# CVEs published 2026-03-10

346 CVEs were published on March 10, 2026: 28 critical, 183 high. Days are UTC.

- [CVE-2026-2569](https://cve.now/CVE-2026-2569.md): Dear Flipbook \<= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels (CVSS 6.4, dearhive Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF emb…)
- [CVE-2026-27270](https://cve.now/CVE-2026-27270.md): Illustrator | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Illustrator Desktop)
- [CVE-2026-27271](https://cve.now/CVE-2026-27271.md): Illustrator | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Illustrator Desktop)
- [CVE-2026-21333](https://cve.now/CVE-2026-21333.md): Illustrator | Untrusted Search Path (CWE-426) (CVSS 8.6, Adobe Illustrator Desktop)
- [CVE-2026-27268](https://cve.now/CVE-2026-27268.md): Illustrator | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Illustrator Desktop)
- [CVE-2026-21362](https://cve.now/CVE-2026-21362.md): Illustrator | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Illustrator Desktop)
- [CVE-2026-27272](https://cve.now/CVE-2026-27272.md): Illustrator | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Illustrator Desktop)
- [CVE-2026-27267](https://cve.now/CVE-2026-27267.md): Illustrator | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe Illustrator Desktop)
- [CVE-2025-22850](https://cve.now/CVE-2025-22850.md): Time-of-check time-of-use race condition in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure (CVSS 5.6, Intel(R) reference platforms may allow an information discl…)
- [CVE-2025-22444](https://cve.now/CVE-2025-22444.md): Exposure of resource to wrong sphere in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure. (CVSS 5.6, Intel(R) reference platforms may allow an information discl…)
- [CVE-2025-20105](https://cve.now/CVE-2025-20105.md): Improper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms may allow an escalation of privilege. (CVSS 8.7, Intel(R) reference platforms may allow an escalation of pri…)
- [CVE-2025-20073](https://cve.now/CVE-2025-20073.md): Improper buffer restrictions in the UEFI DXE module for some Intel(R) Reference Platforms within UEFI may allow an information disclosure. (CVSS 1.8, Intel(R) Reference Platforms)
- [CVE-2025-20068](https://cve.now/CVE-2025-20068.md): Improper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference platforms may allow an escalation of privilege. (CVSS 7.1, Intel(R) reference platforms may allow an escalation of pri…)
- [CVE-2025-20064](https://cve.now/CVE-2025-20064.md): Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalation of privilege. (CVSS 8.7, Intel(R) reference platforms may allow an escalation of pri…)
- [CVE-2025-20028](https://cve.now/CVE-2025-20028.md): Time-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an escalation of privile (CVSS 7.1, Intel(R) reference platforms may allow an escalation of pri…)
- [CVE-2025-20027](https://cve.now/CVE-2025-20027.md): Improper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may allow an escalation of privilege. (CVSS 7.1, Intel(R) reference platforms may allow an escalation of pri…)
- [CVE-2025-20005](https://cve.now/CVE-2025-20005.md): Improper buffer restrictions in some UEFI firmware for some Intel(R) reference platforms may allow an escalation of privilege. (CVSS 5.6, Intel(R) reference platforms may allow an escalation of pri…)
- [CVE-2025-20096](https://cve.now/CVE-2025-20096.md): Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. (CVSS 5.9, Intel Reference Platforms may allow an escalation of privil…)
- [CVE-2026-31838](https://cve.now/CVE-2026-31838.md): Istio HTTP debug endpoints on port 15014 to enforce namespace-based authorization, preventing cross-namespace proxy data access. (CVSS 6.9, istio)
- [CVE-2026-31837](https://cve.now/CVE-2026-31837.md): Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails. (CVSS 8.7, istio)
- [CVE-2026-31834](https://cve.now/CVE-2026-31834.md): Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks (CVSS 7.2, Umbraco-CMS · Umbraco.Cms)
- [CVE-2026-31833](https://cve.now/CVE-2026-31833.md): Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering (CVSS 6.7, Umbraco-CMS · Umbraco.Cms)
- [CVE-2026-31832](https://cve.now/CVE-2026-31832.md): Umbraco Backoffice API Allows Unauthorized Modification of Domain Data (CVSS 5.4, Umbraco-CMS · Umbraco.Cms)
- [CVE-2026-31830](https://cve.now/CVE-2026-31830.md): sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest (CVSS 7.5, sigstore-ruby · sigstore)
- [CVE-2026-31829](https://cve.now/CVE-2026-31829.md): Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access (CVSS 7.1, FlowiseAI Flowise · flowise +1)
- [CVE-2026-31828](https://cve.now/CVE-2026-31828.md): Parse Server has an LDAP injection via unsanitized user input in DN and group filter construction (CVSS 6.0, parse-community parse-server · parse-server)
- [CVE-2026-27221](https://cve.now/CVE-2026-27221.md): Acrobat Reader | Improper Certificate Validation (CWE-295) (CVSS 5.5, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-27278](https://cve.now/CVE-2026-27278.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-27220](https://cve.now/CVE-2026-27220.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat DC · Adobe Acrobat Reader DC +1)
- [CVE-2026-31827](https://cve.now/CVE-2026-31827.md): Alienbin: TTL Index Race Condition allows unauthorized deletion of other users data (CVSS 7.1, Blue-B Alienbin)
- [CVE-2026-31826](https://cve.now/CVE-2026-31826.md): pypdf: manipulated stream length values can exhaust RAM (CVSS 6.8, py-pdf pypdf · pypdf)
- [CVE-2026-28807](https://cve.now/CVE-2026-28807.md): Path Traversal in wisp.serve\_static allows arbitrary file read (CVSS 8.7, gleam-wisp wisp)
- [CVE-2026-31825](https://cve.now/CVE-2026-31825.md): Sylius has a DQL Injection via API Order Filters (CVSS 5.3, Sylius · sylius/sylius)
- [CVE-2026-31824](https://cve.now/CVE-2026-31824.md): Sylius has a Promotion Usage Limit Bypass via Race Condition (CVSS 8.2, Sylius · sylius/sylius)
- [CVE-2026-28806](https://cve.now/CVE-2026-28806.md): Improper authorization in device bulk actions and device update API allows cross-organization device control (CVSS 9.4, nerves-hub nerves\_hub\_web)
- [CVE-2026-31823](https://cve.now/CVE-2026-31823.md): Sylius has Authenticated Stored XSS (CVSS 4.8, Sylius · sylius/sylius)
- [CVE-2026-31822](https://cve.now/CVE-2026-31822.md): Sylius has a XSS vulnerability in checkout login form (CVSS 5.3, Sylius · sylius/sylius)
- [CVE-2026-31821](https://cve.now/CVE-2026-31821.md): Sylius is Missing Authorization in API v2 Add Item Endpoint (CVSS 6.9, Sylius · sylius/sylius)
- [CVE-2026-31820](https://cve.now/CVE-2026-31820.md): Sylius affected by IDOR in Cart and Checkout LiveComponents (CVSS 7.1, Sylius · sylius/sylius)
