# CVEs published 2026-03-12

194 CVEs were published on March 12, 2026: 25 critical, 96 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2026-32612](https://cve.now/CVE-2026-32612.md): Statamic: privilege escalation via stored cross-site scripting (CVSS 5.4, statamic cms · statamic/cms)
- [CVE-2026-32597](https://cve.now/CVE-2026-32597.md): PyJWT accepts unknown \`crit\` header extensions (RFC 7515 §4.1.11 MUST violation) (CVSS 7.5, jpadilla pyjwt · pyjwt)
- [CVE-2026-32322](https://cve.now/CVE-2026-32322.md): soroban-sdk: \`Fr\` scalar field equality comparison bypasses modular reduction (CVSS 5.3, stellar rs-soroban-sdk · soroban-sdk)
- [CVE-2026-32320](https://cve.now/CVE-2026-32320.md): Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings (CVSS 6.5, ellanetworks core · github.com/ellanetworks/core)
- [CVE-2026-32319](https://cve.now/CVE-2026-32319.md): Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload (CVSS 7.5, ellanetworks core · github.com/ellanetworks/core)
- [CVE-2026-32598](https://cve.now/CVE-2026-32598.md): OneUptime: Password Reset Token Logged at INFO Level (CVSS 6.9, oneuptime)
- [CVE-2026-3910](https://cve.now/CVE-2026-3910.md): Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sand (CVSS 8.8, KEV, Google Chrome)
- [CVE-2026-3909](https://cve.now/CVE-2026-3909.md): Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a c (CVSS 8.8, KEV, Google Chrome)
- [CVE-2026-32308](https://cve.now/CVE-2026-32308.md): OneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: "loose") (CVSS 7.6, oneuptime)
- [CVE-2026-32306](https://cve.now/CVE-2026-32306.md): OneUptime ClickHouse SQL Injection via Aggregate Query Parameters (CVSS 10.0, oneuptime)
- [CVE-2026-32304](https://cve.now/CVE-2026-32304.md): Locutus: RCE via unsanitized input in create\_function() (CVSS 9.8, locutusjs locutus · locutus)
- [CVE-2026-32302](https://cve.now/CVE-2026-32302.md): OpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy mode (CVSS 8.1, openclaw)
- [CVE-2026-32301](https://cve.now/CVE-2026-32301.md): Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL (CVSS 9.3, centrifugal centrifugo · github.com/centrifugal/centrifu… +4)
- [CVE-2026-25076](https://cve.now/CVE-2026-25076.md): Anchore Enterprise GraphQL Reports API SQL injection (CVSS 8.5, Anchore Enterprise)
- [CVE-2026-2229](https://cve.now/CVE-2026-2229.md): undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server\_max\_window\_bits Validation (CVSS 7.5, undici)
- [CVE-2026-1528](https://cve.now/CVE-2026-1528.md): undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client (CVSS 7.5, undici)
- [CVE-2026-1527](https://cve.now/CVE-2026-1527.md): undici is vulnerable to CRLF Injection via upgrade option (CVSS 4.6, undici)
- [CVE-2026-2581](https://cve.now/CVE-2026-2581.md): undici is vulnerable to Unbounded Memory Consumption in in Undici's DeduplicationHandler via Response Buffering leads to DoS (CVSS 5.9, undici)
- [CVE-2026-1526](https://cve.now/CVE-2026-1526.md): undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression (CVSS 7.5, undici)
- [CVE-2026-3611](https://cve.now/CVE-2026-3611.md): Honeywell IQ4x BMS Controller Missing authentication for critical function (CVSS 10.0, Honeywell IQ4E · Honeywell IQ412 +5)
- [CVE-2026-1525](https://cve.now/CVE-2026-1525.md): undici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (CVSS 6.5, undici)
- [CVE-2026-32274](https://cve.now/CVE-2026-32274.md): Black: Arbitrary file writes from unsanitized user input in cache file name (CVSS 8.7, psf black · black)
- [CVE-2026-32269](https://cve.now/CVE-2026-32269.md): Parse Server OAuth2 adapter app ID validation sends wrong token to introspection endpoint (CVSS 6.3, parse-community parse-server · parse-server)
- [CVE-2026-32260](https://cve.now/CVE-2026-32260.md): Command Injection via incomplete shell metacharacter blocklist in node:child\_process (bypass of CVE-2026-27190 fix) (CVSS 8.1, denoland deno · deno)
