# CVEs published 2026-03-17

113 CVEs were published on March 17, 2026: 10 critical, 34 high. Days are UTC.

- [CVE-2026-27978](https://cve.now/CVE-2026-27978.md): Next.js: null origin can bypass Server Actions CSRF checks (CVSS 5.3, vercel next.js · next)
- [CVE-2026-27977](https://cve.now/CVE-2026-27977.md): Next.js: null origin can bypass dev HMR websocket CSRF checks (CVSS 2.3, vercel next.js · next)
- [CVE-2026-27895](https://cve.now/CVE-2026-27895.md): LAM has incorrect regular expression in PDF export component that allows user to upload files of any type (CVSS 4.3, LDAPAccountManager lam)
- [CVE-2026-27894](https://cve.now/CVE-2026-27894.md): LAM has Authenticated Local File Inclusion (LFI) in PDF export (CVSS 8.8, LDAPAccountManager lam)
- [CVE-2026-27811](https://cve.now/CVE-2026-27811.md): Roxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCE (CVSS 8.8, roxy-wi)
- [CVE-2026-27459](https://cve.now/CVE-2026-27459.md): pyOpenSSL DTLS cookie callback buffer overflow (CVSS 7.2, pyca pyopenssl · pyopenssl)
- [CVE-2026-4355](https://cve.now/CVE-2026-4355.md): Portabilis i-Educar Endpoint educar\_servidor\_curso\_lst.php cross site scripting (CVSS 5.1, Portabilis i-Educar)
- [CVE-2026-4354](https://cve.now/CVE-2026-4354.md): TRENDnet TEW-824DRU Web apply\_sec.cgi sub\_420A78 cross site scripting (CVSS 5.1, TRENDnet TEW-824DRU)
- [CVE-2026-27448](https://cve.now/CVE-2026-27448.md): pyOpenSSL allows TLS connection bypass via unhandled callback exception in set\_tlsext\_servername\_callback (CVSS 1.7, pyca pyopenssl · pyopenssl)
- [CVE-2026-26004](https://cve.now/CVE-2026-26004.md): Sentry allows unauthorized access to event data across organizational boundaries (CVSS 5.7, getsentry sentry)
- [CVE-2026-26001](https://cve.now/CVE-2026-26001.md): GLPI Inventory Plugin has SQL Injection on dropdown\_calendar Report (CVSS 7.1, glpi-project glpi-inventory-plugin)
- [CVE-2026-25937](https://cve.now/CVE-2026-25937.md): GLPI has a MFA bypass (CVSS 6.5, glpi-project glpi)
- [CVE-2026-22727](https://cve.now/CVE-2026-22727.md): Cloud Foundry unprotected internal endpoints (CVSS 7.5, Cloudfoundry Cloud Foundry)
- [CVE-2026-21994](https://cve.now/CVE-2026-21994.md): Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: (CVSS 9.8, Oracle Edge Cloud Infrastructure Designer and Visualisation…)
- [CVE-2026-1264](https://cve.now/CVE-2026-1264.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls (CVSS 7.1, IBM Sterling B2B Integrator)
- [CVE-2025-14031](https://cve.now/CVE-2025-14031.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service (CVSS 7.5, IBM Sterling B2B Integrator)
- [CVE-2026-20643](https://cve.now/CVE-2026-20643.md): A cross-origin issue in the Navigation API was addressed with improved input validation. (CVSS 5.4, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2026-3856](https://cve.now/CVE-2026-3856.md): IBM Db2 Recovery Expert Missing Integrity Check (CVSS 5.3, IBM Db2 Recovery Expert)
- [CVE-2026-1376](https://cve.now/CVE-2026-1376.md): IBM i Denial of Service (CVSS 7.5, IBM i)
- [CVE-2026-1267](https://cve.now/CVE-2026-1267.md): IBM Planning Analytics Information Disclosure (CVSS 6.5, IBM Planning Analytics Local)
- [CVE-2025-14806](https://cve.now/CVE-2025-14806.md): IBM Planning Analytics Information Disclosure (CVSS 5.7, IBM Planning Analytics Local)
