# CVEs published 2026-03-16

191 CVEs were published on March 16, 2026: 12 critical, 49 high. Days are UTC.

- [CVE-2026-4287](https://cve.now/CVE-2026-4287.md): Tiandy Easy7 Integrated Management Platform Endpoint queryResources sql injection (CVSS 6.9, Tiandy Easy7 Integrated Management Platform)
- [CVE-2026-4285](https://cve.now/CVE-2026-4285.md): taoofagi easegen-admin Pdf2MdUtil.java recognizeMarkdown path traversal (CVSS 5.1, taoofagi easegen-admin)
- [CVE-2026-4284](https://cve.now/CVE-2026-4284.md): taoofagi easegen-admin PPT File PPTUtil.java downloadFile server-side request forgery (CVSS 5.1, taoofagi easegen-admin)
- [CVE-2026-4177](https://cve.now/CVE-2026-4177.md): YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter (CVSS 9.1, TODDR YAML::Syck)
- [CVE-2026-21991](https://cve.now/CVE-2026-21991.md): A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names. (CVSS 5.5, Oracle Linux)
- [CVE-2026-29522](https://cve.now/CVE-2026-29522.md): ZwickRoell Test Data Management \< 3.0.8 Path Traversal LFI (CVSS 8.7, ZwickRoell GmbH & Co. KG Test Data Management)
- [CVE-2026-1629](https://cve.now/CVE-2026-1629.md): Permalink Preview Information Disclosure After Permission Revocation (CVSS 4.3, Mattermost)
- [CVE-2026-26230](https://cve.now/CVE-2026-26230.md): Team Admin Privilege Escalation to Demote Members to Guest (CVSS 3.8, Mattermost)
- [CVE-2026-2454](https://cve.now/CVE-2026-2454.md): DoS in Calls plugin via malformed msgpack in websocket request. (CVSS 5.8, Mattermost)
- [CVE-2026-26304](https://cve.now/CVE-2026-26304.md): Permission Bypass in Playbook Run Creation (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-plugin-playbo…)
- [CVE-2026-30882](https://cve.now/CVE-2026-30882.md): Chamilo LMS: Reflected XSS in the session category listing page (CVSS 6.1, chamilo-lms)
- [CVE-2026-30881](https://cve.now/CVE-2026-30881.md): Chamilo LMS: SQL Injection in the statistics AJAX endpoint (CVSS 8.8, chamilo-lms)
- [CVE-2026-30876](https://cve.now/CVE-2026-30876.md): Chamilo LMS: User enumeration vulnerability via response (CVSS 6.3, chamilo-lms)
- [CVE-2026-30875](https://cve.now/CVE-2026-30875.md): Chamilo LMS: Authenticated RCE via H5P Import (CVSS 8.8, chamilo-lms)
- [CVE-2026-28430](https://cve.now/CVE-2026-28430.md): Chamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php (CVSS 9.3, chamilo-lms)
- [CVE-2026-29516](https://cve.now/CVE-2026-29516.md): Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure (CVSS 6.9, Buffalo TeraStation NAS TS5400R)
- [CVE-2026-32267](https://cve.now/CVE-2026-32267.md): Craft CMS Vulnerable to Privilege Escalation/Bypass through UsersController-\>actionImpersonateWithToken() (CVSS 7.7, craftcms cms · craftcms/cms)
- [CVE-2026-32264](https://cve.now/CVE-2026-32264.md): Craft CMS vulnerable to behavior injection RCE ElementIndexesController and FieldsController (CVSS 8.6, craftcms cms · craftcms/cms)
- [CVE-2026-32263](https://cve.now/CVE-2026-32263.md): Craft CMS vulnerable to behavior injection RCE via EntryTypesController (CVSS 8.6, craftcms cms · craftcms/cms)
- [CVE-2026-32262](https://cve.now/CVE-2026-32262.md): Craft CMS has a Path Traversal Vulnerability in AssetsController (CVSS 5.3, craftcms cms · craftcms/cms)
- [CVE-2026-32261](https://cve.now/CVE-2026-32261.md): RCE via SSTI for users with permissions to access the Craft CMS Webhooks plugin (CVSS 8.5, craftcms webhooks · craftcms/webhooks)
- [CVE-2025-69196](https://cve.now/CVE-2025-69196.md): FastMCP OAuth Proxy token reuse across MCP servers (CVSS 7.4, jlowin fastmcp · fastmcp)
- [CVE-2026-4269](https://cve.now/CVE-2026-4269.md): Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit (CVSS 7.5, AWS Bedrock AgentCore Starter Toolkit · bedrock-agentcore-s…)