- [CVE-2026-32259](https://cve.now/CVE-2026-32259.md): ImageMagick has a possible stack buffer overflow in sixel encoder (CVSS 6.7, ImageMagick)
- [CVE-2026-32240](https://cve.now/CVE-2026-32240.md): Cap'n Proto: Integer overflow in KJ-HTTP chunk size (CVSS 6.3, capnproto)
- [CVE-2026-32239](https://cve.now/CVE-2026-32239.md): Cap'n Proto has an integer overflow in KJ-HTTP (CVSS 6.3, capnproto)
- [CVE-2026-32251](https://cve.now/CVE-2026-32251.md): Tolgee has an XXE Injection in Translation Import (CVSS 9.3, tolgee-platform)
- [CVE-2026-32249](https://cve.now/CVE-2026-32249.md): NFA regex engine NULL pointer dereference affects Vim \< 9.2.0137 (CVSS 5.3, vim)
- [CVE-2026-32248](https://cve.now/CVE-2026-32248.md): Parse Server: Account takeover via operator injection in authentication data identifier (CVSS 9.3, parse-community parse-server · parse-server)
- [CVE-2026-32247](https://cve.now/CVE-2026-32247.md): Graphiti vulnerable to Cypher Injection via unsanitized node\_labels in search filters (CVSS 8.1, getzep graphiti · graphiti-core)
- [CVE-2026-2376](https://cve.now/CVE-2026-2376.md): Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface (CVSS 4.9, mirror registry for Red Hat OpenShift · Red Hat Quay)
- [CVE-2026-32246](https://cve.now/CVE-2026-32246.md): Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint (CVSS 8.5, steveiliop56 tinyauth · github.com/steveiliop56/tinyauth)
- [CVE-2026-32245](https://cve.now/CVE-2026-32245.md): Tinyauth's OIDC authorization codes are not bound to client on token exchange (CVSS 6.5, steveiliop56 tinyauth · github.com/steveiliop56/tinyauth)
- [CVE-2026-32242](https://cve.now/CVE-2026-32242.md): Parse Server OAuth2 adapter shares mutable state across providers via singleton instance (CVSS 9.1, parse-community parse-server · parse-server)
- [CVE-2026-32237](https://cve.now/CVE-2026-32237.md): @backstage/plugin-scaffolder-backend: Possible exposure of defaultEnvironment secrets using dry-run endpoint (CVSS 4.4, @backstage plugin-scaffolder-backend · @backstage/plugin-sc…)
- [CVE-2026-32236](https://cve.now/CVE-2026-32236.md): @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch (CVSS 1.7, @backstage plugin-auth-backend · @backstage/plugin-auth-bac…)
- [CVE-2026-32235](https://cve.now/CVE-2026-32235.md): @backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass (CVSS 5.9, @backstage plugin-auth-backend · @backstage/plugin-auth-bac…)
- [CVE-2026-32138](https://cve.now/CVE-2026-32138.md): NEXULEAN API Key Leak (CVSS 8.2, Stalin-143 website)
- [CVE-2026-3497](https://cve.now/CVE-2026-3497.md): Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. (CVSS 2.7, Ubuntu openssh)
- [CVE-2026-32232](https://cve.now/CVE-2026-32232.md): ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink (CVSS 8.8, qhkm zeptoclaw · zeptoclaw)
- [CVE-2026-32231](https://cve.now/CVE-2026-32231.md): ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data (CVSS 8.2, qhkm zeptoclaw · zeptoclaw)
- [CVE-2026-32142](https://cve.now/CVE-2026-32142.md): shopware/commercial: \`/api/\_info/config\` route exposes information about licenses (CVSS 5.3, shopware commercial)
- [CVE-2025-13913](https://cve.now/CVE-2025-13913.md): Inductive Automation Ignition Software Deserialization of Untrusted Data (CVSS 5.4, Inductive Automation Ignition Software)
- [CVE-2026-32230](https://cve.now/CVE-2026-32230.md): Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page (CVSS 5.3, louislam uptime-kuma · uptime-kuma)
- [CVE-2026-32100](https://cve.now/CVE-2026-32100.md): swag/platform-security: \`/api/\_info/config\` route exposes information about licenses and active security fixes (CVSS 5.3, swag platform-security)