- [CVE-2026-31819](https://cve.now/CVE-2026-31819.md): Sylius has an Open Redirect via Referer Header (CVSS 6.9, Sylius · sylius/sylius)
- [CVE-2026-31817](https://cve.now/CVE-2026-31817.md): OliveTin's unsafe parsing of UniqueTrackingId can be used to write files (CVSS 8.5, OliveTin · github.com/OliveTin/OliveTin)
- [CVE-2026-31815](https://cve.now/CVE-2026-31815.md): django-unicorn affected by component state manipulation via unvalidated attribute access (CVSS 5.3, django-commons django-unicorn · django-unicorn)
- [CVE-2026-31812](https://cve.now/CVE-2026-31812.md): Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing (CVSS 8.7, quinn-rs quinn · quinn-proto)
- [CVE-2026-31808](https://cve.now/CVE-2026-31808.md): file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header (CVSS 5.3, sindresorhus file-type · file-type)
- [CVE-2026-31809](https://cve.now/CVE-2026-31809.md): SiYuan has a SVG Sanitizer Bypass via Whitespace in \`javascript:\` URI — Unauthenticated XSS (CVSS 6.4, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-31807](https://cve.now/CVE-2026-31807.md): SiYuan has a SVG Sanitizer Bypass via \`\<animate\>\` Element — Unauthenticated XSS (CVSS 6.4, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-31801](https://cve.now/CVE-2026-31801.md): zot create-only policy allows overwrite attempts of existing latest tag (update permission not required) (CVSS 7.7, project-zot zot · zotregistry.dev/zot/v2 +1)
- [CVE-2026-31800](https://cve.now/CVE-2026-31800.md): Parse Server: Classes \`\_GraphQLConfig\` and \`\_Audience\` master key bypass via generic class routes (CVSS 8.8, parse-community parse-server · parse-server)
- [CVE-2026-30972](https://cve.now/CVE-2026-30972.md): Parse Server has a rate limit bypass via batch request endpoint (CVSS 6.9, parse-community parse-server · parse-server)
- [CVE-2026-0124](https://cve.now/CVE-2026-0124.md): There is a possible out of bounds write due to a missing bounds check. (CVSS 10.0, Google Android)
- [CVE-2026-0123](https://cve.now/CVE-2026-0123.md): In EfwApTransport::ProcessRxRing of efw\_ap\_transport.cc, there is a possible out of bounds write due to a missing bounds check. (CVSS 8.4, Google Android)
- [CVE-2026-0122](https://cve.now/CVE-2026-0122.md): In multiple places, there is a possible out of bounds write due to memory corruption. (CVSS 8.4, Google Android)
- [CVE-2026-0121](https://cve.now/CVE-2026-0121.md): In VPU, there is a possible use-after-free read due to a race condition. (CVSS 2.9, Google Android)
- [CVE-2026-0120](https://cve.now/CVE-2026-0120.md): In modem, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 9.8, Google Android)
- [CVE-2026-0119](https://cve.now/CVE-2026-0119.md): In usim\_SendMCCMNCIndMsg of usim\_Registration.c, there is a possible out of bounds write due to memory corruption. (CVSS 6.8, Google Android)
- [CVE-2026-0118](https://cve.now/CVE-2026-0118.md): In oobconfig, there is a possible bypass of carrier restrictions due to a logic error. (CVSS 8.4, Google Android)
- [CVE-2026-0117](https://cve.now/CVE-2026-0117.md): In mfc\_dec\_dqbuf of mfc\_dec\_v4l2.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 8.4, Google Android)
- [CVE-2026-0116](https://cve.now/CVE-2026-0116.md): In \_\_mfc\_handle\_released\_buf of mfc\_core\_isr.c, there is a possible out of bounds write due to a missing bounds check. (CVSS 9.8, Google Android)
- [CVE-2026-0115](https://cve.now/CVE-2026-0115.md): In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure. (CVSS 2.1, Google Android)
- [CVE-2026-0114](https://cve.now/CVE-2026-0114.md): In Modem, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 9.8, Google Android)
- [CVE-2026-0113](https://cve.now/CVE-2026-0113.md): In ns\_GetUserData of ns\_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 9.8, Google Android)
- [CVE-2026-0112](https://cve.now/CVE-2026-0112.md): In vpu\_open\_inst of vpu\_ioctl.c, there is a possible use after free due to a race condition. (CVSS 7.4, Google Android)
- [CVE-2026-0111](https://cve.now/CVE-2026-0111.md): In ns\_GetUserData of ns\_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 9.8, Google Android)
- [CVE-2026-30967](https://cve.now/CVE-2026-30967.md): Parse Server OAuth2 authentication adapter account takeover via identity spoofing (CVSS 7.6, parse-community parse-server · parse-server)
- [CVE-2026-0110](https://cve.now/CVE-2026-0110.md): In MM\_DATA\_IND of cn\_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. (CVSS 9.8, Google Android)
- [CVE-2026-0109](https://cve.now/CVE-2026-0109.md): In dhd\_tcpdata\_info\_get of dhd\_ip.c, there is a possible Denial of Service due to a precondition check failure. (CVSS 7.5, Google Android)
- [CVE-2026-0108](https://cve.now/CVE-2026-0108.md): The register protection of the PowerVR GPU is incorrectly configured. (CVSS 4.0, Google Android)
- [CVE-2026-0107](https://cve.now/CVE-2026-0107.md): In gmc\_ddr\_handle\_mba\_mr\_req of gmc\_mba\_ddr.c, there is a possible escalation of privileges due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2025-36920](https://cve.now/CVE-2025-36920.md): In hyp\_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. (CVSS 8.4, Google Android)
- [CVE-2026-30966](https://cve.now/CVE-2026-30966.md): Parse Server role escalation and CLP bypass via direct \`\_Join\` table write (CVSS 10.0, parse-community parse-server · parse-server)
- [CVE-2026-30965](https://cve.now/CVE-2026-30965.md): Parse Server session token exfiltration via \`redirectClassNameForKey\` query parameter (CVSS 9.9, parse-community parse-server · parse-server)
- [CVE-2026-30962](https://cve.now/CVE-2026-30962.md): Parse Server has a protected fields bypass via logical query operators (CVSS 7.1, parse-community parse-server · parse-server)
- [CVE-2026-30954](https://cve.now/CVE-2026-30954.md): LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy() (CVSS 5.3, Kovah LinkAce)
- [CVE-2026-30953](https://cve.now/CVE-2026-30953.md): LinkAce affected by SSRF via link creation: NoPrivateIpRule not applied to LinkStoreRequest (CVSS 7.7, Kovah LinkAce)
- [CVE-2025-66413](https://cve.now/CVE-2025-66413.md): Git for Windows leaks NTLM hash when cloning from an attacker-controlled server (CVSS 7.4, git-for-windows git)
- [CVE-2026-30952](https://cve.now/CVE-2026-30952.md): liquidjs has a path traversal fallback vulnerability (CVSS 8.7, harttle liquidjs · liquidjs)
- [CVE-2026-30951](https://cve.now/CVE-2026-30951.md): Sequelize v6 Vulnerable to SQL Injection via JSON Column Cast Type (CVSS 7.5, sequelize)
- [CVE-2026-30949](https://cve.now/CVE-2026-30949.md): Parse Server is missing audience validation in Keycloak authentication adapter (CVSS 7.6, parse-community parse-server · parse-server)