- [CVE-2026-28498](https://cve.now/CVE-2026-28498.md): Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding (CVSS 8.2, authlib)
- [CVE-2026-4224](https://cve.now/CVE-2026-4224.md): Stack overflow parsing XML with deeply nested DTD content models (CVSS 6.0, Python Software Foundation CPython)
- [CVE-2026-28490](https://cve.now/CVE-2026-28490.md): Authlib Vulnerable to JWE RSA1\_5 Bleichenbacher Padding Oracle (CVSS 8.3, authlib)
- [CVE-2026-3644](https://cve.now/CVE-2026-3644.md): Incomplete control character validation in http.cookies (CVSS 6.0, Python Software Foundation CPython)
- [CVE-2026-27962](https://cve.now/CVE-2026-27962.md): Authlib JWS JWK Header Injection: Signature Verification Bypass (CVSS 9.1, authlib)
- [CVE-2026-4254](https://cve.now/CVE-2026-4254.md): Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflow (CVSS 9.3, Tenda AC8)
- [CVE-2026-23862](https://cve.now/CVE-2026-23862.md): Dell ThinOS 10 versions prior to ThinOS 2602\_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Inj (CVSS 7.8, Dell ThinOS)
- [CVE-2026-23489](https://cve.now/CVE-2026-23489.md): Fields GLPI plugin vulnerable to RCE in dropdown generation (CVSS 9.1, pluginsGLPI fields)
- [CVE-2026-4253](https://cve.now/CVE-2026-4253.md): Tenda AC8 Web UploadCfg route\_set\_user\_policy\_rule os command injection (CVSS 5.1, Tenda AC8)
- [CVE-2026-29510](https://cve.now/CVE-2026-29510.md): Hereta ETH-IMC408M Stored XSS via Device Name (CVSS 5.1, Shenzhen Hereta Technology Co. Hereta ETH-IMC408M)
- [CVE-2026-29513](https://cve.now/CVE-2026-29513.md): Hereta ETH-IMC408M Stored XSS via Device Location (CVSS 5.1, Shenzhen Hereta Technology Co. Hereta ETH-IMC408M)
- [CVE-2026-29520](https://cve.now/CVE-2026-29520.md): Hereta ETH-IMC408M Reflected XSS via ping\_ipaddr Parameter (CVSS 5.1, Shenzhen Hereta Technology Co. Hereta ETH-IMC408M)
- [CVE-2026-29521](https://cve.now/CVE-2026-29521.md): Hereta ETH-IMC408M CSRF via Configuration Setup (CVSS 5.1, Shenzhen Hereta Technology Co. Hereta ETH-IMC408M)
- [CVE-2026-4252](https://cve.now/CVE-2026-4252.md): Tenda AC8 IPv6 check\_is\_ipv6 ip address for authentication (CVSS 9.3, Tenda AC8)
- [CVE-2026-4270](https://cve.now/CVE-2026-4270.md): AWS API MCP File Access Restriction Bypass (CVSS 5.5, AWS API MCP Server · awslabs-aws-api-mcp-server)
- [CVE-2026-4251](https://cve.now/CVE-2026-4251.md): CityData CityChat ai.citydata.citychat credentials.json credentials storage (CVSS 2.0, CityData CityChat)
- [CVE-2026-4250](https://cve.now/CVE-2026-4250.md): Albert Sağlık Hizmetleri ve Ticaret Albert Health Google Cloud Service Account Key service-account.json credentials storage (CVSS 2.0, Albert Sağlık Hizmetleri ve Ticaret Albert Health)
- [CVE-2026-4276](https://cve.now/CVE-2026-4276.md): LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries. (CVSS 7.5, LibreChat RAG API)
- [CVE-2025-62319](https://cve.now/CVE-2025-62319.md): Boolean-Based SQL Injection in Multiple Unica Components (CVSS 9.8, HCL Unica)
- [CVE-2026-32587](https://cve.now/CVE-2026-32587.md): WordPress WP EasyPay plugin \<= 4.2.11 - Broken Access Control vulnerability (CVSS 5.4, Saad Iqbal WP EasyPay)
- [CVE-2026-32583](https://cve.now/CVE-2026-32583.md): WordPress Modern Events Calendar plugin \<= 7.29.0 - Broken Access Control vulnerability (CVSS 5.3, Webnus Modern Events Calendar)
- [CVE-2026-4243](https://cve.now/CVE-2026-4243.md): La Nacion App app.lanacion.activity BuildConfig.java credentials storage (CVSS 2.0, La Nacion App)