- [CVE-2026-32141](https://cve.now/CVE-2026-32141.md): flatted: Unbounded recursion DoS in parse() revive phase (CVSS 7.5, WebReflection flatted · flatted)
- [CVE-2026-32140](https://cve.now/CVE-2026-32140.md): Dataease: Redshift JDBC RCE Bypass (CVSS 9.3, dataease)
- [CVE-2025-13462](https://cve.now/CVE-2025-13462.md): tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling (CVSS 2.0, Python Software Foundation CPython)
- [CVE-2026-32139](https://cve.now/CVE-2026-32139.md): Dataease: Unfiltered active SVG content leads to Stored XSS (CVSS 5.3, dataease)
- [CVE-2026-32137](https://cve.now/CVE-2026-32137.md): DataEase SQL Injection Vulnerability (CVSS 9.3, dataease)
- [CVE-2026-32129](https://cve.now/CVE-2026-32129.md): Poseidon V1 variable-length input collision via implicit zero-padding (CVSS 8.7, stellar rs-soroban-poseidon · soroban-poseidon)
- [CVE-2026-32116](https://cve.now/CVE-2026-32116.md): Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite (CVSS 8.2, magic-wormhole)
- [CVE-2026-31890](https://cve.now/CVE-2026-31890.md): Inspektor Gadget: Tracing Denial of Service via Event Flooding (CVSS 4.8, inspektor-gadget)
- [CVE-2026-28256](https://cve.now/CVE-2026-28256.md): Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge (CVSS 6.9, Trane Tracer SC · Trane Tracer SC+ +1)
- [CVE-2026-28255](https://cve.now/CVE-2026-28255.md): Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge (CVSS 8.2, Trane Tracer SC · Trane Tracer SC+ +1)
- [CVE-2026-28254](https://cve.now/CVE-2026-28254.md): Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge (CVSS 6.9, Trane Tracer SC · Trane Tracer SC+ +1)
- [CVE-2026-28253](https://cve.now/CVE-2026-28253.md): Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge (CVSS 8.7, Trane Tracer SC · Trane Tracer SC+ +1)
- [CVE-2026-3841](https://cve.now/CVE-2026-3841.md): Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400 (CVSS 8.5, TP-Link Systems TL-MR6400)
- [CVE-2026-28252](https://cve.now/CVE-2026-28252.md): Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge (CVSS 9.2, Trane Tracer SC · Trane Tracer SC+ +1)
- [CVE-2026-31873](https://cve.now/CVE-2026-31873.md): Unhead has a Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity (CVSS 0.0, unjs unhead · unhead)
- [CVE-2026-31860](https://cve.now/CVE-2026-31860.md): Unhead has a XSS bypass in \`useHeadSafe\` via attribute name injection and case-sensitive protocol check (CVSS 5.3, unjs unhead · unhead)
- [CVE-2026-31841](https://cve.now/CVE-2026-31841.md): Raw exposure of database statements in Hyperterse MCP search tool (CVSS 6.5, hyperterse)
- [CVE-2026-21887](https://cve.now/CVE-2026-21887.md): OpenCTI has a Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature (CVSS 7.7, OpenCTI-Platform opencti · pycti)
- [CVE-2026-29066](https://cve.now/CVE-2026-29066.md): Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI (CVSS 6.2, @tinacms cli · @tinacms/cli)
- [CVE-2026-28791](https://cve.now/CVE-2026-28791.md): Path Traversal in Media Upload Handle in Tina (CVSS 7.4, tinacms)
- [CVE-2026-28793](https://cve.now/CVE-2026-28793.md): Path Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS (CVSS 8.4, @tinacms cli · @tinacms/cli)
- [CVE-2026-28792](https://cve.now/CVE-2026-28792.md): Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS (CVSS 9.7, @tinacms cli · @tinacms/cli)
- [CVE-2026-28356](https://cve.now/CVE-2026-28356.md): ReDoS in multipart 1.3.0 - \`parse\_options\_header()\` (CVSS 7.5, defnull multipart · multipart)
- [CVE-2026-27940](https://cve.now/CVE-2026-27940.md): llama.cpp has a Heap Buffer Overflow via Integer Overflow in \`mem\_size\` Calculation — Bypass of CVE-2025-53630 Fix (CVSS 7.8, ggml-org llama.cpp)
- [CVE-2026-25529](https://cve.now/CVE-2026-25529.md): Postal has HTML injection / XSS in message view (CVSS 8.1, postalserver postal)
- [CVE-2026-24125](https://cve.now/CVE-2026-24125.md): Path Traversal in @tinacms/graphql (CVSS 6.3, @tinacms graphql · @tinacms/graphql)
