CVEs published March 6, 2026
184 CVEs were published on March 6, 2026: 22 critical, 89 high.
- Published
- 184
- Critical
- 22
- High
- 89
- Medium
- 68
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 108
Most affected products
- chamilo-lms
- 7
- chartbrew
- 6
- Forceu Gokapi · github.com/forceu/gokapi
- 5
- Wekan
- 5
- api.everon.io
- 4
- Mobiliti e-mobi.hu
- 4
- OliveTin · github.com/OliveTin/OliveTin
- 4
- parse-community parse-server · parse-server
- 4
- dgtlmoon changedetection.io · changedetection-io
- 3
- Navtor NavBox
- 3
Critical 22
- CVE-2026-29789Vito: Cross-project privilege escalation in workflow site-creation actions allows unauthorized server modificationvitodeploy vito
- CVE-2026-30847Wekan Credential Leak via notificationUsers Publication Exposes Password Hashes and Session TokensWekan
- CVE-2026-30844Wekan Vulnerable to SSRF through Lack of Validation or Filtering in Attachment URL LoadingWekan
- CVE-2026-30843Wekan has Cross-Board IDOR in Custom Fields Update EndpointsWekan
- CVE-2026-28514Rocket.Chat: Users can login with any password via the EE ddp-streamer-serviceRocketChat Rocket.Chat
- CVE-2026-26288Everon api.everon.io Missing Authentication for Critical Functionapi.everon.io
- CVE-2026-26051Mobiliti e-mobi.hu Missing Authentication for Critical FunctionMobiliti e-mobi.hu
- CVE-2026-2331CVE-2026-2331SICK AG SICK Lector85x · SICK AG SICK Lector83x
- CVE-2026-2330CVE-2026-2330SICK AG SICK Lector85x · SICK AG SICK Lector83x
- CVE-2026-29183SiYuan: Unauthenticated reflected SVG XSS in `/api/icon/getDynamicIcon` (`type=8`) enables arbitrary JavaScript executionsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-29058AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.phpWWBN AVideo-Encoder · wwbn/avideo
- CVE-2026-2446Powerpack for LearnDash < 1.3.0 - Unauthenticated Arbitrary Option UpdatePowerPack for LearnDash
- CVE-2026-28794oRPC: Prototype Pollution in `@orpc/client` via `StandardRPCJsonSerializer` Deserializationmiddleapi orpc · @orpc/client
- CVE-2026-28785Ghostfolio: Time-Based Blind SQL Injection in Manual Asset Importghostfolio
- CVE-2026-28680Ghostfolio: Full-Read SSRF in Manual Asset Importghostfolio
- CVE-2026-28508Idno: Unauthenticated SSRF via URL Unfurl Endpointidno · idno/known
- CVE-2025-59543Chamilo: Account Takeover via Stored XSS in Course Descriptionchamilo-lms
- CVE-2025-59542Chamilo: Account Takeover via Stored XSS in Course Learning Pathschamilo-lms
- CVE-2026-28501WWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.phpWWBN AVideo · wwbn/avideo
- CVE-2026-28502WWBN AVideo: Authenticated Remote Code Execution via Unsafe Plugin ZIP ExtractionWWBN AVideo · wwbn/avideo
- CVE-2026-29046TinyWeb: HTTP Header Control Character Injection into CGI Environmentmaximmasiutin TinyWeb
- CVE-2026-28497TinyWeb: Integer Overflow in `_Val` (HTTP Request Smuggling)maximmasiutin TinyWeb
High 89
- CVE-2026-25679Incorrect parsing of IPv6 host literals in net/urlGo standard library net/url · stdlib
- CVE-2026-27137Incorrect enforcement of email constraints in crypto/x509Go standard library crypto/x509 · stdlib
- CVE-2026-30242Plane: SSRF via Incomplete IP Validation in Webhook URL Serializermakeplane plane · plane
- CVE-2026-30244Plane: Unauthenticated Workspace Member Information Disclosuremakeplane plane · plane
- CVE-2026-30230Flare: Password‑Protected Thumbnail BypassFlintSH Flare
- CVE-2026-30223OliveTin: JWT Audience Validation Bypass in Local Key and HMAC ModesOliveTin · github.com/OliveTin/OliveTin
- CVE-2026-29788TSPortal: Anyone can forge self-deletion requests of any usermiraheze TSPortal · miraheze/ts-portal
- CVE-2026-30229Parse Server: Endpoint `/loginAs` allows `readOnlyMasterKey` to gain full read and write access as any userparse-community parse-server · parse-server
- CVE-2026-29182Parse Server: Cloud Hooks and Cloud Jobs bypass `readOnlyMasterKey` write restrictionparse-community parse-server · parse-server
