28358.md): NocoDB: User Enumeration via Password Reset Endpoint (CVSS 2.7, nocodb)
- [CVE-2026-28357](https://cve.now/CVE-2026-28357.md): NocoDB: Stored Cross-Site Scripting via Formula Cell (CVSS 5.3, nocodb)
- [CVE-2026-23865](https://cve.now/CVE-2026-23865.md): An integer overflow in the tt\_var\_load\_item\_variation\_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an (CVSS 5.3, FreeType)
- [CVE-2025-52564](https://cve.now/CVE-2025-52564.md): Chamilo: HTML injection via open parameter (CVSS 6.9, chamilo-lms)
- [CVE-2025-52998](https://cve.now/CVE-2025-52998.md): Chamilo: PHAR deserialization bypass (CVSS 7.0, chamilo-lms)
- [CVE-2025-50199](https://cve.now/CVE-2025-50199.md): Chamilo: Blind Server-Side Request Forgery (Unauth Blind SSRF) (CVSS 7.7, chamilo-lms)
- [CVE-2025-52563](https://cve.now/CVE-2025-52563.md): Chamilo: Reflected XSS via page parameter (CVSS 5.1, chamilo-lms)
- [CVE-2025-52475](https://cve.now/CVE-2025-52475.md): Chamilo: Reflected XSS via keyword\_inactive parameter (CVSS 5.1, chamilo-lms)
- [CVE-2025-52476](https://cve.now/CVE-2025-52476.md): Chamilo: Reflected XSS via keyword\_active parameter (CVSS 5.1, chamilo-lms)
- [CVE-2025-52470](https://cve.now/CVE-2025-52470.md): Chamilo: Stored Cross-Site Scripting (XSS) via Session Category Name (CVSS 4.8, chamilo-lms)
- [CVE-2025-52469](https://cve.now/CVE-2025-52469.md): Chamilo: Friend Request Workflow Bypass - Unauthorized Friend Addition and ID Validation Bypass (CVSS 7.1, chamilo-lms)
- [CVE-2025-52468](https://cve.now/CVE-2025-52468.md): Chamilo: Stored XSS Vulnerability via CSV User Import (CVSS 8.8, chamilo-lms)
- [CVE-2026-28412](https://cve.now/CVE-2026-28412.md): Textream Vulnerable to Uncontrolled Resource Consumption (Denial of Service) (CVSS 6.5, f textream)
- [CVE-2025-50198](https://cve.now/CVE-2025-50198.md): Chamilo: Deserialization of untrusted data in /plugin/vchamilo/views/import.php via POST configuration\_file; POST course\_path; POST home\_path parameters (CVSS 8.8, chamilo-lms)
- [CVE-2026-28403](https://cve.now/CVE-2026-28403.md): Textream Cross-Site WebSocket Hijacking (CSWSH) vulnerability (CVSS 7.6, f textream)
- [CVE-2025-50197](https://cve.now/CVE-2025-50197.md): Chamilo: OS Command Injection in /main/admin/sub\_language\_ajax.inc.php via POST new\_language parameter (CVSS 7.1, chamilo-lms)
- [CVE-2025-50196](https://cve.now/CVE-2025-50196.md): Chamilo: OS Command Injection in /plugin/vchamilo/views/editinstance.php via POST main\_database parameter (CVSS 7.1, chamilo-lms)
- [CVE-2025-50195](https://cve.now/CVE-2025-50195.md): Chamilo: OS Command Injection in /plugin/vchamilo/views/manage.controller.php (CVSS 7.1, chamilo-lms)
- [CVE-2026-0689](https://cve.now/CVE-2026-0689.md): XIQ‑SE NAC Admin Credential Exposure via HTTP Response (CVSS 6.0, Extreme Networks ExtremeCloud IQ - Site Engine)
- [CVE-2025-50194](https://cve.now/CVE-2025-50194.md): Chamilo: OS Command Injection in /main/cron/lang/check\_parse\_lang.php (CVSS 7.1, chamilo-lms)
- [CVE-2025-50193](https://cve.now/CVE-2025-50193.md): Chamilo: OS command Injection in /plugin/vchamilo/views/import.php with the POST to\_main\_database parameter (CVSS 7.1, chamilo-lms)
- [CVE-2025-50192](https://cve.now/CVE-2025-50192.md): Chamilo: Time-based SQL Injection in /main/webservices/registration.soap.php (CVSS 8.8, chamilo-lms)
- [CVE-2025-50191](https://cve.now/CVE-2025-50191.md): Chamilo: Error-based SQL Injection via POST userFile with the /main/exercise/hotpotatoes.php script (CVSS 7.0, chamilo-lms)