- [CVE-2026-32838](https://cve.now/CVE-2026-32838.md): Edimax GS-5008PL \<= 1.00.54 Transmits Credentials Over Cleartext HTTP (CVSS 8.7, EDIMAX Technology Co. Edimax GS-5008PL)
- [CVE-2026-32839](https://cve.now/CVE-2026-32839.md): Edimax GS-5008PL \<= 1.00.54 CSRF via Management CGI Endpoints (CVSS 5.1, EDIMAX Technology Co. Edimax GS-5008PL)
- [CVE-2026-32840](https://cve.now/CVE-2026-32840.md): Edimax GS-5008PL \<= 1.00.54 Stored XSS via Device Name (CVSS 5.1, EDIMAX Technology Co. Edimax GS-5008PL)
- [CVE-2026-32842](https://cve.now/CVE-2026-32842.md): Edimax GS-5008PL \<= 1.00.54 Admin Credentials Stored in Cleartext (CVSS 7.1, EDIMAX Technology Co. Edimax GS-5008PL)
- [CVE-2026-32841](https://cve.now/CVE-2026-32841.md): Edimax GS-5008PL \<= 1.00.54 Global Authentication State Across All Clients (CVSS 9.2, EDIMAX Technology Co. Edimax GS-5008PL)
- [CVE-2026-4349](https://cve.now/CVE-2026-4349.md): Duende IdentityServer4 Token Renewal Endpoint authorize improper authentication (CVSS 6.3, Duende IdentityServer4)
- [CVE-2026-2809](https://cve.now/CVE-2026-2809.md): Endpoint DLP Driver DLL (CVSS 6.7, Endpoint DLP Module for Netskope Client)
- [CVE-2026-4359](https://cve.now/CVE-2026-4359.md): Heap-buffer-over-read in \_mongoc\_http\_send via strstr on non-null-terminated buffer (CVSS 2.0, MongoDB C Driver)
- [CVE-2026-25936](https://cve.now/CVE-2026-25936.md): GLPI Vulnerable to Authenticated SQL Injection (CVSS 6.5, glpi-project glpi)
- [CVE-2026-32981](https://cve.now/CVE-2026-32981.md): Ray Dashboard \<= 2.8.0 Path Traversal Leading to Local File Disclosure (CVSS 8.7, ray-project Ray · ray)
- [CVE-2026-3563](https://cve.now/CVE-2026-3563.md): Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with (CVSS 5.5, Devolutions PowerShell Universal)
- [CVE-2026-4064](https://cve.now/CVE-2026-4064.md): Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with an (CVSS 8.3, Devolutions PowerShell Universal)
- [CVE-2026-4295](https://cve.now/CVE-2026-4295.md): Arbitrary code execution via crafted project files in Kiro IDE (CVSS 7.8, AWS Kiro IDE)
- [CVE-2026-32836](https://cve.now/CVE-2026-32836.md): mackron / dr\_libs dr\_flac.h Excessive Memory Allocation in PICTURE Metadata Parsing (CVSS 6.9, mackron dr\_libs dr\_flac.h)
- [CVE-2026-32837](https://cve.now/CVE-2026-32837.md): mackron / miniaudio Out-of-Bounds Read in BEXT Coding History Parsing (CVSS 5.1, mackron miniaudio)
- [CVE-2026-4358](https://cve.now/CVE-2026-4358.md): Memory safety issues in slot-based execution hash table spill (CVSS 6.1, MongoDB Server)
- [CVE-2025-15584](https://cve.now/CVE-2025-15584.md): Endpoint DLP Driver Filter Communication Port Integer Overflow (CVSS 6.8, Endpoint DLP Module for Netskope Client)
- [CVE-2025-66342](https://cve.now/CVE-2025-66342.md): A type confusion vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 7.8, Canva Affinity)
- [CVE-2025-62500](https://cve.now/CVE-2025-62500.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-61979](https://cve.now/CVE-2025-61979.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-64733](https://cve.now/CVE-2025-64733.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-66000](https://cve.now/CVE-2025-66000.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-64301](https://cve.now/CVE-2025-64301.md): An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 7.8, Canva Affinity)