- [CVE-2026-24692](https://cve.now/CVE-2026-24692.md): Guest users can bypass read permissions via search API (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-22545](https://cve.now/CVE-2026-22545.md): Password Change Bypass via Auth Switch Endpoint (CVSS 3.1, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-2455](https://cve.now/CVE-2026-2455.md): SSRF bypass via IPv4-mapped IPv6 literals (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2026-21386](https://cve.now/CVE-2026-21386.md): Private channel enumeration via /mute slash command (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2025-2274](https://cve.now/CVE-2025-2274.md): Stored Cross Site Scripting in Forcepoint Web Security (CVSS 4.8, Forcepoint Web Security)
- [CVE-2025-52642](https://cve.now/CVE-2025-52642.md): HCL AION is affected by an internal filesystem paths disloser vulnerability (CVSS 3.3, HCL AION)
- [CVE-2025-52646](https://cve.now/CVE-2025-52646.md): HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. (CVSS 2.2, HCL AION)
- [CVE-2025-52645](https://cve.now/CVE-2025-52645.md): HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. (CVSS 1.9, HCL AION)
- [CVE-2025-52649](https://cve.now/CVE-2025-52649.md): HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature (CVSS 1.8, HCL AION)
- [CVE-2026-4242](https://cve.now/CVE-2026-4242.md): BabyChakra Pregnancy & Parenting App app.babychakra.babychakra Configuration.java credentials storage (CVSS 2.0, BabyChakra Pregnancy & Parenting App)
- [CVE-2025-52644](https://cve.now/CVE-2025-52644.md): HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. (CVSS 5.8, HCL AION)
- [CVE-2025-52643](https://cve.now/CVE-2025-52643.md): HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment (CVSS 4.7, HCL AION)
- [CVE-2025-52636](https://cve.now/CVE-2025-52636.md): HCL AION is affected by a improper handling of uploads files Size (CVSS 1.8, HCL AION)
- [CVE-2026-25369](https://cve.now/CVE-2026-25369.md): WordPress Flexmls® IDX plugin \<= 3.15.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Flexmls® IDX)
- [CVE-2026-4241](https://cve.now/CVE-2026-4241.md): itsourcecode College Management System time-table.php sql injection (CVSS 5.3, itsourcecode College Management System)
- [CVE-2026-4240](https://cve.now/CVE-2026-4240.md): Open5GS CCA smf\_s6b\_sta\_cb denial of service (CVSS 6.9, Open5GS)
- [CVE-2025-10461](https://cve.now/CVE-2025-10461.md): Global file reads caused by improper URL checks in webserver (CVSS 5.3, Softing smartLink SW-HT · Softing smartLink SW-PN)
- [CVE-2025-10685](https://cve.now/CVE-2025-10685.md): HTTP POST with specific higher content length leads into heap corruption (CVSS 7.7, Softing smartLink SW-PN · Softing smartLink SW-HT)
- [CVE-2026-4239](https://cve.now/CVE-2026-4239.md): Lagom WHMCS Template Datatables prototype pollution (CVSS 5.1, Lagom WHMCS Template)
- [CVE-2026-25780](https://cve.now/CVE-2026-25780.md): Memory Exhaustion via Malformed DOC File Upload (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2025-52648](https://cve.now/CVE-2025-52648.md): HCL AION is affected by a vulnerability where offering images are not digitally signed. (CVSS 4.8, HCL AION)
- [CVE-2025-52638](https://cve.now/CVE-2025-52638.md): Multiple security vulnerabilities affect HCL AION (CVSS 5.6, HCL AION)
- [CVE-2026-4238](https://cve.now/CVE-2026-4238.md): itsourcecode College Management System courses.php sql injection (CVSS 5.1, itsourcecode College Management System)
- [CVE-2025-52637](https://cve.now/CVE-2025-52637.md): Multiple security vulnerabilities affect HCL AION (CVSS 4.5, HCL AION)