- [CVE-2026-30948](https://cve.now/CVE-2026-30948.md): Parse Server has stored cross-site scripting (XSS) via SVG file upload (CVSS 8.3, parse-community parse-server · parse-server)
- [CVE-2026-30947](https://cve.now/CVE-2026-30947.md): Parse Server ha a bypass of class-level permissions in LiveQuery (CVSS 8.7, parse-community parse-server · parse-server)
- [CVE-2025-13213](https://cve.now/CVE-2025-13213.md): Multiple vulnerabilities in IBM Aspera Orchestrator (CVSS 5.4, IBM Aspera Orchestrator)
- [CVE-2026-30946](https://cve.now/CVE-2026-30946.md): Parse Server affected by denial-of-service via unbounded query complexity in REST and GraphQL API (CVSS 8.7, parse-community parse-server · parse-server)
- [CVE-2026-30837](https://cve.now/CVE-2026-30837.md): Elysia has a string URL format redos (CVSS 7.5, elysiajs elysia · elysia)
- [CVE-2026-29793](https://cve.now/CVE-2026-29793.md): NoSQL Injection via WebSocket id Parameter in MongoDB Adapter (CVSS 9.3, @feathersjs mongodb · @feathersjs/mongodb)
- [CVE-2025-13219](https://cve.now/CVE-2025-13219.md): Multiple vulnerabilities in IBM Aspera Orchestrator (CVSS 5.9, IBM Aspera Orchestrator)
- [CVE-2026-29792](https://cve.now/CVE-2026-29792.md): Feathersjs has an OAuth Callback Account Takeover (CVSS 9.3, feathersjs feathers · @feathersjs authentication-oauth +1)
- [CVE-2026-29177](https://cve.now/CVE-2026-29177.md): Craft Commerce has Stored XSS in Craft Commerce Order Details Slideout (CVSS 1.9, craftcms commerce · craftcms/commerce)
- [CVE-2026-29176](https://cve.now/CVE-2026-29176.md): Craft Commerce has Stored XSS in Inventory Location Name (CVSS 4.8, craftcms commerce · craftcms/commerce)
- [CVE-2025-36226](https://cve.now/CVE-2025-36226.md): Multiple vulnerabilities in IBM Aspera Faspex (CVSS 5.4, IBM Aspera Faspex)
- [CVE-2026-29175](https://cve.now/CVE-2026-29175.md): Multiple Stored XSS in Commerce Inventory Page Leading to Session Hijacking (CVSS 8.6, craftcms commerce · craftcms/commerce)
- [CVE-2025-36227](https://cve.now/CVE-2025-36227.md): Multiple vulnerabilities in IBM Aspera Faspex (CVSS 5.4, IBM Aspera Faspex)
- [CVE-2026-29174](https://cve.now/CVE-2026-29174.md): Craft Commerce has a SQL Injection in Commerce Inventory Table Sorting (CVSS 8.7, craftcms commerce · craftcms/commerce)
- [CVE-2026-29173](https://cve.now/CVE-2026-29173.md): Craft Commerce has Stored XSS while updating Order Status from Orders Table (CVSS 1.9, craftcms commerce · craftcms/commerce)
- [CVE-2026-2713](https://cve.now/CVE-2026-2713.md): IBM Trusteer Rapport installer affected by uncontrolled search path element vulnerability (CVSS 7.4, IBM Trusteer Rapport installer)
- [CVE-2026-29172](https://cve.now/CVE-2026-29172.md): Craft Commerce has a SQL Injection in Commerce Purchasables Table Sorting (CVSS 8.7, craftcms commerce · craftcms/commerce)
- [CVE-2026-29113](https://cve.now/CVE-2026-29113.md): Craft has a potential information disclosure vulnerability in preview tokens (CVSS 2.3, craftcms cms · craftcms/cms)
- [CVE-2025-48611](https://cve.now/CVE-2025-48611.md): In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check. (CVSS 10.0, Google Android)
- [CVE-2026-28495](https://cve.now/CVE-2026-28495.md): GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php (CVSS 9.7, GetSimpleCMS-CE)
- [CVE-2026-26330](https://cve.now/CVE-2026-26330.md): Envoy global rate limit may crash when the response phase limit is enabled and the response phase request is failed directly (CVSS 5.3, envoyproxy envoy · github.com/envoyproxy/envoy)
- [CVE-2026-26311](https://cve.now/CVE-2026-26311.md): Envoy HTTP: filter chain execution on reset streams causing UAF crash (CVSS 5.9, envoyproxy envoy · github.com/envoyproxy/envoy)
- [CVE-2026-26310](https://cve.now/CVE-2026-26310.md): Crash for scoped ip address in Envoy during DNS (CVSS 5.9, envoyproxy envoy · github.com/envoyproxy/envoy)
- [CVE-2026-26309](https://cve.now/CVE-2026-26309.md): Envoy has an off-by-one write in JsonEscaper::escapeString() (CVSS 5.3, envoyproxy envoy · github.com/envoyproxy/envoy)
- [CVE-2026-26123](https://cve.now/CVE-2026-26123.md): Microsoft Authenticator Information Disclosure Vulnerability (CVSS 5.5, Microsoft Authenticator for Android · Microsoft Authenticat…)
- [CVE-2026-26308](https://cve.now/CVE-2026-26308.md): Envoy has an RBAC Header Validation Bypass via Multi-Value Header Concatenation (CVSS 7.5, envoyproxy envoy · github.com/envoyproxy/envoy)
- [CVE-2026-3582](https://cve.now/CVE-2026-3582.md): Incorrect Authorization in GitHub Enterprise Server allows access to issue and commit search results without repo scope (CVSS 5.3, GitHub Enterprise Server)
- [CVE-2026-2266](https://cve.now/CVE-2026-2266.md): Improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scripting via task list content and enabled arbitrary HTML injection (CVSS 7.4, GitHub Enterprise Server)
- [CVE-2026-27825](https://cve.now/CVE-2026-27825.md): MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download\_path in confluence\_download\_attachment (CVSS 9.1, sooperset mcp-atlassian · mcp-atlassian)
- [CVE-2026-23868](https://cve.now/CVE-2026-23868.md): Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. (CVSS 5.1, giflib)
- [CVE-2026-27218](https://cve.now/CVE-2026-27218.md): Substance3D - Painter | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2026-27219](https://cve.now/CVE-2026-27219.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2026-27214](https://cve.now/CVE-2026-27214.md): Substance3D - Painter | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2026-21364](https://cve.now/CVE-2026-21364.md): Substance3D - Painter | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2026-21365](https://cve.now/CVE-2026-21365.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2026-27217](https://cve.now/CVE-2026-27217.md): Substance3D - Painter | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2026-27216](https://cve.now/CVE-2026-27216.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2026-21363](https://cve.now/CVE-2026-21363.md): Substance3D - Painter | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2026-27215](https://cve.now/CVE-2026-27215.md): Substance3D - Painter | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2026-27826](https://cve.now/CVE-2026-27826.md): MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers (CVSS 8.2, sooperset mcp-atlassian · mcp-atlassian)