- CVE-2026-30846Wekan Exposes All Global Webhook Integrations through globalwebhooks PublicationWekan
- CVE-2026-29063Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutableimmutable-js · immutable
- CVE-2026-29178Lemmy: Unauthenticated SSRF via file_type query parameter injection in image endpointLemmyNet lemmy · lemmy_routes
- CVE-2026-29091Locutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code Injectionlocutusjs locutus · locutus
- CVE-2026-30831Rocket.Chat: 2FA bypass and login of deactivated users via EE ddp-streamerRocketChat Rocket.Chat
- CVE-2026-29089TimescaleDB uses untrusted search path during extension upgradetimescaledb
- CVE-2026-29087@hono/node-server: Authorization bypass for protected static paths via encoded slashes in Serve Static Middlewarehonojs node-server · @hono/node-server
- CVE-2026-29783GitHub Copilot CLI allows for dangerous shell expansion patterns that enable arbitrary command executiongithub copilot-cli · @github/copilot
- CVE-2026-29082Kestra: Stored Cross-Site Scripting in Markdown File Previewkestra-io kestra
- CVE-2026-29075Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runnermesa
- CVE-2025-15602Snipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege EscalationGrokability Snipe-IT · snipe/snipe-it
- CVE-2026-29064Zarf: Symlink targets in archives are not validated against destination directoryzarf-dev zarf · github.com/zarf-dev/zarf/src/pkg/archive +1
- CVE-2026-26017CoreDNS ACL Bypasscoredns · github.com/coredns/coredns
- CVE-2026-26018CoreDNS Loop Detection Denial of Service Vulnerabilitycoredns · github.com/coredns/coredns
- CVE-2026-20748Everon api.everon.io Insufficient Session Expirationapi.everon.io
- CVE-2026-24696Everon api.everon.io Improper Restriction of Excessive Authentication Attemptsapi.everon.io
- CVE-2026-27764Mobiliti e-mobi.hu Insufficient Session ExpirationMobiliti e-mobi.hu
- CVE-2026-20882Mobiliti e-mobi.hu Improper Restriction of Excessive Authentication AttemptsMobiliti e-mobi.hu
- CVE-2026-2754Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints.Navtor NavBox
- CVE-2026-2753An Absolute Path Traversal vulnerability exists in Navtor NavBox.Navtor NavBox
- CVE-2018-25199OOP CMS BLOG 1.0 SQL Injection via search parameterZsoft OOP CMS BLOG
- CVE-2018-25197PlayJoom 0.10.1 SQL Injection via catid ParameterPlayJoom
- CVE-2018-25196ServerZilla 1.0 SQL Injection via email ParameterServerZilla
- CVE-2018-25194Nominas 0.27 SQL Injection via username ParameterArixolab Nominas
- CVE-2018-25193Mongoose Web Server 6.9 Denial of Service via Socket ConnectionCesanta Mongoose Web Server
- CVE-2018-25192GPS Tracking System 2.12 SQL Injection via username ParameterSourceforge GPS Tracking System
- CVE-2018-25191Facturation System 1.0 SQL Injection via editar_producto.phpObedalvarado Facturation System
- CVE-2018-25189Data Center Audit 2.6.2 SQL Injection via username ParameterSourceforge Data Center Audit
- CVE-2018-25188Webiness Inventory 2.3 SQL Injection via WsModelGrid.phpGithub Webiness Inventory
- CVE-2018-25187Tina4 Stack 1.0.3 SQL Injection and Database File DownloadTina4 Stack
- CVE-2018-25182Silurus Classifieds Script 2.0 SQL Injection via wcategory.phpSnowhall Silurus Classifieds Script
- CVE-2018-25181Musicco 2.0.0 Arbitrary Directory Download via Path TraversalMusicco
- CVE-2018-25180Maitra 1.7.2 SQL Injection and Database File DownloadSalzertechnologies Maitra
- CVE-2018-25179Gumbo CMS 0.99 SQL Injection via settings endpointGumbo-Cms Gumbo CMS
- CVE-2018-25178Easyndexer 1.0 Arbitrary File Download via showtif.phpSourceforge Easyndexer
- CVE-2018-25176Alive Parish 2.0.4 SQL Injection and Arbitrary File UploadDemo Alive Parish
- CVE-2018-25175Alienor Web Libre 2.0 SQL Injection via index.phpAlienor Web Libre
- CVE-2018-25173Rmedia SMS 1.0 SQL Injection via editgrp.phpRmedia SMS
- CVE-2018-25172Pedidos 1.0 SQL Injection via load_proveedores.phpObedalvarado Pedidos
- CVE-2018-25171EdTv 2 SQL Injection via id ParameterEdTv
- CVE-2018-25170DoceboLMS 1.2 SQL Injection via lesson.phpSpaghettilearning DoceboLMS