- [CVE-2025-50190](https://cve.now/CVE-2025-50190.md): Chamilo: Error-based SQL Injection via GET openid.assoc\_handle with the /index.php script (CVSS 8.8, chamilo-lms)
- [CVE-2026-0995](https://cve.now/CVE-2026-0995.md): An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completi (CVSS 3.6, Arm C1 Pro)
- [CVE-2025-50189](https://cve.now/CVE-2025-50189.md): Chamilo: Error-based SQL Injection (CVSS 7.2, chamilo-lms)
- [CVE-2025-50188](https://cve.now/CVE-2025-50188.md): Error-based SQL Injection in Chamilo LMS (CVSS 7.0, chamilo-lms)
- [CVE-2025-52482](https://cve.now/CVE-2025-52482.md): Chamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course\_log\_resources.php (CVSS 8.3, chamilo-lms)
- [CVE-2025-50187](https://cve.now/CVE-2025-50187.md): Chamilo: Evaluation of untrusted user input leads to Remote Code Execution (CVSS 9.8, chamilo-lms)
- [CVE-2025-50186](https://cve.now/CVE-2025-50186.md): Chamilo: Stored XSS via Malicious CSV Filename in user\_import.php (CVSS 4.8, chamilo-lms)
- [CVE-2024-50337](https://cve.now/CVE-2024-50337.md): Chamilo: Potential unauthenticated blind SSRF via openid function (CVSS 5.3, chamilo-lms)
- [CVE-2024-47886](https://cve.now/CVE-2024-47886.md): Chamilo: Post-Auth Remote Code Execution (CVSS 8.7, chamilo-lms)
- [CVE-2026-23600](https://cve.now/CVE-2026-23600.md): A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS). (CVSS 10.0, Hewlett Packard Enterprise (HPE) HPE AutoPass License Server)
- [CVE-2026-1628](https://cve.now/CVE-2026-1628.md): Mattermost allows external websites to open within the app, exposing preload functionality to non-trusted sites. (CVSS 4.6, Mattermost)
- [CVE-2026-3432](https://cve.now/CVE-2026-3432.md): Sim Studio AI - Unauthenticated OAuth Token Theft (CVSS 9.3, SimStudioAI sim)
- [CVE-2026-3431](https://cve.now/CVE-2026-3431.md): Sim Studio AI - MongoDB SSRF and Arbitrary Document Deletion (CVSS 9.8, SimStudioAI sim)
- [CVE-2025-14532](https://cve.now/CVE-2025-14532.md): Remote Code Execution via Unrestricted File Upload in DobryCMS (CVSS 9.3, Studio Fabryka DobryCMS)
- [CVE-2025-12462](https://cve.now/CVE-2025-12462.md): Blind SQL Injection in DobryCMS (CVSS 9.3, Studio Fabryka DobryCMS)
- [CVE-2025-58406](https://cve.now/CVE-2025-58406.md): Lack of HTTP Response Headers (CVSS 5.3, CGM CLININET)
- [CVE-2025-58405](https://cve.now/CVE-2025-58405.md): Lack of protection mechanisms against Clickjacking attacks (CVSS 5.3, CGM CLININET)
- [CVE-2025-58402](https://cve.now/CVE-2025-58402.md): Insecure Direct Object Reference Message ID (CVSS 7.1, CGM CLININET)
- [CVE-2025-30062](https://cve.now/CVE-2025-30062.md): SQL injection in CheckUnitCodeAndKey.pl (CVSS 6.9, CGM CLININET)
- [CVE-2025-30044](https://cve.now/CVE-2025-30044.md): RCE on uhcapache user permissions (CVSS 9.4, CGM CLININET)
- [CVE-2025-30042](https://cve.now/CVE-2025-30042.md): Session generation possible with certificate number only (CVSS 9.0, CGM CLININET)
- [CVE-2025-30035](https://cve.now/CVE-2025-30035.md): Lack of API authentication allowing session generation for any user (CVSS 9.0, CGM CLININET)
- [CVE-2025-10350](https://cve.now/CVE-2025-10350.md): SQL injection in CGM NETRAAD (CVSS 8.8, CGM NETRAAD)
- [CVE-2026-2584](https://cve.now/CVE-2026-2584.md): SQL Injection in Ciser System SL firmware (CVSS 9.3, Ciser System SL CSIP firmware)
- [CVE-2026-20416](https://cve.now/CVE-2026-20416.md): In pcie, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.2, MediaTek chipset)
