CVEs published March 19, 2026
244 CVEs were published on March 19, 2026: 30 critical, 86 high.
- Published
- 244
- Critical
- 30
- High
- 86
- Medium
- 105
- Low
- 23
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 190
Most affected products
- OpenClaw
- 60
- discourse
- 17
- SuiteCRM
- 15
- openemr
- 12
- wolfSSL
- 11
- admidio · admidio/admidio
- 5
- BMC Software FootPrints
- 4
- openwrt
- 4
- siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- 4
- freescout-help-desk freescout
- 3
Critical 30
- CVE-2026-32760File Browser Self Registration Grants Any User Admin Access When Default Permissions Include Adminfilebrowser · github.com/filebrowser/filebrowser/v2 +1
- CVE-2026-29103SuiteCRM Vulnerable to Remote Code Execution via Module Loader Package Scanner BypassSuiteCRM
- CVE-2026-22732Under Some Conditions Spring Security HTTP Headers Are not WrittenVMware Spring Security · org.springframework.security:sprin…
- CVE-2026-32038OpenClaw - Sandbox Network Isolation Bypass via docker.network=container ParameterOpenClaw
- CVE-2026-30872OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookupopenwrt
- CVE-2026-30871OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Queryopenwrt
- CVE-2026-32754FreeScout: Stored XSS via Unescaped Email Template Rendering ({!! $thread->body !!})freescout-help-desk freescout
- CVE-2026-32194Microsoft Bing Images Remote Code Execution VulnerabilityMicrosoft Bing Images
- CVE-2026-26137Microsoft Exchange Elevation of Privilege VulnerabilityMicrosoft Exchange Online
- CVE-2026-32191Microsoft Bing Images Remote Code Execution VulnerabilityMicrosoft Bing Images
- CVE-2026-32169Azure Cloud Shell Elevation of Privilege VulnerabilityMicrosoft Azure Cloud Shell
- CVE-2026-30924qui CORS Misconfiguration: Arbitrary Origins Trustedautobrr qui · github.com/autobrr/qui
- CVE-2026-30836Step CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)smallstep certificates · github.com/smallstep/certificates
- CVE-2026-32238OpenEMR has Remote Code Execution in backup functionalityopenemr
- CVE-2026-32865OPEXUS eComplaint and eCase insecure password resetOPEXUS eComplaint · OPEXUS eCASE
- CVE-2026-22557A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access fUbiquiti UniFi Network Application
- CVE-2006-10003XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stackTODDR XML::Parser
- CVE-2006-10002XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashesTODDR XML::Parser
- CVE-2026-27067WordPress Mobile App Editor plugin <= 1.3.1 - Arbitrary File Upload vulnerabilitySyarif Mobile App Editor
- CVE-2026-27065WordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerabilityThimPress BuilderPress
- CVE-2025-60237WordPress Finag theme <= 1.5.0 - PHP Object Injection vulnerabilityThemeton Finag
- CVE-2025-60233WordPress Zuut theme <= 1.4.2 - PHP Object Injection vulnerabilityThemeton Zuut
- CVE-2026-27413WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerabilityCozmoslabs Profile Builder Pro
- CVE-2026-27540WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerabilityRymera Web Co Pty Woocommerce Wholesale Lead Capture
- CVE-2026-27542WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerabilityRymera Web Co Pty Woocommerce Wholesale Lead Capture
- CVE-2025-67112Use of a hard-coded AES-256-CBC key in the configuration backup/restore implementation of Small Cell Sercomm SCE4255W (FreedomFi Englewood)
- CVE-2025-67113OS command injection in the CWMP client (/ftl/bin/cwmp) of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@230804
- CVE-2025-67114Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware bef
- CVE-2026-30402An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code via the test connection function
- CVE-2026-30694An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component
High 86
- CVE-2026-22733Authentication Bypass under Actuator CloudFoundry endpointsSpring Security · org.springframework.boot:spring-boot-star…
- CVE-2026-32763SQL Injection via unsanitized JSON path keys when ignoring/silencing compilation errors or using `Kysely<any>`.kysely-org kysely · kysely
- CVE-2026-29109SuiteCRM Authenticated Remote Code Execution via Unsafe Deserialization in SavedSearch Filter ProcessingSuiteCRM-Core
- CVE-2026-33289SuiterCRM has LDAP Filter Injection in Authentication ModuleSuiteCRM
- CVE-2026-33288SuiteCRM has Authenticated SQL Injection in Authentication ModuleSuiteCRM