- [CVE-2026-21708](https://cve.now/CVE-2026-21708.md): A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user. (CVSS 9.9, Veeam Backup and Replication)
- [CVE-2026-21672](https://cve.now/CVE-2026-21672.md): A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers. (CVSS 8.8, Veeam Backup and Replication)
- [CVE-2026-4045](https://cve.now/CVE-2026-4045.md): projectsend Auth.php response discrepancy (CVSS 6.3, projectsend)
- [CVE-2019-25543](https://cve.now/CVE-2019-25543.md): Netartmedia Real Estate Portal 5.0 SQL Injection via index.php (CVSS 8.8, Netartmedia Real Estate Portal)
- [CVE-2019-25542](https://cve.now/CVE-2019-25542.md): Netartmedia Real Estate Portal 5.0 SQL Injection via index.php (CVSS 8.8, Netartmedia Real Estate Portal)
- [CVE-2019-25541](https://cve.now/CVE-2019-25541.md): Netartmedia PHP Mall 4.1 Multiple SQL Injection (CVSS 8.8, Netartmedia PHP Mall)
- [CVE-2019-25540](https://cve.now/CVE-2019-25540.md): Netartmedia PHP Mall 4.1 Multiple SQL Injection (CVSS 8.8, Netartmedia PHP Mall)
- [CVE-2019-25539](https://cve.now/CVE-2019-25539.md): 202CMS v10 beta SQL Injection via register.php (CVSS 8.8, Sourceforge 202CMS)
- [CVE-2019-25538](https://cve.now/CVE-2019-25538.md): 202CMS v10 beta SQL Injection via log\_user Parameter (CVSS 8.8, Sourceforge 202CMS)
- [CVE-2019-25537](https://cve.now/CVE-2019-25537.md): Netartmedia Event Portal 2.0 SQL Injection via loginaction.php (CVSS 8.8, Netartmedia Event Portal)
- [CVE-2019-25536](https://cve.now/CVE-2019-25536.md): Netartmedia PHP Real Estate Agency 4.0 SQL Injection via features parameter (CVSS 8.8, Netartmedia PHP Real Estate Agency)
- [CVE-2019-25535](https://cve.now/CVE-2019-25535.md): Netartmedia PHP Dating Site SQL Injection via loginaction.php (CVSS 8.8, Netartmedia Php Dating Site)
- [CVE-2019-25534](https://cve.now/CVE-2019-25534.md): Netartmedia PHP Car Dealer SQL Injection via features parameter (CVSS 8.8, Netartmedia PHP Car Dealer)
- [CVE-2019-25533](https://cve.now/CVE-2019-25533.md): Netartmedia PHP Business Directory 4.2 SQL Injection via loginaction.php (CVSS 8.8, Phpbusinessdirectory Netartmedia PHP Business Directory)
- [CVE-2019-25532](https://cve.now/CVE-2019-25532.md): Netartmedia Jobs Portal 6.1 SQL Injection via loginaction.php (CVSS 8.8, Netartmedia Jobs Portal)
- [CVE-2019-25531](https://cve.now/CVE-2019-25531.md): Netartmedia Deals Portal Lastest SQL Injection via loginaction.php (CVSS 8.8, Netartmedia Deals Portal)
- [CVE-2019-25530](https://cve.now/CVE-2019-25530.md): uHotelBooking System Lastest SQL Injection via system\_page Parameter (CVSS 8.8, Hotel-Booking-Script uHotelBooking System)
- [CVE-2019-25529](https://cve.now/CVE-2019-25529.md): Placeto CMS Alpha rv.4 SQL Injection via page Parameter (CVSS 7.1, Sourceforge Placeto CMS)
- [CVE-2019-25528](https://cve.now/CVE-2019-25528.md): Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search (CVSS 8.8, Inoutscripts Inout EasyRooms Ultimate Edition)
- [CVE-2019-25527](https://cve.now/CVE-2019-25527.md): Inout EasyRooms Ultimate Edition v1.0 SQL Injection via searchdetailed (CVSS 8.8, Inoutscripts Inout EasyRooms Ultimate Edition)
- [CVE-2019-25526](https://cve.now/CVE-2019-25526.md): Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search (CVSS 8.8, Inoutscripts Inout EasyRooms Ultimate Edition)
- [CVE-2019-25525](https://cve.now/CVE-2019-25525.md): Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search (CVSS 8.8, Inoutscripts Inout EasyRooms Ultimate Edition)
- [CVE-2019-25524](https://cve.now/CVE-2019-25524.md): XooGallery Lastest Latest SQL Injection via results.php (CVSS 8.8, Xooscripts XooGallery)
- [CVE-2019-25523](https://cve.now/CVE-2019-25523.md): XooGallery Lastest Latest SQL Injection via cat.php (CVSS 8.8, Xooscripts XooGallery)
