CVEs published March 3, 2026
135 CVEs were published on March 3, 2026: 23 critical, 49 high.
- Published
- 135
- Critical
- 23
- High
- 49
- Medium
- 48
- Low
- 15
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 59
Most affected products
- IBM DataStage on Cloud Pak for Data
- 4
- Devolutions Server
- 3
- openemr
- 3
- sysadminsmedia homebox
- 3
- The Biosig Project libbiosig
- 3
- WatchGuard Fireware OS
- 3
- Apache Software Foundation Apache Ranger · org.apache.range…
- 2
- cure53 DOMPurify · dompurify
- 2
- devcode-it openstamanager · devcode-it/openstamanager
- 2
- djangoproject Django · django
- 2
Critical 23
- CVE-2026-28289FreeScout 1.8.206 Patch Bypass for CVE-2026-27636 via Zero-Width Space Character Leads to Remote Code Executionfreescout-help-desk freescout
- CVE-2026-27971Qwik affected by unauthenticated RCE via server$ DeserializationQwikDev qwik · @builder.io/qwik
- CVE-2026-26279Froxlor Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command InjectionFroxlor · froxlor/froxlor
- CVE-2026-26266AliasVault affected by Cross-Site Scripting (XSS) via Email HTML Renderingaliasvault
- CVE-2026-24898OpenEMR has an Unauthenticated MedEx Token Disclosureopenemr
- CVE-2026-25146OpenEMR's payments gateway_api_key secret rendered into client JS codeopenemr
- CVE-2026-27012Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.phpdevcode-it openstamanager · devcode-it/openstamanager
- CVE-2026-3130Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete perDevolutions Server
- CVE-2026-3204Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displaDevolutions Server
- CVE-2026-2590Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop ManaDevolutions Remote Desktop Manager
- CVE-2026-3224Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unautDevolutions Server
- CVE-2026-3485D-Link DIR-868L SSDP Service sub_1BF84 os command injectionD-Link DIR-868L
- CVE-2026-3437Improper Restriction of Operations within the Bounds of a Memory Buffer in Portwell Engineering ToolkitsPortwell Engineering Toolkits
- CVE-2026-22891A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosig 3.9.2 and Master BrThe Biosig Project libbiosig
- CVE-2025-59059Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreatorApache Software Foundation Apache Ranger · org.apache.range…
- CVE-2026-22886OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication.Eclipse Foundation Eclipse OpenMQ
- CVE-2026-1492User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registrationwpeverest User Registration & Membership – Free & Paid Memb…
- CVE-2026-2628All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypasscyberlord92 All-in-One Microsoft 365 & Entra ID / Azure AD…
- CVE-2024-55020A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows att
- CVE-2025-57622An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(reque
- CVE-2025-66945A path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x.
- CVE-2025-70821renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component
- CVE-2026-24103A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi.
High 49
- CVE-2026-27932joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)authlib joserfc · joserfc
- CVE-2026-27905BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar ExtractionBentoML
- CVE-2026-27622OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB writeAcademySoftwareFoundation openexr · openexr
- CVE-2026-27601Underscore.js has unlimited recursion in _.flatten and _.isEqual, potential for DoS attackjashkenas underscore · underscore
- CVE-2026-3266Improper access control vulnerability has been discovered in OpenText™ Filr.OpenText™ Filr
- CVE-2026-27981HomeBox has an Auth Rate Limit Bypass via IP Spoofingsysadminsmedia homebox
- CVE-2026-24848OpenEMR Arbitrary File Write leading to Remote Code Executionopenemr
- CVE-2026-1775Missing Authentication for Critical Function in Labkotec LID-3300IPLabkotec LID-3300IP
- CVE-2026-25906Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.Dell Optimizer
- CVE-2026-24502Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability.Dell Command | Intel vPro Out of Band
- CVE-2026-1567IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerabilityIBM InfoSphere Information Server
- CVE-2026-0869Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0Brocade ASCG
- CVE-2026-3136Google Cloud Build Comment Control BypassGoogle Cloud Cloud Build
- CVE-2026-28518OpenViking .ovpack Import ZIP Slip Path TraversalVolcengine OpenViking · openviking
- CVE-2026-20777A heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The Biosig Project libbiosig 3.9.2 and Master The Biosig Project libbiosig
- CVE-2026-25673Potential denial-of-service vulnerability in URLField via Unicode normalization on Windowsdjangoproject Django · django