- [CVE-2026-4265](https://cve.now/CVE-2026-4265.md): Guest user can upload files without permission across teams (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-25783](https://cve.now/CVE-2026-25783.md): Denial of service via malformed User-Agent header in getBrowserVersion (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-24458](https://cve.now/CVE-2026-24458.md): DoS attack via login attempts with multi-megabyte passwords (CVSS 7.5, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2026-4237](https://cve.now/CVE-2026-4237.md): itsourcecode Free Hotel Reservation System index.php sql injection (CVSS 6.9, itsourcecode Free Hotel Reservation System)
- [CVE-2026-2462](https://cve.now/CVE-2026-2462.md): Admin RCE via Malicious Plugin Upload on CI Test Instances (CVSS 6.6, Mattermost)
- [CVE-2026-2578](https://cve.now/CVE-2026-2578.md): Information Disclosure via WebSocket Event When Deleting Unrevealed Burn on Read Posts (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2025-69246](https://cve.now/CVE-2025-69246.md): Lack of bruteforce protection in Raytha CMS (CVSS 6.9, Raytha)
- [CVE-2025-69245](https://cve.now/CVE-2025-69245.md): Reflected XSS in Raytha CMS (CVSS 5.1, Raytha)
- [CVE-2025-69243](https://cve.now/CVE-2025-69243.md): User enumeration in Raytha CMS (CVSS 6.9, Raytha)
- [CVE-2025-69242](https://cve.now/CVE-2025-69242.md): Reflected XSS in Raytha CMS (CVSS 5.1, Raytha)
- [CVE-2025-69241](https://cve.now/CVE-2025-69241.md): Stored XSS in Raytha CMS (CVSS 5.3, Raytha)
- [CVE-2025-69240](https://cve.now/CVE-2025-69240.md): Header Poisoning in Raytha CMS (CVSS 7.5, Raytha)
- [CVE-2025-69239](https://cve.now/CVE-2025-69239.md): Server-Site Request Forgery in Raytha CMS (CVSS 5.1, Raytha)
- [CVE-2025-69238](https://cve.now/CVE-2025-69238.md): Cross-Site Request Forgery in Raytha CMS (CVSS 6.9, Raytha)
- [CVE-2025-69237](https://cve.now/CVE-2025-69237.md): Stored XSS in Raytha CMS (CVSS 5.1, Raytha)
- [CVE-2025-69236](https://cve.now/CVE-2025-69236.md): Stored XSS in Raytha CMS (CVSS 5.1, Raytha)
- [CVE-2025-15540](https://cve.now/CVE-2025-15540.md): Authenticated RCE in Raytha CMS (CVSS 8.6, Raytha)
- [CVE-2026-3476](https://cve.now/CVE-2026-3476.md): Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 (CVSS 7.8, Dassault Systèmes SOLIDWORKS Desktop)
- [CVE-2026-26246](https://cve.now/CVE-2026-26246.md): Memory Exhaustion via Malformed PSD File Upload (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2026-4236](https://cve.now/CVE-2026-4236.md): itsourcecode Online Enrollment System index.php sql injection (CVSS 6.9, itsourcecode Online Enrollment System)
- [CVE-2026-2458](https://cve.now/CVE-2026-2458.md): Unauthorized channel enumeration in private teams after member removal (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-2457](https://cve.now/CVE-2026-2457.md): WebSocket Message Spoofing via Permalink Embed Manipulation (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-2461](https://cve.now/CVE-2026-2461.md): Missing authorization check allows unauthorized modification of other users' comments on a board (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-plugin-boards)
- [CVE-2026-2463](https://cve.now/CVE-2026-2463.md): Unauthorized access to invite ID during team creation (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-2476](https://cve.now/CVE-2026-2476.md): MS Teams plugin sensitive config values not properly masked in support packets (CVSS 7.6, Mattermost · github.com/mattermost/mattermost-plugin-msteams)
- [CVE-2026-2456](https://cve.now/CVE-2026-2456.md): Denial of Service via Unbounded Memory Allocation in Integration Actions (CVSS 5.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2026-4235](https://cve.now/CVE-2026-4235.md): itsourcecode Online Enrollment System login.php sql injection (CVSS 6.9, itsourcecode Online Enrollment System)