- [CVE-2019-25522](https://cve.now/CVE-2019-25522.md): XooGallery Lastest Latest Multiple SQL Injections via photo.php (CVSS 8.8, Xooscripts XooGallery)
- [CVE-2019-25521](https://cve.now/CVE-2019-25521.md): XooGallery Lastest Latest SQL Injection via gal.php gal\_id (CVSS 8.8, Xooscripts XooGallery)
- [CVE-2019-25520](https://cve.now/CVE-2019-25520.md): Jettweb PHP Hazir Haber Sitesi Scripti V1 Authentication Bypass (CVSS 8.8, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25519](https://cve.now/CVE-2019-25519.md): Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection (CVSS 8.8, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25518](https://cve.now/CVE-2019-25518.md): Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via arama.php (CVSS 8.8, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25517](https://cve.now/CVE-2019-25517.md): Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via haberarsiv.php (CVSS 8.8, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25516](https://cve.now/CVE-2019-25516.md): Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via gallery.php (CVSS 8.8, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25515](https://cve.now/CVE-2019-25515.md): Jettweb PHP Hazir Haber Sitesi Scripti V3 Authentication Bypass (CVSS 8.7, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25514](https://cve.now/CVE-2019-25514.md): Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection (CVSS 8.8, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25513](https://cve.now/CVE-2019-25513.md): Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection via datagetir.php (CVSS 8.8, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25512](https://cve.now/CVE-2019-25512.md): Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection (CVSS 8.8, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25511](https://cve.now/CVE-2019-25511.md): Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection (CVSS 8.8, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25510](https://cve.now/CVE-2019-25510.md): Jettweb PHP Hazir Haber Sitesi Scripti V2 Authentication Bypass (CVSS 8.8, Jettweb Hazir Haber Sitesi Scripti)
- [CVE-2019-25509](https://cve.now/CVE-2019-25509.md): XooDigital Lastest Latest SQL Injection via results.php (CVSS 8.8, Xooscripts XooDigital)
- [CVE-2019-25508](https://cve.now/CVE-2019-25508.md): Jettweb Php Hazir Ilan Sitesi Scripti V2 SQL Injection via katgetir.php (CVSS 8.8, Jettweb Hazir Ilan Sitesi Scripti)
- [CVE-2019-25488](https://cve.now/CVE-2019-25488.md): Jettweb Hazir Rent A Car Scripti V4 SQL Injection via admin (CVSS 8.8, Jettweb Rent A Car Scripti)
- [CVE-2019-25482](https://cve.now/CVE-2019-25482.md): Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 SQL Injection (CVSS 8.8, Jettweb Hazir Rent A Car Sitesi Scripti)
- [CVE-2019-25481](https://cve.now/CVE-2019-25481.md): iScripts ReserveLogic Lastest SQL Injection via search endpoint (CVSS 8.8, iScripts ReserveLogic)
- [CVE-2019-25479](https://cve.now/CVE-2019-25479.md): Inout RealEstate Lastest SQL Injection via agentlistdetails (CVSS 8.8, Inoutscripts Inout RealEstate)
- [CVE-2019-25473](https://cve.now/CVE-2019-25473.md): Clinic Pro SQL Injection via monthly\_expense\_overview month Parameter (CVSS 7.1, Softwebinternational Clinic Pro)
- [CVE-2026-4044](https://cve.now/CVE-2026-4044.md): projectsend Delete import-orphans.php realpath path traversal (CVSS 5.1, projectsend)
- [CVE-2026-4043](https://cve.now/CVE-2026-4043.md): Tenda i12 wifiSSIDget formwrlSSIDget stack-based overflow (CVSS 8.7, Tenda i12)
- [CVE-2026-21668](https://cve.now/CVE-2026-21668.md): A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. (CVSS 8.8, Veeam Backup and Replication)
- [CVE-2026-21669](https://cve.now/CVE-2026-21669.md): A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. (CVSS 10.0, Veeam Backup and Replication)