- [CVE-2026-27274](https://cve.now/CVE-2026-27274.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2026-27277](https://cve.now/CVE-2026-27277.md): Substance3D - Stager | Use After Free (CWE-416) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2026-27273](https://cve.now/CVE-2026-27273.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2026-27275](https://cve.now/CVE-2026-27275.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2026-27276](https://cve.now/CVE-2026-27276.md): Substance3D - Stager | Use After Free (CWE-416) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2026-27279](https://cve.now/CVE-2026-27279.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2026-28292](https://cve.now/CVE-2026-28292.md): simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE (CVSS 9.8, steveukx simple-git · simple-git)
- [CVE-2026-27269](https://cve.now/CVE-2026-27269.md): Premiere Pro | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe Premiere)
- [CVE-2026-27281](https://cve.now/CVE-2026-27281.md): DNG SDK | Integer Overflow or Wraparound (CWE-190) (CVSS 5.5, Adobe DNG Software Development Kit)
- [CVE-2026-27280](https://cve.now/CVE-2026-27280.md): DNG SDK | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe DNG Software Development Kit)
- [CVE-2026-30980](https://cve.now/CVE-2026-30980.md): iccDEV has a stack overflow in CIccBasicStructFactory::CreateStruct() (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-31797](https://cve.now/CVE-2026-31797.md): iccDEV has a heap out-of-bounds read in CTiffImg::ReadLine() (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2026-31796](https://cve.now/CVE-2026-31796.md): iccDEV has a heap-based buffer overflow in icCurvesFromXml() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-31795](https://cve.now/CVE-2026-31795.md): iccDEV has a stack buffer overflow write in CIccXform3DLut::Apply() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-31794](https://cve.now/CVE-2026-31794.md): iccDEV has a SEGV in CIccCLUT::Interp3d() (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-31793](https://cve.now/CVE-2026-31793.md): iccDEV has a SEGV in CIccCalculatorFunc::ApplySequence() (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-31792](https://cve.now/CVE-2026-31792.md): iccDEV has a null pointer dereference in CIccTagXmlStruct::ParseTag() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-30987](https://cve.now/CVE-2026-30987.md): iccDEV has a stack buffer overflow in CIccTagNum\<(icTagTypeSignature)\>::GetValues() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-30986](https://cve.now/CVE-2026-30986.md): iccDEV has a heap-based buffer overflow write in CIccCLUT::Interp3d() (CVSS 5.5, InternationalColorConsortium iccDEV)
- [CVE-2026-30985](https://cve.now/CVE-2026-30985.md): iccDEV has a heap-based buffer overflow write in CIccMatrixMath::SetRange() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-30984](https://cve.now/CVE-2026-30984.md): iccDEV has a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence() (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2026-30983](https://cve.now/CVE-2026-30983.md): iccDEV has a stack buffer overflow in icFixXml() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-30982](https://cve.now/CVE-2026-30982.md): iccDEV has a heap out-of-bounds read in CIccPcsXform::pushXYZConvert() (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2026-30981](https://cve.now/CVE-2026-30981.md): iccDEV has a heap-buffer-overflow read in CIccXmlArrayType\<\> (CVSS 6.1, InternationalColorConsortium iccDEV)
- [CVE-2026-30979](https://cve.now/CVE-2026-30979.md): iccDEV has a heap-based buffer overflow in CIccCalculatorFunc::InitSelectOp() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-3306](https://cve.now/CVE-2026-3306.md): Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write access (CVSS 5.3, GitHub Enterprise Server)
- [CVE-2026-30978](https://cve.now/CVE-2026-30978.md): Heap-use-after-free in CIccCmm::AddXform() (CVSS 7.8, InternationalColorConsortium iccDEV)
- [CVE-2026-30977](https://cve.now/CVE-2026-30977.md): RenderBlocking has Stored XSS in renderblocking-css with Inline Assets mode (CVSS 2.0, lihaohong6 RenderBlocking)
- [CVE-2026-3854](https://cve.now/CVE-2026-3854.md): Remote code execution via git push option injection in GitHub Enterprise Server (CVSS 8.7, GitHub Enterprise Server)
- [CVE-2026-30974](https://cve.now/CVE-2026-30974.md): Copyparty volflag \`nohtml\` did not block javascript in svg files (CVSS 4.6, 9001 copyparty · copyparty)
- [CVE-2026-30973](https://cve.now/CVE-2026-30973.md): Zip Slip arbitrary file write in @appium/support ZIP extraction (CVSS 6.5, @appium support · @appium/support)
- [CVE-2026-30970](https://cve.now/CVE-2026-30970.md): Session authentication bypass in Coral Server session creation endpoint (CVSS 8.8, Coral-Protocol coral-server)
- [CVE-2026-23240](https://cve.now/CVE-2026-23240.md): tls: Fix race condition in tls\_sw\_cancel\_work\_tx() (CVSS 9.8, Linux)
- [CVE-2026-23239](https://cve.now/CVE-2026-23239.md): espintcp: Fix race condition in espintcp\_close() (CVSS 7.8, Linux)
- [CVE-2026-30969](https://cve.now/CVE-2026-30969.md): Coral Server has insufficient agent authentication in session communication channels (CVSS 7.6, Coral-Protocol coral-server)
- [CVE-2026-30968](https://cve.now/CVE-2026-30968.md): Coral Server has insufficient validation of agent identity for SSE connections (CVSS 8.6, Coral-Protocol coral-server)
- [CVE-2026-2273](https://cve.now/CVE-2026-2273.md): CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on th (CVSS 7.2, Schneider Electric EcoStruxure™ Automation Expert)
- [CVE-2026-30964](https://cve.now/CVE-2026-30964.md): Webauthn Framework: allowed\_origins collapses URL-like origins to host-only values, bypassing exact origin validation (CVSS 5.4, web-auth webauthn-framework · web-auth webauthn-lib +4)
- [CVE-2026-30960](https://cve.now/CVE-2026-30960.md): RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface (CVSS 9.4, Apich-Organization rssn · rssn)
- [CVE-2026-1286](https://cve.now/CVE-2026-1286.md): CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote c (CVSS 7.0, Schneider Electric EcoStruxure™ Foxboro DCS)
- [CVE-2026-30959](https://cve.now/CVE-2026-30959.md): OneUptime has WhatsApp Resend Verification Authorization Bypass (CVSS 5.3, oneuptime · @oneuptime/common)
- [CVE-2025-13902](https://cve.now/CVE-2025-13902.md): CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition (CVSS 5.1, Schneider Electric Modicon Controllers M241/M251 · Schneide…)
- [CVE-2026-26144](https://cve.now/CVE-2026-26144.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 7.5, Microsoft 365 Apps for Enterprise)
- [CVE-2026-26141](https://cve.now/CVE-2026-26141.md): Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Automation Hybrid Worker Windows Extension)
- [CVE-2026-26130](https://cve.now/CVE-2026-26130.md): ASP.NET Core Denial of Service Vulnerability (CVSS 7.5, Microsoft ASP.NET Core · Microsoft.AspNetCore.App.Runti… +11)
