CVEs published March 8, 2026
81 CVEs were published on March 8, 2026: 2 critical, 14 high.
- Published
- 81
- Critical
- 2
- High
- 14
- Medium
- 65
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 13
Most affected products
- code-projects Simple Flight Ticket Booking System
- 9
- Tenda F453
- 7
- Bytedesk
- 4
- itsourcecode University Management System
- 4
- SourceCodester Client Database Management System
- 4
- SourceCodester Sales and Inventory System
- 4
- 1024-lab SmartAdmin · lab1024 SmartAdmin
- 3
- projectworlds Online Art Gallery Shop
- 3
- UTT HiPER
- 3
- YiFang CMS
- 3
Critical 2
High 14
- CVE-2026-3787UltraVNC Windows Service cryptbase.dll uncontrolled search pathUltraVNC
- CVE-2026-3769Tenda F453 WrlclientSet stack-based overflowTenda F453
- CVE-2026-3768Tenda F453 WrlExtraSet formWrlExtraSet stack-based overflowTenda F453
- CVE-2026-3732Tenda F453 exeCommand strcpy stack-based overflowTenda F453
- CVE-2026-3729Tenda F453 PPTPDClient fromPptpUserAdd stack-based overflowTenda F453
- CVE-2026-3728Tenda F453 setcfm fromSetCfm stack-based overflowTenda F453
- CVE-2026-3727Tenda F453 QuickIndex sub_3C6C0 stack-based overflowTenda F453
- CVE-2026-3726Tenda F453 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowTenda F453
- CVE-2026-3715Wavlink WL-WN579X3-C firewall.cgi sub_40139C stack-based overflowWavlink WL-WN579X3-C
- CVE-2026-3701H3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflowH3C Magic B1
- CVE-2026-3700UTT HiPER 810G formConfigDnsFilterGlobal strcpy buffer overflowUTT HiPER
- CVE-2026-3699UTT HiPER 810G formRemoteControl strcpy buffer overflowUTT HiPER
- CVE-2026-3698UTT HiPER 810G NTP strcpy buffer overflowUTT HiPER
- CVE-2026-30910Crypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflowsIAMB Crypt::Sodium::XS
Medium, low and unrated 65
- CVE-2026-3789Bytedesk SpringAIGiteeRestController SpringAIGiteeRestService.java getModels server-side request forgeryBytedesk
- CVE-2026-3788Bytedesk SpringAIOpenrouterRestController SpringAIOpenrouterRestService.java getModels server-side request forgeryBytedesk
- CVE-2026-3786EasyCMS Request Parameter RbacuserAction.class.php sql injectionEasyCMS
- CVE-2026-3785EasyCMS Request Parameter RbacnodeAction.class.php sql injectionEasyCMS
- CVE-2026-3771SourceCodester/janobe Resort Reservation System accomodation.php sql injectionSourceCodester Resort Reservation System · janobe Resort Re…
- CVE-2026-3770SourceCodester Computer Laboratory Management System cross-site request forgerySourceCodester Computer Laboratory Management System
- CVE-2026-3767itsourcecode sanitize or validate this input teacher-attendance.php sql injectionitsourcecode sanitize or validate this input
- CVE-2026-3766SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scriptingSourceCodester Web-based Pharmacy Product Management System
- CVE-2026-3765itsourcecode University Management System att_single_view.php sql injectionitsourcecode University Management System
- CVE-2026-3764SourceCodester Client Database Management System superadmin_user_update.php improper authorizationSourceCodester Client Database Management System
- CVE-2026-3763code-projects Simple Flight Ticket Booking System showhistory.php cross site scriptingcode-projects Simple Flight Ticket Booking System
- CVE-2026-3762SourceCodester Client Database Management System Endpoint superadmin_delete_manager.php improper authorizationSourceCodester Client Database Management System
- CVE-2026-3761SourceCodester Client Database Management System Endpoint superadmin_user_delete.php improper authorizationSourceCodester Client Database Management System
- CVE-2026-3760itsourcecode University Management System view_result.php sql injectionitsourcecode University Management System
- CVE-2026-3759projectworlds Online Art Gallery Shop adminHome.php sql injectionprojectworlds Online Art Gallery Shop
- CVE-2026-3758projectworlds Online Art Gallery Shop adminHome.php sql injectionprojectworlds Online Art Gallery Shop
- CVE-2026-3757projectworlds Online Art Gallery Shop pass sql injectionprojectworlds Online Art Gallery Shop
- CVE-2026-3756SourceCodester Sales and Inventory System check_item_details.php sql injectionSourceCodester Sales and Inventory System
- CVE-2026-3755SourceCodester Sales and Inventory System POST check_customer_details.php sql injectionSourceCodester Sales and Inventory System
- CVE-2026-3754SourceCodester Sales and Inventory System add_stock.php sql injectionSourceCodester Sales and Inventory System
- CVE-2026-3753SourceCodester Sales and Inventory System add_sales_print.php sql injectionSourceCodester Sales and Inventory System
- CVE-2026-3752SourceCodester Employee Task Management System GET Parameter daily-task-report.php sql injectionSourceCodester Employee Task Management System
- CVE-2026-3751SourceCodester Employee Task Management System GET Parameter daily-attendance-report.php sql injectionSourceCodester Employee Task Management System