- [CVE-2026-21671](https://cve.now/CVE-2026-21671.md): A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availabilit (CVSS 9.1, Veeam Software Appliance)
- [CVE-2026-21670](https://cve.now/CVE-2026-21670.md): A vulnerability allowing a low-privileged user to extract saved SSH credentials. (CVSS 7.7, Veeam Backup and Replication)
- [CVE-2026-21666](https://cve.now/CVE-2026-21666.md): A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. (CVSS 10.0, Veeam Backup and Replication)
- [CVE-2026-21667](https://cve.now/CVE-2026-21667.md): A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. (CVSS 10.0, Veeam Backup and Replication)
- [CVE-2026-4042](https://cve.now/CVE-2026-4042.md): Tenda i12 WifiMacFilterGet formWifiMacFilterGet stack-based overflow (CVSS 8.7, Tenda i12)
- [CVE-2026-4041](https://cve.now/CVE-2026-4041.md): Tenda i12 exeCommand vos\_strcpy stack-based overflow (CVSS 8.7, Tenda i12)
- [CVE-2026-28384](https://cve.now/CVE-2026-28384.md): Authenticated RCE via unsanitized compression\_algorithm (CVSS 9.4, Canonical lxd)
- [CVE-2026-3099](https://cve.now/CVE-2026-3099.md): Libsoup: libsoup: authentication bypass via digest authentication replay attack (CVSS 5.8, Red Hat Enterprise Linux)
- [CVE-2026-0809](https://cve.now/CVE-2026-0809.md): Weak KSeF token encoding in Streamsoft Prestiż (CVSS 6.3, Streamsoft Prestiż)
- [CVE-2026-2514](https://cve.now/CVE-2026-2514.md): Possibility of unintended actions when viewing maliciously crafted network data in Progress Flowmon ADS web application (CVSS 8.6, Progress Software Flowmon ADS)
- [CVE-2026-2513](https://cve.now/CVE-2026-2513.md): Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon ADS web application (CVSS 8.6, Progress Software Flowmon ADS)
- [CVE-2026-2987](https://cve.now/CVE-2026-2987.md): Simple Ajax Chat \<= 20260217 - Unauthenticated Stored Cross-Site Scripting via 'c' (CVSS 6.1, specialk Simple Ajax Chat – Add a Fast, Secure Chat Box)
- [CVE-2026-4040](https://cve.now/CVE-2026-4040.md): OpenClaw File Existence tools.exec.safeBins information exposure (CVSS 4.8, OpenClaw)
- [CVE-2026-4039](https://cve.now/CVE-2026-4039.md): OpenClaw Skill Env applySkillConfigenvOverrides code injection (CVSS 5.3, OpenClaw)
- [CVE-2026-3989](https://cve.now/CVE-2026-3989.md): CVE-2026-3989 (CVSS 7.8, SGLang)
- [CVE-2026-3060](https://cve.now/CVE-2026-3060.md): CVE-2026-3060 (CVSS 9.8, SGLang)
- [CVE-2026-3059](https://cve.now/CVE-2026-3059.md): CVE-2026-3059 (CVSS 9.8, SGLang)
- [CVE-2026-2366](https://cve.now/CVE-2026-2366.md): Keycloak: keycloak: information disclosure via authorization bypass in admin api (CVSS 3.1, Red Hat build of Keycloak · @keycloak/keycloak-admin-cli… +1)
- [CVE-2026-3234](https://cve.now/CVE-2026-3234.md): Mod\_proxy\_cluster: mod\_proxy\_cluster: response body corruption via crlf injection (CVSS 4.3, Red Hat Enterprise Linux · Red Hat JBoss Core Services)
- [CVE-2026-4016](https://cve.now/CVE-2026-4016.md): GPAC SVG Parser load\_svg.c svgin\_process out-of-bounds write (CVSS 4.8, GPAC)
- [CVE-2026-4015](https://cve.now/CVE-2026-4015.md): GPAC TeXML File load\_text.c txtin\_process\_texml stack-based overflow (CVSS 4.8, GPAC)
- [CVE-2026-4014](https://cve.now/CVE-2026-4014.md): itsourcecode Cafe Reservation System Registration signup.php sql injection (CVSS 6.9, itsourcecode Cafe Reservation System)
- [CVE-2026-4013](https://cve.now/CVE-2026-4013.md): SourceCodester Web-based Pharmacy Product Management System add\_admin.php improper authorization (CVSS 5.3, SourceCodester Web-based Pharmacy Product Management System)
- [CVE-2026-4012](https://cve.now/CVE-2026-4012.md): rxi fe fe.c read\_ out-of-bounds (CVSS 4.8, rxi fe)
- [CVE-2026-4010](https://cve.now/CVE-2026-4010.md): ThakeeNathees pocketlang pkByteBufferAddString memory corruption (CVSS 4.8, ThakeeNathees pocketlang)