- CVE-2026-32756Admidio: Unrestricted File Upload via CSRF Token Validation Bypass in Documents & Files Moduleadmidio · admidio/admidio
- CVE-2026-29189SuiteCRM has a REST API V8 IDOR: Missing ACL Checks on User Preferences and Relationship EndpointsSuiteCRM
- CVE-2026-29102SuiteCRM has Authenticated RCE in ModulesSuiteCRM
- CVE-2026-29100SuiteCRM has Reflected HTML Injection in Login Page via default_user_name ParameterSuiteCRM
- CVE-2026-29099SuiteCRM has Authenticated Blind SQL Injection in OutboundEmail Legacy Functionality.SuiteCRM
- CVE-2026-32721LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modalopenwrt luci · openwrt
- CVE-2026-29097SuiteCRM Server-Side Request Forgery and Denial of Service via RSS Feed DashletSuiteCRM
- CVE-2026-29096SuiteCRM vulnerable to Authenticated SQL Injection via unsanitized field_function in Report FieldsSuiteCRM
- CVE-2026-22731Authentication Bypass under Actuator Health groups pathsSpring Boot · org.springframework.boot:spring-boot-starter-…
- CVE-2026-32041OpenClaw < 2026.3.1 - Unauthenticated Browser Control Access via Failed Auth BootstrapOpenClaw
- CVE-2026-32036OpenClaw < 2026.2.26- Authentication Bypass via Encoded Dot-Segment Traversal in /api/channelsOpenClaw
- CVE-2026-32032OpenClaw < 2026.2.22 - Arbitrary Shell Execution via Unvalidated SHELL Environment VariableOpenClaw
- CVE-2026-32030OpenClaw < 2026.2.19 - Sensitive File Disclosure via stageSandboxMedia Path TraversalOpenClaw
- CVE-2026-32027OpenClaw < 2026.2.26 - Improper Authorization via DM Pairing Store Identity Inheritance in Group AllowlistOpenClaw
- CVE-2026-32026OpenClaw < 2026.2.24 - Arbitrary File Read via Improper Temporary Path Validation in SandboxOpenClaw
- CVE-2026-32025OpenClaw < 2026.2.25 - Password Brute-Force via Browser-Origin WebSocket Authentication BypassOpenClaw
- CVE-2026-32016OpenClaw < 2026.2.22 - Path Traversal via Basename-Only Allowlist Matching on macOSOpenClaw
- CVE-2026-32015OpenClaw 2026.1.21 < 2026.2.19 - PATH Hijacking Bypass in tools.exec.safeBins Allowlist ValidationOpenClaw
- CVE-2026-32014OpenClaw < 2026.2.26 - Node Reconnect Metadata Spoofing via Unsigned Platform FieldsOpenClaw
- CVE-2026-32013OpenClaw < 2026.2.25 - Symlink Traversal in agents.files MethodsOpenClaw
- CVE-2026-32011OpenClaw < 2026.3.2 - Slow-Request Denial of Service via Pre-Auth Webhook Body ParsingOpenClaw
- CVE-2026-32009OpenClaw < 2026.2.24 - Binary Hijacking via Static Default Trusted Directories in safeBinsOpenClaw
- CVE-2026-32008OpenClaw < 2026.2.21 - Arbitrary Local File Read via Browser Navigation GuardOpenClaw
- CVE-2026-32007OpenClaw < 2026.2.23 - Sandbox Bypass in apply_patch Tool via Workspace-Only Check BypassOpenClaw
- CVE-2026-32005OpenClaw < 2026.2.25 - Authorization Bypass in Interactive Callbacks via Sender Check SkipOpenClaw
- CVE-2026-32004OpenClaw < 2026.3.2 - Authentication Bypass via Encoded Path in /api/channels RouteOpenClaw
- CVE-2026-32003OpenClaw < 2026.2.22 - Remote Code Execution via SHELLOPTS/PS4 Environment Injection in system.runOpenClaw
- CVE-2026-4342ingress-nginx comment-based nginx configuration injectionKubernetes ingress-nginx · k8s.io/ingress-nginx
- CVE-2026-29072Discourse missing permission check for policy creation in discourse-policydiscourse
- CVE-2026-32753FreeScout: Stored XSS through SVG file upload with filter bypassfreescout-help-desk freescout
- CVE-2026-27934Discourse leaks private topic title and post excerpt via user action API endpointdiscourse
- CVE-2026-32749SiYuan importSY/importZipMd: Path Traversal via multipart filename enables arbitrary file writesiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-23659Azure Data Factory Information Disclosure VulnerabilityMicrosoft Azure Data Factory
- CVE-2026-23658Azure DevOps: msazure Elevation of Privilege VulnerabilityMicrosoft Azure DevOps: msazure
- CVE-2026-26138Microsoft Purview Elevation of Privilege VulnerabilityMicrosoft Purview
- CVE-2026-26139Microsoft Purview Elevation of Privilege VulnerabilityMicrosoft Purview
- CVE-2026-32622SQLBot: Remote Code Execution via Terminology Poisoningdataease SQLBot
- CVE-2026-4428CRL Distribution Point Scope Check Logic Error in AWS-LCAWS-LC · AWS-LC-FIPS +2
- CVE-2026-33346OpenEMR has stored XSS in portal_payment.php via Unescaped table_argsopenemr
- CVE-2026-33302OpenEMR: zhAclCheck Ignores Explicit ACL Deniesopenemr
- CVE-2026-27953ormar has a Pydantic Validation Bypass via Kwargs Injection in Model Constructorormar-orm ormar · ormar