- [CVE-2026-20445](https://cve.now/CVE-2026-20445.md): In MDDP, there is a possible system crash due to a race condition. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20429](https://cve.now/CVE-2026-20429.md): In display, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20424](https://cve.now/CVE-2026-20424.md): In display, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20444](https://cve.now/CVE-2026-20444.md): In display, there is a possible memory corruption due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20443](https://cve.now/CVE-2026-20443.md): In display, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20442](https://cve.now/CVE-2026-20442.md): In display, there is a possible system crash due to use after free. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20441](https://cve.now/CVE-2026-20441.md): In MAE, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20440](https://cve.now/CVE-2026-20440.md): In MAE, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20439](https://cve.now/CVE-2026-20439.md): In imgsys, there is a possible system crash due to use after free. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20438](https://cve.now/CVE-2026-20438.md): In MAE, there is a possible out of bounds write due to a race condition. (CVSS 6.4, MediaTek chipset)
- [CVE-2026-20437](https://cve.now/CVE-2026-20437.md): In MAE, there is a possible system crash due to use after free. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20436](https://cve.now/CVE-2026-20436.md): In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20435](https://cve.now/CVE-2026-20435.md): In preloader, there is a possible read of device unique identifiers due to a logic error. (CVSS 4.6, MediaTek chipset)
- [CVE-2026-20434](https://cve.now/CVE-2026-20434.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek chipset)
- [CVE-2026-20430](https://cve.now/CVE-2026-20430.md): In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 8.8, MediaTek chipset)
- [CVE-2026-20428](https://cve.now/CVE-2026-20428.md): In display, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20427](https://cve.now/CVE-2026-20427.md): In display, there is a possible escalation of privilege due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20426](https://cve.now/CVE-2026-20426.md): In display, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20425](https://cve.now/CVE-2026-20425.md): In display, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20423](https://cve.now/CVE-2026-20423.md): In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek chipset)
- [CVE-2026-3422](https://cve.now/CVE-2026-3422.md): e-Excellence｜U-Office Force - Insecure Deserialization (CVSS 9.3, e-Excellence U-Office Force)
- [CVE-2025-15597](https://cve.now/CVE-2025-15597.md): Dataease SQLBot API Endpoint assistant.py access control (CVSS 5.3, Dataease SQLBot)
- [CVE-2026-3000](https://cve.now/CVE-2026-3000.md): Changing｜IDExpert Windows Logon Agent - Remote Code Execution (CVSS 9.3, Changing IDExpert Windows Logon Agent)
- [CVE-2026-3413](https://cve.now/CVE-2026-3413.md): itsourcecode University Management System admin\_single\_student.php sql injection (CVSS 6.9, itsourcecode University Management System)
- [CVE-2026-2999](https://cve.now/CVE-2026-2999.md): Changing｜IDExpert Windows Logon Agent - Remote Code Execution (CVSS 9.3, Changing IDExpert Windows Logon Agent)