- [CVE-2025-15554](https://cve.now/CVE-2025-15554.md): Admin Passwords Cached by Browsers in Truesec LAPSWebUI (CVSS 6.0, Truesec LAPSWebUI)
- [CVE-2025-15553](https://cve.now/CVE-2025-15553.md): Insecure Logout Functionality in Truesec LAPSWebUI (CVSS 6.0, Truesec LAPSWebUI)
- [CVE-2025-15552](https://cve.now/CVE-2025-15552.md): Long Session Lifetime in Truesec LAPSWebUI (CVSS 6.0, Truesec LAPSWebUI)
- [CVE-2026-4234](https://cve.now/CVE-2026-4234.md): SSCMS DDL SitesAddController.Submit.cs sql injection (CVSS 5.3, SSCMS)
- [CVE-2026-3024](https://cve.now/CVE-2026-3024.md): Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma application web (CVSS 4.8, Wakyma application web)
- [CVE-2026-3023](https://cve.now/CVE-2026-3023.md): Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web (CVSS 5.3, Wakyma application web)
- [CVE-2026-3022](https://cve.now/CVE-2026-3022.md): Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web (CVSS 7.1, Wakyma application web)
- [CVE-2026-3021](https://cve.now/CVE-2026-3021.md): Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web (CVSS 7.1, Wakyma application web)
- [CVE-2026-3020](https://cve.now/CVE-2026-3020.md): Identity based authorization bypass vulnerability (IDOR) in the Wakyma application web (CVSS 8.6, Wakyma application web)
- [CVE-2026-4233](https://cve.now/CVE-2026-4233.md): ThingsGateway download path traversal (CVSS 5.3, ThingsGateway)
- [CVE-2026-3111](https://cve.now/CVE-2026-3111.md): Multiple vulnerabilities on the Educativa Campus (CVSS 6.9, Educativa Campus)
- [CVE-2026-3110](https://cve.now/CVE-2026-3110.md): Multiple vulnerabilities on the Educativa Campus (CVSS 8.7, Educativa Campus)
- [CVE-2026-4232](https://cve.now/CVE-2026-4232.md): Tiandy Integrated Management Platform getAuthorityByUserId sql injection (CVSS 6.9, Tiandy Integrated Management Platform)
- [CVE-2025-11500](https://cve.now/CVE-2025-11500.md): Credentials exposure in tinycontrol devices (CVSS 8.7, tinycontrol Lan Kontroler · tinycontrol LK3.9 +2)
- [CVE-2025-15587](https://cve.now/CVE-2025-15587.md): Credentials exposure in tinycontrol devices (CVSS 8.6, tinycontrol Lan Kontroler · tinycontrol LK3.9 +2)
- [CVE-2026-4231](https://cve.now/CVE-2026-4231.md): vanna-ai vanna Endpoint \_\_init\_\_.py run\_sql server-side request forgery (CVSS 6.9, vanna-ai vanna)
- [CVE-2026-4230](https://cve.now/CVE-2026-4230.md): vanna-ai vanna Endpoint \_\_init\_\_.py update\_sql sql injection (CVSS 5.3, vanna-ai vanna)
- [CVE-2026-4229](https://cve.now/CVE-2026-4229.md): vanna-ai vanna bigquery\_vector.py remove\_training\_data sql injection (CVSS 6.9, vanna-ai vanna · vanna)
- [CVE-2026-4228](https://cve.now/CVE-2026-4228.md): LB-LINK BL-WR9000 set\_wifi sub\_458754 command injection (CVSS 5.3, LB-LINK BL-WR9000)
- [CVE-2026-4227](https://cve.now/CVE-2026-4227.md): LB-LINK BL-WR9000 get\_hidessid\_cfg sub\_44D844 buffer overflow (CVSS 8.7, LB-LINK BL-WR9000)
- [CVE-2026-4226](https://cve.now/CVE-2026-4226.md): LB-LINK BL-WR9000 get\_virtual\_cfg sub\_44E8D0 stack-based overflow (CVSS 8.7, LB-LINK BL-WR9000)
- [CVE-2026-4225](https://cve.now/CVE-2026-4225.md): CMS Made Simple User Management listusers.php cross site scripting (CVSS 4.8, CMS Made Simple)
- [CVE-2026-4255](https://cve.now/CVE-2026-4255.md): DLL Injection Privilege Escalation (CVSS 8.4, thermalright TR-VISION HOME)
- [CVE-2025-6969](https://cve.now/CVE-2025-6969.md): ability\_ability\_runtime an improper input validation vulnerability (CVSS 5.0, OpenHarmony)
- [CVE-2025-26474](https://cve.now/CVE-2025-26474.md): communication\_ipc an improper input validation vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2025-52458](https://cve.now/CVE-2025-52458.md): arkcompiler\_ets\_runtime has an out-of-bounds write vulnerability (CVSS 5.5, OpenHarmony)