- [CVE-2026-4009](https://cve.now/CVE-2026-4009.md): jarikomppa soloud WAV File dr\_wav.h drwav\_read\_pcm\_frames\_s16\_\_msadpcm out-of-bounds (CVSS 4.8, jarikomppa soloud)
- [CVE-2026-4008](https://cve.now/CVE-2026-4008.md): Tenda W3 POST Parameter wifiSSIDset stack-based overflow (CVSS 8.7, Tenda W3)
- [CVE-2026-4007](https://cve.now/CVE-2026-4007.md): Tenda W3 POST Parameter wifiSSIDget stack-based overflow (CVSS 8.7, Tenda W3)
- [CVE-2026-3994](https://cve.now/CVE-2026-3994.md): rui314 mold Object File input-files.cc initialize\_sections heap-based overflow (CVSS 4.8, rui314 mold)
- [CVE-2026-3993](https://cve.now/CVE-2026-3993.md): itsourcecode Payroll Management System manage\_employee\_deductions.php cross site scripting (CVSS 5.3, itsourcecode Payroll Management System)
- [CVE-2026-2687](https://cve.now/CVE-2026-2687.md): Reading progressbar \< 1.3.1 - Admin+ Stored XSS (CVSS 4.3, Reading progressbar)
- [CVE-2025-15473](https://cve.now/CVE-2025-15473.md): Timetics \< 1.0.52 - Unauthenticated Payment/Booking Status Update (CVSS 4.3, Timetics)
- [CVE-2026-3992](https://cve.now/CVE-2026-3992.md): CodeGenieApp serverless-express Users Endpoint dynamodb.ts injection (CVSS 5.3, CodeGenieApp serverless-express)
- [CVE-2026-3990](https://cve.now/CVE-2026-3990.md): CesiumGS CesiumJS standalone.html cross site scripting (CVSS 5.3, CesiumGS CesiumJS)
- [CVE-2026-3984](https://cve.now/CVE-2026-3984.md): Campcodes Division Regional Athletic Meet Game Result Matrix System save\_up\_athlete.php cross site scripting (CVSS 5.1, Campcodes Division Regional Athletic Meet Game Result Matri…)
- [CVE-2026-3983](https://cve.now/CVE-2026-3983.md): Campcodes Division Regional Athletic Meet Game Result Matrix System save-games.php cross site scripting (CVSS 5.1, Campcodes Division Regional Athletic Meet Game Result Matri…)
- [CVE-2026-3982](https://cve.now/CVE-2026-3982.md): itsourcecode University Management System view\_result.php cross site scripting (CVSS 5.3, itsourcecode University Management System)
- [CVE-2026-3981](https://cve.now/CVE-2026-3981.md): itsourcecode Online Doctor Appointment System doctor\_action.php sql injection (CVSS 6.9, itsourcecode Online Doctor Appointment System)
- [CVE-2026-3980](https://cve.now/CVE-2026-3980.md): itsourcecode Online Doctor Appointment System patient\_action.php sql injection (CVSS 6.9, itsourcecode Online Doctor Appointment System)
- [CVE-2026-3979](https://cve.now/CVE-2026-3979.md): quickjs-ng quickjs quickjs.c js\_iterator\_concat\_return use after free (CVSS 4.8, quickjs-ng quickjs)
- [CVE-2026-3978](https://cve.now/CVE-2026-3978.md): D-Link DIR-513 formEasySetupWizard3 stack-based overflow (CVSS 8.7, D-Link DIR-513)
- [CVE-2026-3977](https://cve.now/CVE-2026-3977.md): projectsend AJAX Endpoints authorization (CVSS 5.3, projectsend)
- [CVE-2026-3976](https://cve.now/CVE-2026-3976.md): Tenda W3 POST Parameter WifiMacFilterSet formWifiMacFilterSet stack-based overflow (CVSS 8.7, Tenda W3)
- [CVE-2026-3975](https://cve.now/CVE-2026-3975.md): Tenda W3 POST Parameter WifiMacFilterGet formWifiMacFilterGet stack-based overflow (CVSS 8.7, Tenda W3)
- [CVE-2026-3226](https://cve.now/CVE-2026-3226.md): LearnPress \<= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering (CVSS 4.3, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2026-3657](https://cve.now/CVE-2026-3657.md): My Sticky Bar \<= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu\_contact\_lead\_form' Action (CVSS 7.5, premio My Sticky Bar – Floating Notification Bar & Sticky H…)
- [CVE-2025-15038](https://cve.now/CVE-2025-15038.md): An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. (CVSS 6.9, ASUS Business System Control Interface)
- [CVE-2026-1878](https://cve.now/CVE-2026-1878.md): An Insufficient Integrity Verification vulnerability in the ASUS ROG peripheral driver installation process allows privilege escalation to S (CVSS 5.4, ASUS Driver)
