CVEs published March 14, 2026
7 CVEs were published on March 14, 2026: 1 critical, 1 high.
- Published
- 7
- Critical
- 1
- High
- 1
- Medium
- 4
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- zephyrproject-rtos Zephyr
- 2
- Apache Software Foundation Apache Spark · org.apache.spa… +4
- 1
- thimpress Thim Kit for Elementor – Pre-built Templates & Wi…
- 1
- Vulnogram
- 1
- Wavlink WL-WN579A3
- 1
- webaways NEX-Forms – Ultimate Forms Plugin for WordPress
- 1
Critical 1
High 1
Medium, low and unrated 5
- CVE-2026-4179stm32: usb: Infinite while loop in Interrupt Handlerzephyrproject-rtos Zephyr
- CVE-2026-32774Vulnogram - Stored Cross-Site Scripting via Comment HypertextVulnogram
- CVE-2026-0849crypto: ATAES132A response length allows stack buffer overflowzephyrproject-rtos Zephyr
- CVE-2026-1870Thim Kit for Elementor <= 1.3.7 - Missing Authorization to Unauthenticated Private Course Disclosurethimpress Thim Kit for Elementor – Pre-built Templates & Wi…
- CVE-2026-1948NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Authenticated (Subscriber+) License Deactivation via deactivate_licensewebaways NEX-Forms – Ultimate Forms Plugin for WordPress