- [CVE-2025-64776](https://cve.now/CVE-2025-64776.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-64735](https://cve.now/CVE-2025-64735.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-66633](https://cve.now/CVE-2025-66633.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-58427](https://cve.now/CVE-2025-58427.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-66617](https://cve.now/CVE-2025-66617.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-47873](https://cve.now/CVE-2025-47873.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-61952](https://cve.now/CVE-2025-61952.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-66503](https://cve.now/CVE-2025-66503.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-66042](https://cve.now/CVE-2025-66042.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-65119](https://cve.now/CVE-2025-65119.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2025-62403](https://cve.now/CVE-2025-62403.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2026-20726](https://cve.now/CVE-2026-20726.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2026-22882](https://cve.now/CVE-2026-22882.md): An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. (CVSS 6.1, Canva Affinity)
- [CVE-2026-25790](https://cve.now/CVE-2026-25790.md): Wazuh has Stack-Based Buffer Overflow in Security Configuration Assessment JSON Parser (CVSS 4.9, wazuh)
- [CVE-2026-3207](https://cve.now/CVE-2026-3207.md): TIBCO BPM Enterprise Remote Code Execution (RCE) Vulnerability (CVSS 8.7, TIBCO BPM Enterprise)
- [CVE-2026-25772](https://cve.now/CVE-2026-25772.md): Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow (CVSS 4.9, wazuh)
- [CVE-2026-25771](https://cve.now/CVE-2026-25771.md): Wazuh Vulnerable to Denial of Service via Synchronous I/O Blocking in Asynchronous Authentication Middleware (CVSS 5.3, wazuh)
- [CVE-2026-25770](https://cve.now/CVE-2026-25770.md): Wazuh has Privilege Escalation to Root via Cluster Protocol File Write (CVSS 9.1, wazuh)
- [CVE-2026-21570](https://cve.now/CVE-2026-21570.md): This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0 (CVSS 8.6, Atlassian Bamboo Data Center)
- [CVE-2026-25769](https://cve.now/CVE-2026-25769.md): Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization (CVSS 9.1, wazuh)
- [CVE-2026-25534](https://cve.now/CVE-2026-25534.md): Spinnaker clouddriver and orca URL validation bypass via underscores in hostnames (CVSS 9.1, io.spinnaker.clouddriver clouddriver-artifacts · io.spin… +2)
- [CVE-2026-32298](https://cve.now/CVE-2026-32298.md): Angeet ES3 KVM OS command injection (CVSS 8.5, ANGEET ES3 KVM)
- [CVE-2026-32297](https://cve.now/CVE-2026-32297.md): Angeet ES3 KVM unauthenticated arbitrary file write (CVSS 9.3, ANGEET ES3 KVM)
- [CVE-2026-32296](https://cve.now/CVE-2026-32296.md): Sipeed NanoKVM unauthenticated Wi-Fi configuration endpoint (CVSS 8.8, Sipeed NanoKVM)
- [CVE-2026-32295](https://cve.now/CVE-2026-32295.md): JetKVM insufficient login rate limiting (CVSS 9.3, JetKVM)
- [CVE-2026-32294](https://cve.now/CVE-2026-32294.md): JetKVM insufficient firmware verification (CVSS 4.7, JetKVM)
- [CVE-2026-32293](https://cve.now/CVE-2026-32293.md): GL-iNet Comet (GL-RM1) KVM insufficient certificate validation (CVSS 3.7, GL-iNet Comet KVM)
- [CVE-2026-32292](https://cve.now/CVE-2026-32292.md): GL-iNet Comet (GL-RM1) KVM insufficient login rate-limiting (CVSS 9.3, GL-iNet Comet KVM)
- [CVE-2026-32291](https://cve.now/CVE-2026-32291.md): GL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial console (CVSS 7.0, GL-iNet Comet KVM)