- [CVE-2026-3412](https://cve.now/CVE-2026-3412.md): itsourcecode University Management System att\_single\_view.php cross site scripting (CVSS 5.3, itsourcecode University Management System)
- [CVE-2026-3411](https://cve.now/CVE-2026-3411.md): itsourcecode University Management System admin\_single\_student\_update.php sql injection (CVSS 6.9, itsourcecode University Management System)
- [CVE-2026-3410](https://cve.now/CVE-2026-3410.md): itsourcecode Society Management System check\_studid.php sql injection (CVSS 6.9, itsourcecode Society Management System)
- [CVE-2026-3409](https://cve.now/CVE-2026-3409.md): eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec\_module code injection (CVSS 6.9, eosphoros-ai db-gpt)
- [CVE-2026-3408](https://cve.now/CVE-2026-3408.md): Open Babel CDXML File atom.cpp GetExplicitValence null pointer dereference (CVSS 5.3, Open Babel · openbabel)
- [CVE-2026-3407](https://cve.now/CVE-2026-3407.md): YosysHQ yosys BLIF File rtlil.h set heap-based overflow (CVSS 4.8, YosysHQ yosys)
- [CVE-2026-3406](https://cve.now/CVE-2026-3406.md): projectworlds Online Art Gallery Shop Registration registration.php sql injection (CVSS 6.9, projectworlds Online Art Gallery Shop)
- [CVE-2026-3405](https://cve.now/CVE-2026-3405.md): thinkgem JeeSite Connection path traversal (CVSS 2.3, thinkgem JeeSite)
- [CVE-2026-3404](https://cve.now/CVE-2026-3404.md): thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference (CVSS 2.3, thinkgem JeeSite)
- [CVE-2026-3403](https://cve.now/CVE-2026-3403.md): PHPGurukul Student Record Management System edit-subject.php cross site scripting (CVSS 4.8, PHPGurukul Student Record Management System)
- [CVE-2026-3402](https://cve.now/CVE-2026-3402.md): PHPGurukul Student Record Management System edit-course.php cross site scripting (CVSS 4.8, PHPGurukul Student Record Management System)
- [CVE-2026-3401](https://cve.now/CVE-2026-3401.md): SourceCodester Web-based Pharmacy Product Management System session expiration (CVSS 2.3, SourceCodester Web-based Pharmacy Product Management System)
- [CVE-2025-58107](https://cve.now/CVE-2025-58107.md): In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung (CVSS 7.5)
- [CVE-2025-65465](https://cve.now/CVE-2025-65465.md): A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote att (CVSS 6.1)
- [CVE-2025-66880](https://cve.now/CVE-2025-66880.md): Cross Site Scripting vulnerability in Wethink Technology Inc 720yun pano-sdk 0.5.877 allows a remote attacker to execute arbitrary code via (CVSS 6.1)
- [CVE-2025-70252](https://cve.now/CVE-2025-70252.md): An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23\_multi. (CVSS 7.5)
- [CVE-2026-24101](https://cve.now/CVE-2026-24101.md): An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18\_multi. (CVSS 9.8)
- [CVE-2026-24105](https://cve.now/CVE-2026-24105.md): An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18\_multi. (CVSS 9.8)
- [CVE-2026-24107](https://cve.now/CVE-2026-24107.md): An issue was discovered in Tenda W20E V4.0br\_V15.11.0.6. (CVSS 9.8)
- [CVE-2026-24108](https://cve.now/CVE-2026-24108.md): An issue was discovered in Tenda W20E V4.0br\_V15.11.0.6. (CVSS 9.8)
- [CVE-2026-24109](https://cve.now/CVE-2026-24109.md): An issue was discovered in Tenda W20E V4.0br\_V15.11.0.6. (CVSS 9.8)
- [CVE-2026-24110](https://cve.now/CVE-2026-24110.md): An issue was discovered in Tenda W20E V4.0br\_V15.11.0.6. (CVSS 9.8)
- [CVE-2026-24111](https://cve.now/CVE-2026-24111.md): An issue was discovered in Tenda W20E V4.0br\_V15.11.0.6. (CVSS 9.8)