- CVE-2018-25169AMPPS 2.7 Denial of Service via Malformed Socket ConnectionAMPPS
- CVE-2018-25167Net-Billetterie 2.9 SQL Injection via login.inc.phpNet-Billetterie Billetterie
- CVE-2018-25166Meneame English Pligg 5.8 SQL Injection via search ParameterSourceforge Meneame English Pligg
- CVE-2018-25165Galaxy Forces MMORPG 0.5.8 SQL Injection via ads.phpGalaxy Forces MMORPG
- CVE-2018-25164EverSync 0.5 Arbitrary File Download via files DirectoryPhpmassmail EverSync
- CVE-2018-25163BitZoom 1.0 SQL Injection via rollno ParameterBitZoom
- CVE-2018-251622-Plan Team 1.0.4 Arbitrary File Upload via managefile.php2-Plan Plan Team
- CVE-2018-25161Warranty Tracking System 11.06.3 SQL Injection via SearchCustomer.phpWarrantytrack Warranty Tracking System
- CVE-2026-3589WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRFAutomattic WooCommerce
- CVE-2026-29074SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)svgo
- CVE-2026-29062jackson-core: Nesting Depth Constraint Bypass in `UTF8DataInputJsonParser` potentially allowing Resource ExhaustionFasterXML jackson-core · tools.jackson.core:jackson-core
- CVE-2026-29042Nuclio Shell Runtime Command Injection Leading to Privilege Escalationnuclio · github.com/nuclio/nuclio
- CVE-2026-29065changedetection.io: Zip Slip vulnerability in the backup restore functionalitydgtlmoon changedetection.io · changedetection-io
- CVE-2026-29039changedetection.io: XPath - Arbitrary File Read via unparsed-text()dgtlmoon changedetection.io · changedetection-io
- CVE-2026-28802Authlib: Setting `alg: none` and a blank signature appears to bypass signature verificationauthlib
- CVE-2026-28799PJSIP: Heap use-after-free in PJSIP presence subscription termination handlerpjsip pjproject
- CVE-2026-29068PJSIP: Stack buffer overflow in Opus codec parserpjsip pjproject
- CVE-2026-28795OpenChatBI: Critical Path Traversal Vulnerability in save_report Tool of OpenChatBIzhongyu09 openchatbi · openchatbi
- CVE-2026-28429Talishar: Critical Path Traversal in gameName ParameterTalishar
- CVE-2026-28787OneUptime has WebAuthn 2FA bypass: server accepts client-supplied challenge instead of server-stored value, allowing credential replayoneuptime · @oneuptime/common
- CVE-2026-28683Gokapi: Stored XSS in SVG HotlinksForceu Gokapi · github.com/forceu/gokapi
- CVE-2026-28681IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email linksirrdnet irrd · irrd
- CVE-2026-28679HomeGallery: Path Traversal (Arbitrary File Read)xemle home-gallery
- CVE-2026-28677OpenSift: Insufficient URL destination restrictions in ingest flow could enable SSRF-style internal accessOpenSift
- CVE-2026-28676OpenSift: Insufficient path containment checks in storage helpers could allow path traversal-style file operationsOpenSift
- CVE-2026-28507Idno: Remote Code Execution via Chained Import File Write and Template Path Traversalidno · idno/known
- CVE-2026-27603Chartbrew: Unauthenticated Chart Filter Endpoint: POST /project/:project_id/chart/:chart_id/filter missing verifyToken + checkPermissionschartbrew
- CVE-2026-27005Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)chartbrew
- CVE-2026-25888Chartbrew: Remote Code Execution (RCE) via Vulnerable APIchartbrew
- CVE-2026-25887Chartbrew: Remote Code Execution (RCE) via MongoDB Dataset Querychartbrew
- CVE-2026-29041Chamilo: Authenticated Remote Code Execution via Unrestricted File Uploadchamilo-lms
- CVE-2025-59541Chamilo: CSRF Vulnerability in Project Deletionchamilo-lms
- CVE-2025-55289Chamilo: Stored Cross Site Scripting in Skills Argumentationchamilo-lms
- CVE-2026-29093WWBN AVideo: Unauthenticated PHP session store exposed to host network via published memcached portWWBN AVideo · wwbn/avideo
- CVE-2026-3613Wavlink WL-NU516U1 login.cgi sub_401A0C stack-based overflowWavlink WL-NU516U1
- CVE-2026-3612Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injectionWavlink WL-NU516U1
- CVE-2025-69650GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data.