- [CVE-2026-26118](https://cve.now/CVE-2026-26118.md): Azure MCP Server Tools Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Azure MCP Server Tools · Azure.Mcp +2)
- [CVE-2026-26117](https://cve.now/CVE-2026-26117.md): Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Arc Enabled Servers - Azure Connected Machine Age…)
- [CVE-2026-26110](https://cve.now/CVE-2026-26110.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2026-26109](https://cve.now/CVE-2026-26109.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-26108](https://cve.now/CVE-2026-26108.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-26107](https://cve.now/CVE-2026-26107.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-26106](https://cve.now/CVE-2026-26106.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-23665](https://cve.now/CVE-2026-23665.md): Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Linux Virtual Machines with Azure Diagnosti…)
- [CVE-2026-23662](https://cve.now/CVE-2026-23662.md): Azure IoT Explorer Information Disclosure Vulnerability (CVSS 7.5, Microsoft Azure IoT Explorer)
- [CVE-2026-23661](https://cve.now/CVE-2026-23661.md): Azure IoT Explorer Information Disclosure Vulnerability (CVSS 7.5, Microsoft Azure IoT Explorer)
- [CVE-2026-23654](https://cve.now/CVE-2026-23654.md): GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability (CVSS 8.8, Microsoft GitHub Repo: Zero Shot scFoundation)
- [CVE-2026-26148](https://cve.now/CVE-2026-26148.md): Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft Azure AD SSH Login extension for Linux)
- [CVE-2026-23674](https://cve.now/CVE-2026-23674.md): MapUrlToZone Security Feature Bypass Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-26127](https://cve.now/CVE-2026-26127.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET · Microsoft.Bcl.Memory +12)
- [CVE-2026-26134](https://cve.now/CVE-2026-26134.md): Microsoft Office Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Office for Android)
- [CVE-2026-26132](https://cve.now/CVE-2026-26132.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26131](https://cve.now/CVE-2026-26131.md): .NET Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft .NET · Microsoft.NetCore.App.Runtime.linux-arm +5)
- [CVE-2026-26128](https://cve.now/CVE-2026-26128.md): Windows SMB Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-26116](https://cve.now/CVE-2026-26116.md): SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2026-26115](https://cve.now/CVE-2026-26115.md): SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2026-26121](https://cve.now/CVE-2026-26121.md): Azure IOT Explorer Spoofing Vulnerability (CVSS 7.5, Microsoft Azure IoT Explorer)
- [CVE-2026-20967](https://cve.now/CVE-2026-20967.md): System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft System Center Operations Manager)
- [CVE-2026-23656](https://cve.now/CVE-2026-23656.md): Windows App Installer Spoofing Vulnerability (CVSS 5.9, Microsoft Windows App Client for Windows Desktop)
- [CVE-2026-26114](https://cve.now/CVE-2026-26114.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-26113](https://cve.now/CVE-2026-26113.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +2)
- [CVE-2026-26112](https://cve.now/CVE-2026-26112.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2026-26111](https://cve.now/CVE-2026-26111.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-26105](https://cve.now/CVE-2026-26105.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 8.1, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2026-25190](https://cve.now/CVE-2026-25190.md): Windows GDI Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-25189](https://cve.now/CVE-2026-25189.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-25188](https://cve.now/CVE-2026-25188.md): Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-25187](https://cve.now/CVE-2026-25187.md): Winlogon Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-25186](https://cve.now/CVE-2026-25186.md): Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-25185](https://cve.now/CVE-2026-25185.md): Windows Shell Link Processing Spoofing Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2026-25181](https://cve.now/CVE-2026-25181.md): GDI+ Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2026-25180](https://cve.now/CVE-2026-25180.md): Windows Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Office for Android · Microsoft Windows)
- [CVE-2026-25179](https://cve.now/CVE-2026-25179.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-25178](https://cve.now/CVE-2026-25178.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-25177](https://cve.now/CVE-2026-25177.md): Active Directory Domain Services Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-25176](https://cve.now/CVE-2026-25176.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-25175](https://cve.now/CVE-2026-25175.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-25174](https://cve.now/CVE-2026-25174.md): Windows Extensible File Allocation Table Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-25173](https://cve.now/CVE-2026-25173.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-25172](https://cve.now/CVE-2026-25172.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2026-25171](https://cve.now/CVE-2026-25171.md): Windows Authentication Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-25170](https://cve.now/CVE-2026-25170.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-25169](https://cve.now/CVE-2026-25169.md): Windows Graphics Component Denial of Service Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2026-25168](https://cve.now/CVE-2026-25168.md): Windows Graphics Component Denial of Service Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2026-25167](https://cve.now/CVE-2026-25167.md): Microsoft Brokering File System Elevation of Privilege Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2026-25166](https://cve.now/CVE-2026-25166.md): Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows ADK for Windows 10, · Microsoft Window… +1)