- [CVE-2025-41432](https://cve.now/CVE-2025-41432.md): arkcompiler\_ets\_runtime has an out-of-bounds write vulnerability (CVSS 5.5, OpenHarmony)
- [CVE-2025-25277](https://cve.now/CVE-2025-25277.md): arkcompiler\_ets\_runtime has a type confusion vulnerability (CVSS 6.3, OpenHarmony)
- [CVE-2025-12736](https://cve.now/CVE-2025-12736.md): multimedia\_audio\_standard has an insecure storage of sensitive information vulnerability (CVSS 6.5, OpenHarmony)
- [CVE-2026-0639](https://cve.now/CVE-2026-0639.md): liteos\_a has a missing release of memory vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2026-32778](https://cve.now/CVE-2026-32778.md): libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition. (CVSS 2.9, libexpat project libexpat)
- [CVE-2026-4223](https://cve.now/CVE-2026-4223.md): itsourcecode Payroll Management System manage\_employee.php sql injection (CVSS 6.9, itsourcecode Payroll Management System)
- [CVE-2026-32777](https://cve.now/CVE-2026-32777.md): libexpat before 2.7.5 allows an infinite loop while parsing DTD content. (CVSS 4.0, libexpat project libexpat)
- [CVE-2026-32776](https://cve.now/CVE-2026-32776.md): libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content. (CVSS 4.0, libexpat project libexpat)
- [CVE-2026-25083](https://cve.now/CVE-2026-25083.md): GROWI OpenAI thread/message API endpoints do not perform authorization. (CVSS 8.3, GROWI)
- [CVE-2026-4222](https://cve.now/CVE-2026-4222.md): SSCMS download PathUtils.RemoveParentPath path traversal (CVSS 5.1, SSCMS)
- [CVE-2026-4221](https://cve.now/CVE-2026-4221.md): Tiandy Easy7 Integrated Management Platform Endpoint uploadLedImage unrestricted upload (CVSS 6.9, Tiandy Easy7 Integrated Management Platform)
- [CVE-2026-32775](https://cve.now/CVE-2026-32775.md): libexif through 0.6.25 has a flaw in decoding MakerNotes. (CVSS 7.4, libexif project libexif)
- [CVE-2025-71264](https://cve.now/CVE-2025-71264.md): Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash). (CVSS 3.7, Mumble)
- [CVE-2026-4220](https://cve.now/CVE-2026-4220.md): Technologies Integrated Management Platform SetWebpagePic.jsp unrestricted upload (CVSS 6.9, Technologies Integrated Management Platform)
- [CVE-2026-4219](https://cve.now/CVE-2026-4219.md): INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App ae.index.apgcs BuildConfig.java hard-coded credentials (CVSS 4.8, INDEX Conferences & Exhibitions Organization YWF BPOF APGCS…)
- [CVE-2026-4218](https://cve.now/CVE-2026-4218.md): myAEDES App aedes.me.beta EngageBayUtils.java information disclosure (CVSS 2.0, myAEDES App)
- [CVE-2026-31386](https://cve.now/CVE-2026-31386.md): OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. (CVSS 7.2, LiteSpeed Technologies OpenLiteSpeed · LiteSpeed Technologi…)
- [CVE-2026-4217](https://cve.now/CVE-2026-4217.md): XREAL Nebula App ai.nreal.nebula.universal CloudStoragePlugin.java credentials storage (CVSS 2.0, XREAL Nebula App)
- [CVE-2026-4216](https://cve.now/CVE-2026-4216.md): i-SENS SmartLog App air.SmartLog.android hard-coded credentials (CVSS 4.8, i-SENS SmartLog App)
- [CVE-2026-21005](https://cve.now/CVE-2026-21005.md): Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege (CVSS 7.1, Samsung Mobile Smart Switch)
- [CVE-2026-21004](https://cve.now/CVE-2026-21004.md): Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service. (CVSS 6.9, Samsung Mobile Smart Switch)
- [CVE-2026-4215](https://cve.now/CVE-2026-4215.md): FlowCI flow-core-x SMTP Host ConfigServiceImpl.java save server-side request forgery (CVSS 5.3, FlowCI flow-core-x)