- [CVE-2026-24112](https://cve.now/CVE-2026-24112.md): An issue was discovered in Tenda W20E V4.0br\_V15.11.0.6. (CVSS 7.5)
- [CVE-2026-24113](https://cve.now/CVE-2026-24113.md): An issue was discovered in Tenda W20E V4.0br\_V15.11.0.6. (CVSS 9.8)
- [CVE-2026-24114](https://cve.now/CVE-2026-24114.md): An issue was discovered in Tenda W20E V4.0br\_V15.11.0.6. (CVSS 7.5)
- [CVE-2026-24115](https://cve.now/CVE-2026-24115.md): An issue was discovered in Tenda W20E V4.0br\_V15.11.0.6. (CVSS 9.8)
- [CVE-2026-26694](https://cve.now/CVE-2026-26694.md): code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal\_view.php. (CVSS 9.8)
- [CVE-2026-26695](https://cve.now/CVE-2026-26695.md): code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent\_edit.php. (CVSS 9.8)
- [CVE-2026-26696](https://cve.now/CVE-2026-26696.md): code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher\_edit.php. (CVSS 9.8)
- [CVE-2026-26697](https://cve.now/CVE-2026-26697.md): code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher\_view.php?teacherID=. (CVSS 4.9)
- [CVE-2026-26698](https://cve.now/CVE-2026-26698.md): code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal\_edit.php. (CVSS 4.9)
- [CVE-2026-26699](https://cve.now/CVE-2026-26699.md): sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/admin\_change\_picture.php. (CVSS 7.2)
- [CVE-2026-26700](https://cve.now/CVE-2026-26700.md): sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit\_employee.php. (CVSS 9.8)
- [CVE-2026-26701](https://cve.now/CVE-2026-26701.md): sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit\_tecnical\_user.php. (CVSS 9.8)
- [CVE-2026-26702](https://cve.now/CVE-2026-26702.md): sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem\_reuse.php. (CVSS 9.8)
- [CVE-2026-26703](https://cve.now/CVE-2026-26703.md): sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance\_search.php. (CVSS 9.8)
- [CVE-2026-26704](https://cve.now/CVE-2026-26704.md): sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view\_category.php. (CVSS 9.8)
- [CVE-2026-26705](https://cve.now/CVE-2026-26705.md): sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view\_product.php. (CVSS 9.8)
- [CVE-2026-26706](https://cve.now/CVE-2026-26706.md): sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view\_receipt.php. (CVSS 9.8)
- [CVE-2026-26707](https://cve.now/CVE-2026-26707.md): sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view\_supplier.php. (CVSS 9.8)
- [CVE-2026-26708](https://cve.now/CVE-2026-26708.md): sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage\_user.php. (CVSS 9.8)
- [CVE-2026-26709](https://cve.now/CVE-2026-26709.md): code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer\_search.php. (CVSS 9.8)
- [CVE-2026-26710](https://cve.now/CVE-2026-26710.md): code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php. (CVSS 9.8)
- [CVE-2026-26711](https://cve.now/CVE-2026-26711.md): code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket.php. (CVSS 9.8)
- [CVE-2026-26712](https://cve.now/CVE-2026-26712.md): code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php. (CVSS 9.8)
- [CVE-2026-26713](https://cve.now/CVE-2026-26713.md): code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php. (CVSS 9.8)
- [CVE-2026-26720](https://cve.now/CVE-2026-26720.md): An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-03-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.