- [CVE-2026-25165](https://cve.now/CVE-2026-25165.md): Performance Counters for Windows Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-24297](https://cve.now/CVE-2026-24297.md): Windows Kerberos Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2026-24296](https://cve.now/CVE-2026-24296.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-24295](https://cve.now/CVE-2026-24295.md): Windows Device Association Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-24294](https://cve.now/CVE-2026-24294.md): Windows SMB Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-24293](https://cve.now/CVE-2026-24293.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-24292](https://cve.now/CVE-2026-24292.md): Windows Connected Devices Platform Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-24291](https://cve.now/CVE-2026-24291.md): Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-24290](https://cve.now/CVE-2026-24290.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-24289](https://cve.now/CVE-2026-24289.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-24288](https://cve.now/CVE-2026-24288.md): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2026-24287](https://cve.now/CVE-2026-24287.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-24285](https://cve.now/CVE-2026-24285.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Office for Android · Microsoft Windows)
- [CVE-2026-24283](https://cve.now/CVE-2026-24283.md): Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-24282](https://cve.now/CVE-2026-24282.md): Push message Routing Service Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2026-23673](https://cve.now/CVE-2026-23673.md): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-23672](https://cve.now/CVE-2026-23672.md): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2026-23671](https://cve.now/CVE-2026-23671.md): Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-23669](https://cve.now/CVE-2026-23669.md): RPC Runtime Library Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2026-23668](https://cve.now/CVE-2026-23668.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-23667](https://cve.now/CVE-2026-23667.md): Broadcast DVR Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2026-23664](https://cve.now/CVE-2026-23664.md): Azure IoT Explorer Information Disclosure Vulnerability (CVSS 7.5, Microsoft Azure IoT Explorer)
- [CVE-2026-23660](https://cve.now/CVE-2026-23660.md): Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Admin Center in Azure Portal)
- [CVE-2026-21262](https://cve.now/CVE-2026-21262.md): SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2025-13901](https://cve.now/CVE-2025-13901.md): CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol whe (CVSS 6.9, Schneider Electric Modicon M241/M251 · Schneider Electric M…)
- [CVE-2026-30958](https://cve.now/CVE-2026-30958.md): OneUptime: Path Traversal — Arbitrary File Read (No Auth) (CVSS 7.2, oneuptime)
- [CVE-2026-30957](https://cve.now/CVE-2026-30957.md): OneUptime Synthetic Monitor RCE via exposed Playwright browser object (CVSS 10.0, oneuptime · @oneuptime/common)
- [CVE-2026-30956](https://cve.now/CVE-2026-30956.md): OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header (CVSS 10.0, oneuptime · @oneuptime/common)
- [CVE-2026-30945](https://cve.now/CVE-2026-30945.md): StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service (CVSS 7.1, withstudiocms studiocms · studiocms)
- [CVE-2026-30944](https://cve.now/CVE-2026-30944.md): StudioCMS Affected by Privilege Escalation via Insecure API Token Generation (CVSS 8.8, withstudiocms studiocms · studiocms)
- [CVE-2025-66178](https://cve.now/CVE-2025-66178.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 throug (CVSS 6.7, Fortinet FortiWeb)
- [CVE-2026-24641](https://cve.now/CVE-2026-24641.md): A NULL Pointer Dereference vulnerability \[CWE-476\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, For (CVSS 2.5, Fortinet FortiWeb)
- [CVE-2026-24640](https://cve.now/CVE-2026-24640.md): A Stack-based Buffer Overflow vulnerability \[CWE-121\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, (CVSS 5.9, Fortinet FortiWeb)
- [CVE-2025-54659](https://cve.now/CVE-2025-54659.md): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability \[CWE-22\] vulnerability in Fortinet FortiSOAR (CVSS 5.5, Fortinet FortiSOAR Agent Communication Bridge)
- [CVE-2026-24017](https://cve.now/CVE-2026-24017.md): An Improper Control of Interaction Frequency vulnerability \[CWE-799\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 (CVSS 7.3, Fortinet FortiWeb)
- [CVE-2026-25972](https://cve.now/CVE-2026-25972.md): An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM (CVSS 4.1, Fortinet FortiSIEM)
- [CVE-2026-22629](https://cve.now/CVE-2026-22629.md): An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 (CVSS 3.4, Fortinet FortiAnalyzer · Fortinet FortiManager Cloud +1)
- [CVE-2025-68482](https://cve.now/CVE-2025-68482.md): A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnaly (CVSS 6.3, Fortinet FortiAnalyzer · Fortinet FortiManager)
- [CVE-2025-48418](https://cve.now/CVE-2025-48418.md): A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 t (CVSS 6.4, Fortinet FortiAnalyzer · Fortinet FortiManager)
- [CVE-2025-49784](https://cve.now/CVE-2025-49784.md): An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 throug (CVSS 5.6, Fortinet FortiAnalyzer-BigData · Fortinet FortiAnalyzer)
- [CVE-2026-22572](https://cve.now/CVE-2026-22572.md): An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 (CVSS 6.8, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2025-68648](https://cve.now/CVE-2025-68648.md): A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, (CVSS 6.5, Fortinet FortiManager Cloud · Fortinet FortiAnalyzer Clo… +2)
- [CVE-2026-25689](https://cve.now/CVE-2026-25689.md): An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDe (CVSS 6.0, Fortinet FortiDeceptor)
- [CVE-2025-53608](https://cve.now/CVE-2025-53608.md): An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability \[CWE-79\] vulnerability in Fortinet For (CVSS 4.6, Fortinet FortiSandbox)
- [CVE-2026-24018](https://cve.now/CVE-2026-24018.md): A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2. (CVSS 7.4, Fortinet FortiClientLinux)
- [CVE-2025-48840](https://cve.now/CVE-2025-48840.md): An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all (CVSS 5.0, Fortinet FortiWeb)
- [CVE-2026-22627](https://cve.now/CVE-2026-22627.md): A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 ma (CVSS 7.7, Fortinet FortiSwitchAXFixed)
- [CVE-2025-54820](https://cve.now/CVE-2025-54820.md): A Stack-based Buffer Overflow vulnerability \[CWE-121\] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through (CVSS 7.0, Fortinet FortiManager)
- [CVE-2026-30942](https://cve.now/CVE-2026-30942.md): Flare has a Path Traversal in /api/avatars/\[filename\] (CVSS 8.3, FlintSH Flare)
- [CVE-2025-55717](https://cve.now/CVE-2025-55717.md): A cleartext storage of sensitive information vulnerability \[CWE-312\] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4. (CVSS 3.8, Fortinet FortiVoice · Fortinet FortiMail +1)
- [CVE-2026-25836](https://cve.now/CVE-2026-25836.md): An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5 (CVSS 6.7, Fortinet FortiSandbox Cloud · Fortinet FortiSandbox PaaS)