- CVE-2025-69654A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 (2025-12-1
- CVE-2025-70363Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access
Medium, low and unrated 73
- CVE-2026-1981Winston AI <= 0.0.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Deletionwinstonai HUMN-1 AI Website Scanner & Human Certification b…
- CVE-2026-1644WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejectionglowlogix WP Frontend Profile
- CVE-2026-2371Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load'wpsoul Greenshift – animation and page builder blocks
- CVE-2026-27142URLs in meta content attribute actions are not escaped in html/templateGo standard library html/template · stdlib
- CVE-2026-27139FileInfo can escape from a Root in osGo standard library os · stdlib
- CVE-2026-27138Panic in name constraint checking for malformed certificates in crypto/x509Go standard library crypto/x509 · stdlib
- CVE-2026-30241Mercurius: queryDepth limit bypassed for WebSocket subscriptionsmercurius-js mercurius · mercurius
- CVE-2026-30238Group-Office: Reflected XSS in JavaScript contextIntermesh groupoffice
- CVE-2026-30237Group-Office: Self XSS in GroupOffice Installer License Page (install/license.php)Intermesh groupoffice
- CVE-2026-30231Flare: Private File IDOR via raw/direct endpointsFlintSH Flare
- CVE-2026-30227MimeKit: CRLF Injection in Quoted Local-Part Enables SMTP Command Injection and Email Forgeryjstedfast MimeKit · MimeKit
- CVE-2026-30233OliveTin: View permission not being checked when returning dashboardsOliveTin · github.com/OliveTin/OliveTin
- CVE-2026-30225OliveTin: RestartAction always runs actions as guestOliveTin · github.com/OliveTin/OliveTin
- CVE-2026-30224OliveTin: Session Fixation - Logout Fails to Invalidate Server-Side SessionOliveTin · github.com/OliveTin/OliveTin
- CVE-2026-29795stellar-xdr: `StringM::from_str` bypasses max length validationrs-stellar-xdr · stellar-xdr
- CVE-2026-29791Agentgateway: Missing parameter sanitization in MCP to OpenAPI conversionagentgateway · github.com/agentgateway/agentgateway
- CVE-2026-29790dbt-common: commonprefix() doesn't protect against path traversaldbt-labs dbt-common · dbt-common
- CVE-2026-30835Parse Server: Malformed `$regex` query leaks database error details in API responseparse-community parse-server · parse-server
- CVE-2026-30228Parse Server: File creation and deletion bypasses `readOnlyMasterKey` write restrictionparse-community parse-server · parse-server
- CVE-2026-30845Wekan Exposes Sensitive Data through Lack of Field Filtering During Board PublicationWekan
- CVE-2026-29110Cryptomator: Leaking of cleartext paths into log file in non-debug modecryptomator
- CVE-2026-3419Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validationfastify
- CVE-2026-30833Rocket.Chat: NoSQL injection in the EE ddp-streamer-serviceRocketChat Rocket.Chat
- CVE-2026-27027Everon api.everon.io Insufficiently Protected Credentialsapi.everon.io
- CVE-2026-27777Mobiliti e-mobi.hu Insufficiently Protected CredentialsMobiliti e-mobi.hu
- CVE-2026-2752Navtor NavBox allows information disclosure via the /api/ais-data endpoint.Navtor NavBox
- CVE-2018-25200OOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.phpZsoft OOP CMS BLOG
- CVE-2018-25198eToolz 3.4.8.0 Denial of Service via Buffer OverflowGaijin eToolz
- CVE-2018-25190Easyndexer 1.0 Cross-Site Request Forgery via createuser.phpSourceforge Easyndexer
- CVE-2018-25186Tina4 Stack 1.0.3 Cross-Site Request Forgery via profileTina4 Stack
- CVE-2018-25184Surreal ToDo 0.6.1.2 Local File Inclusion via index.phpGetsurreal Surreal ToDo
- CVE-2018-25177Data Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.phpSourceforge Data Center Audit
- CVE-2018-25174ABC ERP 0.6.4 Cross-Site Request Forgery via _configurar_perfil.phpAbc-Erp ABC ERP
- CVE-2018-25168Precurio Intranet Portal 2.0 Cross-Site Request Forgery Add AdminPrecurio Intranet Portal