- CVE-2026-2637iBoysoft NTFS for Mac contains a local privilege escalation vulnerability in its privileged helper daemon ntfshelperd.iBoysoft NTFS
- CVE-2026-3342WatchGuard Firebox Out of Bounds Write VulnerabilityWatchGuard Fireware OS
- CVE-2026-2568WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Unauthenticated Stored Cross-Site Scriptingcrmperks WP Zendesk for Contact Form 7, WPForms, Elementor,…
- CVE-2026-1876Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series Ethernet moduleMitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet…
- CVE-2026-1875Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP moduleMitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP…
- CVE-2026-1874Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module and Ethernet moduleMitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet…
- CVE-2025-12345LLM-Claw Agent Deployment initiate.c agent_deploy_init buffer overflowLLM-Claw
- CVE-2026-2448Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusiongpriday Page Builder by SiteOrigin
- CVE-2026-2269Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Uploaduncannyowl Uncanny Automator – Easy Automation, Integration…
- CVE-2026-0754SIP Service Providers – Possible Impersonation of Poly Voice DeviceHP VVX · HP Edge E +1
- CVE-2021-35484Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on
- CVE-2021-35485The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload s
- CVE-2021-35486A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import an
- CVE-2024-55021Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.
- CVE-2024-55022Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Nam
- CVE-2024-55024An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthoriz
- CVE-2024-55026An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrar
- CVE-2024-55027Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.
- CVE-2025-52365A command injection vulnerability in the szc script of the ccurtsinger/stabilizer repository allows remote attackers to execute arbitrary sy
- CVE-2025-62814An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, and 2400.
- CVE-2025-62817An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500.
- CVE-2025-63909Incorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows
- CVE-2025-63910An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with
- CVE-2025-63911Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.
- CVE-2025-66363An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200.
- CVE-2025-66680An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files v
- CVE-2025-67840Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_
- CVE-2025-69765Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption
- CVE-2025-70234Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS.
- CVE-2025-70237Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr.
- CVE-2025-70239Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard55.
- CVE-2025-70240Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard51.
- CVE-2025-70241Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANType_Wizard5.
Medium, low and unrated 63
- CVE-2026-27600HomeBox affected by Blind SSRFsysadminsmedia homebox
- CVE-2026-26272HomeBox affected by Stored XSS via HTML/SVG Attachment Uploadsysadminsmedia homebox
- CVE-2026-25590GLPI Inventory Plugin has Reflected XSS in task jobsglpi-project glpi-inventory-plugin
- CVE-2026-24415OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameterdevcode-it openstamanager · devcode-it/openstamanager
- CVE-2026-21866Dify - Stored XSS in chatlanggenius dify
- CVE-2026-3487itsourcecode College Management System class-result.php sql injectionitsourcecode College Management System
- CVE-2026-3486itsourcecode College Management System student-fee.php sql injectionitsourcecode College Management System
- CVE-2025-13686DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environmentIBM DataStage on Cloud Pak for Data
- CVE-2025-13687DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environmentIBM DataStage on Cloud Pak for Data
- CVE-2025-13688DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environmentIBM DataStage on Cloud Pak for Data
- CVE-2025-14456IBM MQ Appliance uses weaker than expected cryptographic algorithmsIBM MQ Appliance
- CVE-2025-14480IBM Aspera faspio Gateway 1.3.7 has addressed a vulnerability affected by weak cryptographic algorithmsIBM Aspera faspio Gateway
- CVE-2026-1713IBM MQ is affected by an authority vulnerablilityIBM MQ
- CVE-2025-13490IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that report metrics are vulnerable to loss of confidentialityIBM App Connect Operator · IBM App Connect EnterpriseCertif…
- CVE-2025-13616DataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP responseIBM DataStage on Cloud Pak for Data
- CVE-2025-13734IBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissionsIBM Engineering Requirements Management DOORS Next