- [CVE-2026-30897](https://cve.now/CVE-2026-30897.md): A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7 (CVSS 5.9, Fortinet FortiWeb)
- [CVE-2026-22628](https://cve.now/CVE-2026-22628.md): An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute syst (CVSS 5.1, Fortinet FortiSwitchAXFixed)
- [CVE-2026-30941](https://cve.now/CVE-2026-30941.md): Parse Server has a NoSQL injection via token type in password reset and email verification endpoints (CVSS 8.7, parse-community parse-server · parse-server)
- [CVE-2026-30939](https://cve.now/CVE-2026-30939.md): Parse Server has Denial of Service (DoS) and Cloud Function Dispatch Bypass via Prototype Chain Resolution (CVSS 8.8, parse-community parse-server · parse-server)
- [CVE-2026-30938](https://cve.now/CVE-2026-30938.md): Parse Server has denylist \`requestKeywordDenylist\` keyword scan bypass through nested object placement (CVSS 6.9, parse-community parse-server · parse-server)
- [CVE-2026-30930](https://cve.now/CVE-2026-30930.md): Glances has SQL Injection via Process Names in TimescaleDB Export (CVSS 7.3, nicolargo glances · glances)
- [CVE-2026-30928](https://cve.now/CVE-2026-30928.md): Glances Exposes Unauthenticated Configuration Secrets (CVSS 8.7, nicolargo glances · glances)
- [CVE-2026-30934](https://cve.now/CVE-2026-30934.md): FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse) (CVSS 8.9, gtsteffaniak filebrowser · github.com/gtsteffaniak/filebrow…)
- [CVE-2026-30933](https://cve.now/CVE-2026-30933.md): FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info (CVSS 7.5, gtsteffaniak filebrowser · github.com/gtsteffaniak/filebrow…)
- [CVE-2026-27661](https://cve.now/CVE-2026-27661.md): A vulnerability has been identified in SINEC Security Monitor (All versions \< V4.9.0). (CVSS 4.3, Siemens SINEC Security Monitor)
- [CVE-2026-25605](https://cve.now/CVE-2026-25605.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 6.7, Siemens SICAM SIAPP SDK)
- [CVE-2026-25573](https://cve.now/CVE-2026-25573.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 7.4, Siemens SICAM SIAPP SDK)
- [CVE-2026-25572](https://cve.now/CVE-2026-25572.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 5.1, Siemens SICAM SIAPP SDK)
- [CVE-2026-25571](https://cve.now/CVE-2026-25571.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 5.1, Siemens SICAM SIAPP SDK)
- [CVE-2026-25570](https://cve.now/CVE-2026-25570.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 7.4, Siemens SICAM SIAPP SDK)
- [CVE-2026-25569](https://cve.now/CVE-2026-25569.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 7.4, Siemens SICAM SIAPP SDK)
- [CVE-2025-40943](https://cve.now/CVE-2025-40943.md): Affected devices do not properly sanitize contents of trace files. (CVSS 9.6, Siemens SIMATIC Drive Controller CPU 1504D TF · Siemens… +78)
- [CVE-2025-27769](https://cve.now/CVE-2025-27769.md): A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions \< F4.11.1), Heliox Mobile DC 40 kW EV Charging S (CVSS 2.6, Siemens Heliox Flex 180 kW EV Charging Station · Siemens He…)
- [CVE-2026-3847](https://cve.now/CVE-2026-3847.md): Memory safety bugs fixed in Firefox 148.0.2 (CVSS 8.8, Mozilla Firefox)
- [CVE-2026-3846](https://cve.now/CVE-2026-3846.md): Same-origin policy bypass in the CSS Parsing and Computation component (CVSS 6.5, Mozilla Firefox)
- [CVE-2026-3845](https://cve.now/CVE-2026-3845.md): Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android (CVSS 8.8, Mozilla Firefox)
- [CVE-2026-3862](https://cve.now/CVE-2026-3862.md): Cross-Site Scripting Vulnerability in SiteMinder Administrative UI (CVSS 4.6, Broadcom SiteMinder)
- [CVE-2026-3483](https://cve.now/CVE-2026-3483.md): An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges. (CVSS 7.8, Ivanti Desktop and Server Management)
- [CVE-2026-2339](https://cve.now/CVE-2026-2339.md): RCE in TUBITAK BILGEM's Liderahenk (CVSS 7.5, TUBITAK BILGEM Software Technologies Research Institute Lid…)
- [CVE-2025-11739](https://cve.now/CVE-2025-11739.md): CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges whe (CVSS 8.5, Schneider Electric EcoStruxure™ Power Monitoring Expert · S…)
- [CVE-2025-13957](https://cve.now/CVE-2025-13957.md): CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Pro (CVSS 7.5, Schneider Electric EcoStruxure™ IT Data Center Expert)
- [CVE-2026-2742](https://cve.now/CVE-2026-2742.md): Unauthorized session creation via reserved framework path access (CVSS 5.3, vaadin · com.vaadin:flow-server +1)
- [CVE-2026-2741](https://cve.now/CVE-2026-2741.md): Zip Slip Path Traversal on Node Unpack (CVSS 2.3, vaadin · com.vaadin:flow-project)
- [CVE-2026-3843](https://cve.now/CVE-2026-3843.md): SQL Injection in Nefteprodukttekhnika BUK TS-G Allows Remote Code Execution (CVSS 9.8, Nefteprodukttekhnika BUK TS-G Gas Station Automation System)
- [CVE-2026-22614](https://cve.now/CVE-2026-22614.md): The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access (CVSS 6.1, Eaton EasySoft)
- [CVE-2026-21791](https://cve.now/CVE-2026-21791.md): HCL Sametime for Android is affected by sensitive information disclosure (CVSS 3.3, HCL Sametime)
- [CVE-2026-3228](https://cve.now/CVE-2026-3228.md): NextScripts: Social Networks Auto-Poster \<= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs\_fbembed' Shortcode (CVSS 6.4, NextScripts: Social Networks Auto-Poster)
- [CVE-2026-2724](https://cve.now/CVE-2026-2724.md): Unlimited Elements For Elementor \<= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields (CVSS 7.2, unitecms Unlimited Elements For Elementor)
- [CVE-2026-23907](https://cve.now/CVE-2026-23907.md): Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code (CVSS 5.3, Apache Software Foundation Apache PDFBox Examples · org.apa…)
- [CVE-2026-3315](https://cve.now/CVE-2026-3315.md): Local Privilege Escalation Due to Writable Executable in Privileged Visionline Service Path (CVSS 5.8, ASSA ABLOY Visionline)
- [CVE-2026-1261](https://cve.now/CVE-2026-1261.md): MetForm Pro \<= 3.9.6 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, Wpmet MetForm Pro)
- [CVE-2025-41712](https://cve.now/CVE-2025-41712.md): Incorrect Permission Assignment on power analyzer (CVSS 6.5, Janitza UMG 96RM-E · Weidmueller ENERGY METER 750-230 +1)
- [CVE-2025-41711](https://cve.now/CVE-2025-41711.md): Use of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzer (CVSS 5.3, Janitza UMG 96RM-E · Weidmueller ENERGY METER 750-230 +1)
- [CVE-2025-41710](https://cve.now/CVE-2025-41710.md): Use of Hard-coded Credentials in power analyzer (CVSS 6.5, Janitza UMG 96RM-E · Weidmueller ENERGY METER 750-230 +1)
- [CVE-2025-41709](https://cve.now/CVE-2025-41709.md): Command injection in power analyzer via Modbus-TCP and Modbus-RTU (CVSS 9.8, Janitza UMG 96RM-E · Weidmueller ENERGY METER 750-230 +1)