- CVE-2026-28080WordPress Rank Math SEO PRO plugin <= 3.0.95 - Broken Access Control vulnerabilityRank Math SEO PRO
- CVE-2026-28106WordPress B2BKing Premium plugin < 5.4.20 - Open Redirection vulnerabilityKings Plugins B2BKing Premium
- CVE-2024-35644WordPress Preferred Languages plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilityPascal Birchler Preferred Languages
- CVE-2026-1468Cross-Site Request Forgery in QuickCMSOpenSolution QuickCMS
- CVE-2026-23925Unauthorized host creation via configuration.import API by low-privilege user with write permissionsZabbix
- CVE-2026-2830WP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath'wpallimport WP All Import – Drag & Drop Import for CSV, XML…
- CVE-2026-29073SiYuan: Direct SQL Query API accessible to Reader-level users enables unauthorized database accesssiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-29059Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publiclywindmill-labs windmill
- CVE-2026-29049melange: unbounded HTTP download in `melange update-cache` can exhaust disk in CIchainguard-dev melange · chainguard.dev/melange
- CVE-2026-29048HumHub: XSS in Button componenthumhub
- CVE-2026-29038changedetection.io: Reflected XSS in RSS Tag Error Responsedgtlmoon changedetection.io · changedetection-io
- CVE-2026-28804pypdf: Inefficient decoding of ASCIIHexDecode streamspy-pdf pypdf · pypdf
- CVE-2026-28801Natro Macro: Code Injection through Pattern/Path filesNatroTeam NatroMacro
- CVE-2026-28800Natro Macro: Malicious actions allowed through Discord RC Commands by any userNatroTeam NatroMacro
- CVE-2026-28438CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statementscocoindex-io cocoindex · cocoindex
- CVE-2026-1128WP eCommerce <= 3.15.1 - Coupon Deletion via CSRFWP eCommerce
- CVE-2026-28428Talishar: Authentication Bypass via Empty authKey Parameter Allows Unauthenticated Game ActionsTalishar
- CVE-2026-28685Kimai: API invoice endpoint missing customer-level access control (IDOR)kimai · kimai/kimai
- CVE-2026-29084Gokapi: CSRF in Login EndpointForceu Gokapi · github.com/forceu/gokapi
- CVE-2026-29061Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotionForceu Gokapi · github.com/forceu/gokapi
- CVE-2026-29060Gokapi: Privilege escalation with auth tokenForceu Gokapi · github.com/forceu/gokapi
- CVE-2026-28682Gokapi: Data Leak in Upload Status StreamForceu Gokapi · github.com/forceu/gokapi
- CVE-2026-28675OpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpointsOpenSift
- CVE-2026-28509LangBot has a Cross Site Scripting(XSS) Vulnerabilitylangbot-app LangBot
- CVE-2026-27605Chartbrew: Stored Cross-Site Scripting (XSS) via File Upload APIchartbrew
- CVE-2026-25877Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operationschartbrew
- CVE-2025-59544Chamilo: Unauthorized access to update category of any userchamilo-lms
- CVE-2025-59540Chamilo: Stored Cross-Site Scripting (XSS) in Chamilo LMS Exercise Feedbackchamilo-lms
- CVE-2026-25962MarkUs: Zip bomb in config upload enables DoSMarkUsProject Markus
- CVE-2026-27807MarkUs: YAML alias (‘billion laughs’) DoS in config uploadMarkUsProject Markus
- CVE-2026-3616DefaultFuction Jeson Customer Relationship Management System edit.php sql injectionDefaultFuction Jeson Customer Relationship Management System
- CVE-2026-3610HSC Cybersecurity Mailinspector URL mliUserValidation.php cross site scriptingHSC Cybersecurity Mailinspector
- CVE-2025-69644An issue was discovered in Binutils before 2.46.
- CVE-2025-69645Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information.
- CVE-2025-69646Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data.
- CVE-2025-69649GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header
- CVE-2025-69651GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malf
- CVE-2025-69652GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed
- CVE-2025-69653A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09-13, fixed in commit 1dbba8a88eaa40d15a8a9b70