- [CVE-2026-32290](https://cve.now/CVE-2026-32290.md): GL-iNet Comet (GL-RM1) KVM insufficient firmware verification (CVSS 7.0, GL-iNet Comet KVM)
- [CVE-2026-4319](https://cve.now/CVE-2026-4319.md): code-projects Simple Food Order System add-item.php sql injection (CVSS 6.9, code-projects Simple Food Order System)
- [CVE-2026-4148](https://cve.now/CVE-2026-4148.md): ExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators (CVSS 8.7, MongoDB Server)
- [CVE-2026-4147](https://cve.now/CVE-2026-4147.md): Stack memory disclosure in filemd5 command (CVSS 7.1, MongoDB Server)
- [CVE-2026-28506](https://cve.now/CVE-2026-28506.md): Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Drafts (CVSS 4.3, outline)
- [CVE-2026-24901](https://cve.now/CVE-2026-24901.md): Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts (CVSS 8.1, outline)
- [CVE-2026-21886](https://cve.now/CVE-2026-21886.md): OpenCTI's GraphQL Mutations Allow Deletion of Unrelated Entities (CVSS 6.5, OpenCTI-Platform opencti · pycti)
- [CVE-2026-23759](https://cve.now/CVE-2026-23759.md): Perle IOLAN STS/SCS Authenticated Command Injection via 'shell ps' (CVSS 8.6, Perle Systems IOLAN STS · Perle Systems IOLAN SCS)
- [CVE-2026-4318](https://cve.now/CVE-2026-4318.md): UTT HiPER 810G formApLbConfig strcpy buffer overflow (CVSS 8.7, UTT HiPER)
- [CVE-2026-3564](https://cve.now/CVE-2026-3564.md): ScreenConnect Instance Level Cryptographic Material Exposure (CVSS 9.0, ConnectWise ScreenConnect)
- [CVE-2025-13406](https://cve.now/CVE-2025-13406.md): Scanning for higher HART revision device leads into NULL pointer dereference in live list (CVSS 6.8, Softing smartLink SW-HT)
- [CVE-2026-3888](https://cve.now/CVE-2026-3888.md): Local Privilege Escalation in snapd (CVSS 7.8, snapd · Canonical Ubuntu 16.04 LTS +4)
- [CVE-2026-4324](https://cve.now/CVE-2026-4324.md): Rubygem-katello: katello: denial of service and potential information disclosure via sql injection (CVSS 5.4, Red Hat Satellite 6.17 for RHEL · Red Hat Satellite 6.18… +3)
- [CVE-2025-62320](https://cve.now/CVE-2025-62320.md): HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica Platform (CVSS 4.7, HCL Sametime)
- [CVE-2025-31966](https://cve.now/CVE-2025-31966.md): Boolean-Based SQL Injection in Multiple Unica Components (CVSS 2.7, HCL Sametime)
- [CVE-2026-4271](https://cve.now/CVE-2026-4271.md): Libsoup: libsoup: denial of service via use-after-free in http/2 server (CVSS 5.3, Red Hat Enterprise Linux)
- [CVE-2026-28563](https://cve.now/CVE-2026-28563.md): Apache Airflow: DAG authorization bypass (CVSS 4.3, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2026-26929](https://cve.now/CVE-2026-26929.md): Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata (CVSS 6.5, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2026-30911](https://cve.now/CVE-2026-30911.md): Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization (CVSS 8.1, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2026-28779](https://cve.now/CVE-2026-28779.md): Apache Airflow: Path of session token in cookie does not consider base\_url - session hijacking via co-hosted applications (CVSS 7.5, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2026-3633](https://cve.now/CVE-2026-3633.md): Libsoup: libsoup: header and http request injection via crlf injection (CVSS 3.9, Red Hat Enterprise Linux)