- [CVE-2026-21002](https://cve.now/CVE-2026-21002.md): Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary applic (CVSS 5.9, Samsung Mobile Galaxy Store)
- [CVE-2026-4214](https://cve.now/CVE-2026-4214.md): D-Link DNS-1550-04 app\_mgr.cgi UPnP\_AV\_Server\_Path\_Setting stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-21001](https://cve.now/CVE-2026-21001.md): Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege. (CVSS 5.9, Samsung Mobile Galaxy Store)
- [CVE-2026-21000](https://cve.now/CVE-2026-21000.md): Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege. (CVSS 7.0, Samsung Mobile Galaxy Store)
- [CVE-2026-20999](https://cve.now/CVE-2026-20999.md): Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions. (CVSS 7.1, Samsung Mobile Smart Switch)
- [CVE-2026-20998](https://cve.now/CVE-2026-20998.md): Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication. (CVSS 7.1, Samsung Mobile Smart Switch)
- [CVE-2026-20997](https://cve.now/CVE-2026-20997.md): Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass au (CVSS 5.3, Samsung Mobile Smart Switch)
- [CVE-2026-20996](https://cve.now/CVE-2026-20996.md): Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgrade (CVSS 7.1, Samsung Mobile Smart Switch)
- [CVE-2026-20995](https://cve.now/CVE-2026-20995.md): Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a spe (CVSS 5.3, Samsung Mobile Smart Switch)
- [CVE-2026-20994](https://cve.now/CVE-2026-20994.md): URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token. (CVSS 6.9, Samsung Mobile Samsung Account)
- [CVE-2026-20993](https://cve.now/CVE-2026-20993.md): Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved infor (CVSS 4.8, Samsung Mobile Samsung Assistant)
- [CVE-2026-20992](https://cve.now/CVE-2026-20992.md): Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of (CVSS 4.8, Samsung Mobile Devices)
- [CVE-2026-20991](https://cve.now/CVE-2026-20991.md): Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents. (CVSS 6.7, Samsung Mobile Devices)
- [CVE-2026-20990](https://cve.now/CVE-2026-20990.md): Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrar (CVSS 8.4, Samsung Mobile Devices)
- [CVE-2026-20989](https://cve.now/CVE-2026-20989.md): Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attackers to use custom fo (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2026-20988](https://cve.now/CVE-2026-20988.md): Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary (CVSS 6.8, Samsung Mobile Devices)
- [CVE-2026-4213](https://cve.now/CVE-2026-4213.md): D-Link DNS-1550-04 gui\_mgr.cgi cgi\_myfavorite\_verify stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-4212](https://cve.now/CVE-2026-4212.md): D-Link DNS-1550-04 download\_mgr.cgi Downloads\_Schedule\_Info stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-4211](https://cve.now/CVE-2026-4211.md): D-Link DNS-1550-04 local\_backup\_mgr.cgi Local\_Backup\_Info stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-4210](https://cve.now/CVE-2026-4210.md): D-Link DNS-1550-04 time\_machine.cgi cgi\_tm\_set\_share command injection (CVSS 5.3, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-4209](https://cve.now/CVE-2026-4209.md): D-Link DNS-1550-04 account\_mgr.cgi cgi\_chg\_admin\_pw command injection (CVSS 5.3, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-4207](https://cve.now/CVE-2026-4207.md): D-Link DNS-1550-04 system\_mgr.cgi cgi\_ntp\_time command injection (CVSS 5.3, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-4206](https://cve.now/CVE-2026-4206.md): D-Link DNS-1550-04 dsk\_mgr.cgi ScanDisk\_run\_e2fsck command injection (CVSS 5.3, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-4205](https://cve.now/CVE-2026-4205.md): D-Link DNS-1550-04 app\_mgr.cgi FTP\_Server\_BlockIP\_Del command injection (CVSS 5.3, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2017-20224](https://cve.now/CVE-2017-20224.md): Telesquare SKT LTE Router SDT-CS3B1 WebDAV Arbitrary File Upload (CVSS 9.3, Telesquare SDT-CS3B1)