- [CVE-2026-2364](https://cve.now/CVE-2026-2364.md): CODESYS Installer TOCTOU Privilege Escalation (CVSS 7.3, CODESYS Installer)
- [CVE-2026-1508](https://cve.now/CVE-2026-1508.md): Court Reservation \< 1.10.9 - Event Deletion via CSRF (CVSS 4.3, Court Reservation)
- [CVE-2026-0953](https://cve.now/CVE-2026-0953.md): Tutor LMS Pro \<= 3.9.5 - Authentication Bypass via Social Login (CVSS 9.8, themeum Tutor LMS Pro)
- [CVE-2025-2399](https://cve.now/CVE-2025-2399.md): Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series (CVSS 5.9, Mitsubishi Electric CNC M800V Series M800VW · Mitsubish… +16)
- [CVE-2026-3585](https://cve.now/CVE-2026-3585.md): The Events Calendar \<= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax\_create\_import (CVSS 7.5, stellarwp The Events Calendar)
- [CVE-2026-1919](https://cve.now/CVE-2026-1919.md): Booktics \<= 1.0.16 - Missing Authorization to Get Items via REST API endpoints (CVSS 5.3, arraytics Booktics – Booking Calendar for Appointments and…)
- [CVE-2026-1920](https://cve.now/CVE-2026-1920.md): Booktics \<= 1.0.16 - Missing Authorization to Addon Plugin Installation (CVSS 5.3, arraytics Booktics – Booking Calendar for Appointments and…)
- [CVE-2025-36173](https://cve.now/CVE-2025-36173.md): InfoSphere Data Architect (IDA) 9.2.1 Vulnerability Fixes. (CVSS 6.1, IBM InfoSphere Data Architect)
- [CVE-2025-36105](https://cve.now/CVE-2025-36105.md): IBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerability (CVSS 4.4, IBM Planning Analytics Advanced Certified Containers)
- [CVE-2026-27689](https://cve.now/CVE-2026-27689.md): Denial of service (DOS) in SAP Supply Chain Management (CVSS 7.7, SAP\_SE SAP Supply Chain Management)
- [CVE-2026-27688](https://cve.now/CVE-2026-27688.md): Missing Authorization check in SAP NetWeaver Application Server for ABAP (CVSS 5.0, SAP\_SE SAP NetWeaver Application Server for ABAP)
- [CVE-2026-27687](https://cve.now/CVE-2026-27687.md): Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal (CVSS 5.8, SAP\_SE SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal)
- [CVE-2026-27686](https://cve.now/CVE-2026-27686.md): Missing Authorization check in SAP Business Warehouse (Service API) (CVSS 5.9, SAP\_SE SAP Business Warehouse)
- [CVE-2026-27685](https://cve.now/CVE-2026-27685.md): Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration (CVSS 9.1, SAP\_SE SAP NetWeaver Enterprise Portal Administration)
- [CVE-2026-27684](https://cve.now/CVE-2026-27684.md): SQL Injection Vulnerability in SAP NetWeaver (Feedback Notification) (CVSS 6.4, SAP\_SE SAP NetWeaver)
- [CVE-2026-24317](https://cve.now/CVE-2026-24317.md): DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT (CVSS 5.0, SAP\_SE SAP GUI for Windows with active GuiXT)
- [CVE-2026-24316](https://cve.now/CVE-2026-24316.md): Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP (CVSS 6.4, SAP\_SE SAP NetWeaver Application Server for ABAP)
- [CVE-2026-24313](https://cve.now/CVE-2026-24313.md): Missing Authorization check in SAP Solution Tools Plug-In (ST-PI) (CVSS 5.0, SAP\_SE SAP Solution Tools Plug-In)
- [CVE-2026-24311](https://cve.now/CVE-2026-24311.md): Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0 (CVSS 5.6, SAP\_SE SAP Customer Checkout)
- [CVE-2026-24310](https://cve.now/CVE-2026-24310.md): Missing Authorization check in SAP NetWeaver Application Server for ABAP (CVSS 3.5, SAP\_SE SAP NetWeaver Application Server for ABAP)
- [CVE-2026-24309](https://cve.now/CVE-2026-24309.md): Missing Authorization check in SAP NetWeaver Application Server for ABAP (CVSS 6.4, SAP\_SE SAP NetWeaver Application Server for ABAP)
- [CVE-2026-0489](https://cve.now/CVE-2026-0489.md): DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service) (CVSS 6.1, SAP\_SE SAP Business One)
- [CVE-2025-56421](https://cve.now/CVE-2025-56421.md): SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database. (CVSS 7.5, limesurvey/limesurvey)
- [CVE-2025-56422](https://cve.now/CVE-2025-56422.md): A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server. (CVSS 9.8)
- [CVE-2025-69614](https://cve.now/CVE-2025-69614.md): Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account ta (CVSS 9.4)
- [CVE-2025-69615](https://cve.now/CVE-2025-69615.md): Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction r (CVSS 9.1)
- [CVE-2025-70025](https://cve.now/CVE-2025-70025.md): An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in benkeen generatedata 4.0.14. (CVSS 6.1)
- [CVE-2025-70128](https://cve.now/CVE-2025-70128.md): A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier. (CVSS 6.1)
- [CVE-2025-70129](https://cve.now/CVE-2025-70129.md): If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that (CVSS 5.3)
- [CVE-2025-70227](https://cve.now/CVE-2025-70227.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the nextPage parameter to goform/formLanguageChange. (CVSS 7.5)
- [CVE-2025-70242](https://cve.now/CVE-2025-70242.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formSetWanPPTP. (CVSS 7.5)
- [CVE-2025-70244](https://cve.now/CVE-2025-70244.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanSetup. (CVSS 7.5)
- [CVE-2025-70246](https://cve.now/CVE-2025-70246.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formVirtualServ. (CVSS 7.5)
- [CVE-2025-70247](https://cve.now/CVE-2025-70247.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizard1. (CVSS 7.5)
- [CVE-2025-70249](https://cve.now/CVE-2025-70249.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizard2. (CVSS 7.5)
- [CVE-2025-70251](https://cve.now/CVE-2025-70251.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanGuestSetup. (CVSS 7.5)
- [CVE-2025-70798](https://cve.now/CVE-2025-70798.md): Tenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password vulnerability in /etc\_ro/shadow, which allows atta (CVSS 8.4)
- [CVE-2025-70802](https://cve.now/CVE-2025-70802.md): Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etc\_ro/shadow, which allows a (CVSS 8.4)
- [CVE-2026-26738](https://cve.now/CVE-2026-26738.md): Buffer Overflow vulnerability in Uderzo Software SpaceSniffer v.2.0.5.18 allows a remote attacker to execute arbitrary code via a crafted .s (CVSS 7.8)
- [CVE-2026-26741](https://cve.now/CVE-2026-26741.md): PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. (CVSS 8.1)
- [CVE-2026-26742](https://cve.now/CVE-2026-26742.md): PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic. (CVSS 8.1)
- [CVE-2026-26801](https://cve.now/CVE-2026-26801.md): Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive (CVSS 7.5, pdfmake)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-03-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.