- CVE-2026-3750ContiNew Admin Storage Management S3ClientFactory.java URI.create server-side request forgeryContiNew Admin
- CVE-2026-3749Bytedesk SVG File UploadRestService.java handleFileUpload unrestricted uploadBytedesk
- CVE-2026-3748Bytedesk SVG File UploadRestController.java uploadFile unrestricted uploadBytedesk
- CVE-2026-3747itsourcecode University Management System add_result.php sql injectionitsourcecode University Management System
- CVE-2026-3746SourceCodester Simple Responsive Tourism Website Login Login.php sql injectionSourceCodester Simple Responsive Tourism Website
- CVE-2026-3745code-projects Student Web Portal profile.php sql injectioncode-projects Student Web Portal
- CVE-2026-3744code-projects Student Web Portal signup.php valreg_passwdation sql injectioncode-projects Student Web Portal
- CVE-2026-3743YiFang CMS D_singlePageGroup.php update cross site scriptingYiFang CMS
- CVE-2026-3742YiFang CMS D_singlePage.php update cross site scriptingYiFang CMS
- CVE-2026-3741YiFang CMS D_friendLink.php update cross site scriptingYiFang CMS
- CVE-2026-3740itsourcecode University Management System admin_search_student.php sql injectionitsourcecode University Management System
- CVE-2026-3739suitenumerique messages ThreadAccess serializers.py ThreadAccessSerializer improper authenticationsuitenumerique messages
- CVE-2026-3738SourceCodester Pet Grooming Management Software Financial Report improper authorizationSourceCodester Pet Grooming Management Software
- CVE-2026-3737SourceCodester Pet Grooming Management Software User Creation add_user.php improper authorizationSourceCodester Pet Grooming Management Software
- CVE-2026-3736code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injectioncode-projects Simple Flight Ticket Booking System
- CVE-2026-3735code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injectioncode-projects Simple Flight Ticket Booking System
- CVE-2026-3734SourceCodester Client Database Management System Endpoint fetch_manager_details.php improper authorizationSourceCodester Client Database Management System
- CVE-2026-3733xuxueli xxl-job JobInfoController.java server-side request forgeryxuxueli xxl-job
- CVE-2026-3731libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-boundslibssh
- CVE-2026-3730itsourcecode Free Hotel Reservation System index.php sql injectionitsourcecode Free Hotel Reservation System
- CVE-2026-37251024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine1024-lab SmartAdmin · lab1024 SmartAdmin
- CVE-2026-3724SourceCodester Patients Waiting Area Queue Management System checkin.php improper authorizationSourceCodester Patients Waiting Area Queue Management System
- CVE-2026-3723code-projects Simple Flight Ticket Booking System Admindelete.php sql injectioncode-projects Simple Flight Ticket Booking System
- CVE-2026-37211024-lab/lab1024 SmartAdmin Help Documentation HelpDocAddForm.java cross site scripting1024-lab SmartAdmin · lab1024 SmartAdmin
- CVE-2026-37201024-lab/lab1024 SmartAdmin Notice notice-form-drawer.vue cross site scripting1024-lab SmartAdmin · lab1024 SmartAdmin
- CVE-2026-3719Tsinghua Unigroup Electronic Archives System downLoad path traversalTsinghua Unigroup Electronic Archives System
- CVE-2026-3716Wavlink WL-WN579X3-C adm.cgi sub_401AD4 cross site scriptingWavlink WL-WN579X3-C
- CVE-2026-3714OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engineOpenCart
- CVE-2026-3713pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflowpnggroup libpng
- CVE-2026-3711code-projects Simple Flight Ticket Booking System Adminupdate.php sql injectioncode-projects Simple Flight Ticket Booking System
- CVE-2026-3710code-projects Simple Flight Ticket Booking System Adminadd.php sql injectioncode-projects Simple Flight Ticket Booking System
- CVE-2026-3709code-projects Simple Flight Ticket Booking System register.php sql injectioncode-projects Simple Flight Ticket Booking System
- CVE-2026-3708code-projects Simple Flight Ticket Booking System login.php sql injectioncode-projects Simple Flight Ticket Booking System
- CVE-2026-3707MrNanko webp4j gif_decoder.c DecodeGifFromMemory integer overflowMrNanko webp4j
- CVE-2026-3706mkj Dropbear S Range Check curve25519.c unpackneg signature verificationmkj Dropbear
- CVE-2026-3705code-projects Simple Flight Ticket Booking System Adminsearch.php sql injectioncode-projects Simple Flight Ticket Booking System
- CVE-2026-3702SourceCodester Loan Management System index.php cross site scriptingSourceCodester Loan Management System
- CVE-2026-3704Wavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injectionWavlink NU516U1
- CVE-2026-3697Planet ICG-2510 Language Package Configuration httpd sub_40C8E4 stack-based overflowPlanet ICG-2510
- CVE-2026-3696Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injectionTotolink N300RH
- CVE-2026-3695SourceCodester Modern Image Gallery App delete.php path traversalSourceCodester Modern Image Gallery App
- CVE-2026-3693Shy2593666979 AgentChat User Endpoint user.py update_user_info resource injectionShy2593666979 AgentChat