- [CVE-2017-20223](https://cve.now/CVE-2017-20223.md): Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference (CVSS 9.3, Telesquare SDT-CS3B1)
- [CVE-2017-20222](https://cve.now/CVE-2017-20222.md): Telesquare SKT LTE Router SDT-CS3B1 Unauthenticated Remote Reboot (CVSS 8.7, Telesquare SDT-CS3B1)
- [CVE-2017-20221](https://cve.now/CVE-2017-20221.md): Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution (CVSS 5.3, Telesquare SDT-CS3B1)
- [CVE-2026-4204](https://cve.now/CVE-2026-4204.md): D-Link DNS-1550-04 gui\_mgr.cgi cgi\_mycloud\_auto\_downlaod command injection (CVSS 5.3, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-4203](https://cve.now/CVE-2026-4203.md): D-Link DNS-1550-04 network\_mgr.cgi cgi\_dhcpd command injection (CVSS 5.3, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-4201](https://cve.now/CVE-2026-4201.md): glowxq glowxq-oj SysFileController.java upload unrestricted upload (CVSS 6.9, glowxq-oj)
- [CVE-2026-4200](https://cve.now/CVE-2026-4200.md): glowxq glowxq-oj ProblemCaseController.java uploadTestcaseZipUrl server-side request forgery (CVSS 6.9, glowxq-oj)
- [CVE-2026-4199](https://cve.now/CVE-2026-4199.md): bazinga012 mcp\_code\_executor index.ts installDependencies command injection (CVSS 4.8, bazinga012 mcp\_code\_executor)
- [CVE-2025-50881](https://cve.now/CVE-2025-50881.md): The \`flow/admin/moniteur.php\` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution. (CVSS 8.8)
- [CVE-2025-57543](https://cve.now/CVE-2025-57543.md): Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. (CVSS 6.1)
- [CVE-2025-65734](https://cve.now/CVE-2025-65734.md): An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, (CVSS 5.4)
- [CVE-2025-66687](https://cve.now/CVE-2025-66687.md): Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation during the extraction of game files (CVSS 7.5)
- [CVE-2025-68971](https://cve.now/CVE-2025-68971.md): In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment (e.g., to be as (CVSS 6.5)
- [CVE-2025-69693](https://cve.now/CVE-2025-69693.md): Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). (CVSS 5.4)
- [CVE-2025-69727](https://cve.now/CVE-2025-69727.md): An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8. (CVSS 5.3)
- [CVE-2025-69768](https://cve.now/CVE-2025-69768.md): SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component (CVSS 7.5)
- [CVE-2025-69783](https://cve.now/CVE-2025-69783.md): A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name (e.g (CVSS 7.8)
- [CVE-2025-69784](https://cve.now/CVE-2025-69784.md): A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injec (CVSS 8.8)
- [CVE-2025-69808](https://cve.now/CVE-2025-69808.md): An out-of-bounds memory access (OOB) in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to access sensitive information and cau (CVSS 9.1)
- [CVE-2025-69809](https://cve.now/CVE-2025-69809.md): A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling a (CVSS 9.8)
- [CVE-2025-69902](https://cve.now/CVE-2025-69902.md): A command injection vulnerability in the minimal\_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to execute arbitrary com (CVSS 9.8)
- [CVE-2026-30405](https://cve.now/CVE-2026-30405.md): An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT\_HOP path attribute (CVSS 7.5, github.com/osrg/gobgp/v4 · github.com/osrg/gobgp +1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-03-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.