- CVE-2026-29022mackron / dr_libs dr_wav.h Heap Buffer Overflow via WAV Filemackron dr_libs dr_wav.h
- CVE-2025-14604The following vulnerabilities, which may affect IBM Storage Scale when a directory has a specific ACL composition and could lead to improper execute permissions, have been remediated in Storage Scale versions 5.2.3.6 and 6.0.0.2IBM Storage Scale
- CVE-2025-14923IBM WebSphere Application Server Liberty could provide weaker than expected securityIBM WebSphere Application Server - Liberty
- CVE-2025-36363IBM DevOps Plan is vulnerable to Excessive Authentication AttemptsIBM DevOps Plan
- CVE-2025-36364IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.IBM DevOps Plan
- CVE-2026-1265IBM InfoSphere Information Server is vulnerable due to sensitive information written to a log fileIBM InfoSphere Information Server
- CVE-2026-2606IBM webMethods API Management fails to validate user input and enables unauthorized arbitrary file readIBM webMethods API Gateway
- CVE-2026-3484PhialsBasement nmap-mcp-server Nmap CLI index.ts child_process.exec command injectionPhialsBasement nmap-mcp-server · mcp-nmap-server
- CVE-2026-2915HP System Event Utility – Denial of ServiceHP System Event Utility
- CVE-2026-3494MariaDB Server Audit Plugin Comment Handling BypassMariaDB Foundation MariaDB Server · Amazon Aurora MySQL +5
- CVE-2026-0540DOMPurify XSS via Missing Rawtext Elements in SAFE_FOR_XMLcure53 DOMPurify · dompurify
- CVE-2025-15599DOMPurify XSS via Textarea Rawtext Bypass in SAFE_FOR_XMLcure53 DOMPurify · dompurify
- CVE-2026-3465Tuya App/SDK JSON Data Point denial of serviceTuya App · Tuya SDK
- CVE-2025-64736An out-of-bounds read vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (5462afbThe Biosig Project libbiosig
- CVE-2026-25674Potential incorrect permissions on newly created file system objectsdjangoproject Django · django
- CVE-2026-3344WatchGuard Firebox System Integrity Check BypassWatchGuard Fireware OS
- CVE-2026-3343WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UIWatchGuard Fireware OS
- CVE-2026-3351Authorization Bypass in LXD GET /1.0/certificates EndpointCanonical lxd · github.com/canonical/lxd
- CVE-2026-3463xlnt-community xlnt Compound Document binary.hpp append heap-based overflowxlnt-community xlnt
- CVE-2025-59060Apache Ranger: Hostname verification bypass in NiFiRegistryClientApache Software Foundation Apache Ranger · org.apache.range…
- CVE-2025-15598Dataease SQLBot JWT Token auth.py validateEmbedded signature verificationDataease SQLBot
- CVE-2025-15595Privilege escalation via dll hijacking in Inno Setupmlsoft Inno Setup
- CVE-2026-3455Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the impropmailparser
- CVE-2026-3449Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSigna@tootallnate/once
- CVE-2026-20801Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrGallagher NxWitness VMS and Hanwha VMS Integrations
- CVE-2026-20757Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service iGallagher Command Centre Server
- CVE-2025-47147Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with accGallagher Command Centre Mobile Client
- CVE-2026-1487LatePoint <= 5.2.7 - Authenticated (Administrator+) SQL Injection via JSON ImportLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2021-35483The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload J
- CVE-2023-31044An issue was discovered in Nokia Impact before Mobile 23_FP1.
- CVE-2024-55019Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenti
- CVE-2024-55023Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access
- CVE-2024-55025Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access t
- CVE-2025-62815An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580, and 2500.
- CVE-2025-62816An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500.
- CVE-2025-63912Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allow
- CVE-2025-70236Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDomainFilter.
- CVE-2026-26883Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=delete_appointment.
- CVE-2026-26884Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view_appointment.php.
- CVE-2026-26885Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=delete_service.
- CVE-2026-26886Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manage_service.php.
- CVE-2026-26887Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_supplier.php.
- CVE-2026-26888Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_stock.php.
- CVE-2026-26889Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_category.php.
- CVE-2026-26890Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_product.php.
- CVE-2026-26891Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_parcel_type.php.
- CVE-2026-26892Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_carrier.php.