- [CVE-2026-3974](https://cve.now/CVE-2026-3974.md): Tenda W3 HTTP exeCommand formexeCommand stack-based overflow (CVSS 8.7, Tenda W3)
- [CVE-2025-15037](https://cve.now/CVE-2025-15037.md): An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. (CVSS 6.8, ASUS Business System Control Interface)
- [CVE-2025-59388](https://cve.now/CVE-2025-59388.md): Hyper Data Protector (CVSS 6.6, QNAP Systems Hyper Data Protector)
- [CVE-2026-1182](https://cve.now/CVE-2026-1182.md): Improper Removal of Sensitive Information Before Storage or Transfer in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-3973](https://cve.now/CVE-2026-3973.md): Tenda W3 POST Parameter setAutoPing formSetAutoPing stack-based overflow (CVSS 8.7, Tenda W3)
- [CVE-2026-3972](https://cve.now/CVE-2026-3972.md): Tenda W3 HTTP setcfm formSetCfm stack-based overflow (CVSS 8.7, Tenda W3)
- [CVE-2026-3971](https://cve.now/CVE-2026-3971.md): Tenda i3 wifiSSIDset formwrlSSIDset stack-based overflow (CVSS 8.7, Tenda i3)
- [CVE-2026-3970](https://cve.now/CVE-2026-3970.md): Tenda i3 wifiSSIDget formwrlSSIDget stack-based overflow (CVSS 8.7, Tenda i3)
- [CVE-2023-43010](https://cve.now/CVE-2023-43010.md): The issue was addressed with improved memory handling. (CVSS 8.8, Apple iOS and iPadOS · Apple Safari +1)
- [CVE-2026-3969](https://cve.now/CVE-2026-3969.md): FeMiner wms Basic Organizational Structure depart\_add\_bg.php sql injection (CVSS 6.9, FeMiner wms)
- [CVE-2026-3968](https://cve.now/CVE-2026-3968.md): AutohomeCorp frostmourne Oracle Nashorn JavaScript ExpressionRule.java scriptEngine.eval code injection (CVSS 5.3, AutohomeCorp frostmourne)
- [CVE-2026-3967](https://cve.now/CVE-2026-3967.md): Alfresco Activiti Process Variable Serialization System SerializableType.java createObjectInputStream deserialization (CVSS 5.3, Alfresco Activiti)
- [CVE-2026-3966](https://cve.now/CVE-2026-3966.md): 648540858 wvp-GB28181-pro IP Address ABLMediaNodeServerService.java getDownloadFilePath server-side request forgery (CVSS 5.3, 648540858 wvp-GB28181-pro)
- [CVE-2025-61154](https://cve.now/CVE-2025-61154.md): Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Servi (CVSS 6.5)
- [CVE-2025-66955](https://cve.now/CVE-2025-66955.md): Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access file (CVSS 6.5)
- [CVE-2025-70245](https://cve.now/CVE-2025-70245.md): Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode. (CVSS 7.5)
- [CVE-2025-70873](https://cve.now/CVE-2025-70873.md): An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to ob (CVSS 7.5, sqlite)
- [CVE-2026-25817](https://cve.now/CVE-2026-25817.md): HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 ha (CVSS 8.8)
- [CVE-2026-25818](https://cve.now/CVE-2026-25818.md): HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 ha (CVSS 9.1)
- [CVE-2026-25819](https://cve.now/CVE-2026-25819.md): HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 al (CVSS 7.5)
- [CVE-2026-25823](https://cve.now/CVE-2026-25823.md): HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 ha (CVSS 9.8)
- [CVE-2026-26791](https://cve.now/CVE-2026-26791.md): GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable\_echo\_ser (CVSS 9.8)
- [CVE-2026-26792](https://cve.now/CVE-2026-26792.md): GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set\_upgrade function via the modem\_u (CVSS 9.8)
- [CVE-2026-26793](https://cve.now/CVE-2026-26793.md): GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set\_config function. (CVSS 9.8)
- [CVE-2026-26794](https://cve.now/CVE-2026-26794.md): GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add\_group() function. (CVSS 8.8)
- [CVE-2026-26795](https://cve.now/CVE-2026-26795.md): GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get\_system\_log fun (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.