- [CVE-2026-3632](https://cve.now/CVE-2026-3632.md): Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames (CVSS 3.9, Red Hat Enterprise Linux)
- [CVE-2026-3634](https://cve.now/CVE-2026-3634.md): Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header (CVSS 3.9, Red Hat Enterprise Linux)
- [CVE-2026-23241](https://cve.now/CVE-2026-23241.md): audit: add missing syscalls to read class (no CVSS, Linux)
- [CVE-2025-71239](https://cve.now/CVE-2025-71239.md): audit: add fchmodat2() to change attributes class (no CVSS, Linux)
- [CVE-2026-4208](https://cve.now/CVE-2026-4208.md): Authentication Bypass in extension "E-Mail MFA Provider" (mfa\_email) (CVSS 7.7, TYPO3 Extension "E-Mail MFA Provider" · ralffreit/mfa-email)
- [CVE-2026-4202](https://cve.now/CVE-2026-4202.md): Broken Access Control in extension "Redirect Tab" (CVSS 2.3, TYPO3 Extension "Redirect Tabs" · ayacoo/redirect-tab)
- [CVE-2026-1323](https://cve.now/CVE-2026-1323.md): Insecure Deserialization in extension "Mailqueue" (mailqueue) (CVSS 5.2, TYPO3 Extension "Mailqueue" · cpsit/typo3-mailqueue)
- [CVE-2026-32586](https://cve.now/CVE-2026-32586.md): WordPress Booster for WooCommerce plugin \< 7.11.3 - Broken Access Control vulnerability (CVSS 5.3, Pluggabl Booster for WooCommerce)
- [CVE-2026-4312](https://cve.now/CVE-2026-4312.md): DrangSoft｜GCB/FCB Audit Software - Missing Authentication (CVSS 9.3, DrangSoft GCB/FCB Audit Software)
- [CVE-2026-3237](https://cve.now/CVE-2026-3237.md): In affected versions of Octopus Server it was possible for a low privileged user to manipulate an API request to change the signing key expi (CVSS 2.3, Octopus Deploy Octopus Server)
- [CVE-2026-4258](https://cve.now/CVE-2026-4258.md): Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve v (CVSS 8.7, sjcl · org.webjars.npm:sjcl)
- [CVE-2026-4308](https://cve.now/CVE-2026-4308.md): frdel/agent0ai agent-zero document\_query.py handle\_pdf\_document server-side request forgery (CVSS 5.3, frdel agent-zero · agent0ai agent-zero)
- [CVE-2026-2373](https://cve.now/CVE-2026-2373.md): Royal Addons for Elementor – Addons and Templates Kit for Elementor \<= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure (CVSS 5.3, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2026-4307](https://cve.now/CVE-2026-4307.md): frdel/agent0ai agent-zero files.py get\_abs\_path path traversal (CVSS 5.3, frdel agent-zero · agent0ai agent-zero)
- [CVE-2026-0708](https://cve.now/CVE-2026-0708.md): Libucl: libucl: denial of service via embedded null byte in ucl input (CVSS 8.3, libucl)
- [CVE-2026-2579](https://cve.now/CVE-2026-2579.md): WowStore – Store Builder & Product Blocks for WooCommerce \<= 4.4.3 - Unauthenticated SQL Injection via 'search' Parameter (CVSS 7.5, wpxpo WowStore – Store Builder & Product Blocks for WooComm…)
- [CVE-2026-4289](https://cve.now/CVE-2026-4289.md): Tiandy Easy7 Integrated Management Platform getRecByTemplateId sql injection (CVSS 6.9, Tiandy Easy7 Integrated Management Platform)
- [CVE-2026-4288](https://cve.now/CVE-2026-4288.md): Tiandy Easy7 Integrated Management Platform Endpoint getDevDetailedInfo sql injection (CVSS 6.9, Tiandy Easy7 Integrated Management Platform)
- [CVE-2026-30707](https://cve.now/CVE-2026-30707.md): An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. (CVSS 8.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-03-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.