- CVE-2026-3547wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validationwolfSSL
- CVE-2026-33321OpenEMR has Out-of-Band Server-Side Request Forgery (OOB SSRF)openemr
- CVE-2026-33301OpenEMR has arbitrary image file read via PDF generatoropenemr
- CVE-2026-3549ECH parsing heap buffer overflowwofSSL wolfSSL
- CVE-2026-33299OpenEMR has Stored XSS in patient encounter Eye Exam form answersopenemr
- CVE-2026-3548Buffer overflow in CRL number parsing in wolfSSLwolfSSL
- CVE-2026-3029CVE-2026-3029Artifex Software Inc. *PyMuPDF* PyMuPDF · pymupdf
- CVE-2026-27043WordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerabilityThemeGoods Photography
- CVE-2026-22558An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access toUbiquiti UniFi Network Application
- CVE-2026-4424Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingRed Hat Enterprise Linux · Red Hat OpenShift Container P… +7
- CVE-2025-71260BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCEBMC Software FootPrints
- CVE-2026-3511Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticSlovensko.Digital Autogram
- CVE-2026-3658Appointment Booking Calendar <= 1.6.10.0 - Unauthenticated SQL Injection via 'fields' Parametercroixhaug Appointment Booking Calendar — Simply Schedule Ap…
- CVE-2026-27070WordPress Everest Forms Pro plugin <= 1.9.10 - Cross Site Scripting (XSS) vulnerabilityWPEverest Everest Forms Pro
- CVE-2026-27068WordPress Website LLMs.txt plugin <= 8.2.6 - Reflected Cross Site Scripting (XSS) vulnerabilityRyan Howard Website LLMs.txt
- CVE-2026-25445WordPress WishList Member X plugin <= 3.29.0 - PHP Object Injection vulnerabilityMembership Software WishList Member X
- CVE-2026-25443WordPress Fraud Prevention For Woocommerce plugin <= 2.3.3 - Arbitrary Content Deletion vulnerabilityDotstore Fraud Prevention For Woocommerce
- CVE-2026-25442WordPress Kentha theme <= 4.7.2 - Reflected Cross Site Scripting (XSS) vulnerabilityQantumThemes Kentha
- CVE-2026-25438WordPress Gutenberg Blocks – Unlimited blocks For Gutenberg plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeHunk Gutenberg Blocks
- CVE-2025-68836WordPress Table of Contents Creator plugin <= 1.6.4.1 - Reflected Cross Site Scripting (XSS) vulnerabilityMarkbeljaars Table of Contents Creator
- CVE-2025-67618WordPress Brookside theme <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityArtstudioWorks Brookside
- CVE-2025-53222WordPress tagDiv Opt-In Builder plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerabilitytagDiv Opt-In Builder
- CVE-2025-50001WordPress tagDiv Composer plugin <= 5.4.2 - Reflected Cross Site Scripting (XSS) vulnerabilitytagDiv Composer
- CVE-2024-42210HCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerabilityHCLSoftware Unica Marketing Operations
- CVE-2026-25312WordPress EventPrime plugin <= 4.2.8.3 - Payment Bypass vulnerabilityMetagauss EventPrime
- CVE-2026-25471WordPress Admin Safety Guard plugin <= 1.2.6 - Broken Authentication vulnerabilityThemepaste Admin Safety Guard
- CVE-2026-27093WordPress Tripgo theme < 1.5.6 - Local File Inclusion vulnerabilityovatheme Tripgo
- CVE-2026-27096WordPress ColorFolio - Freelance Designer WordPress Theme theme <= 1.3 - Deserialization of untrusted data vulnerabilityBuddhaThemes ColorFolio - Freelance Designer WordPress Theme
- CVE-2026-28073WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerabilityTips and Tricks HQ WP eMember
- CVE-2026-1238SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'veronalabs SlimStat Analytics
- CVE-2026-31998OpenClaw 2026.2.22 < 2026.2.24 - Authorization Bypass in Synology Chat Plugin via Empty allowedUserIdsOpenClaw
- CVE-2026-31992OpenClaw < 2026.2.23 - Allowlist Exec-Guard Bypass via env -SOpenClaw
- CVE-2026-29607OpenClaw < 2026.2.22 - Authorization Bypass via allow-always Wrapper PersistenceOpenClaw
- CVE-2026-28461OpenClaw < 2026.3.1 - Unbounded Memory Growth in Zalo Webhook via Query String Key ChurnOpenClaw
- CVE-2026-27566OpenClaw < 2026.2.22 - Allowlist Bypass via Wrapper Binary Unwrapping in system.runOpenClaw
- CVE-2025-69720The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.GNU ncurses
- CVE-2026-25667ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumpt
- CVE-2026-30403There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, w
- CVE-2026-30404The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability.
- CVE-2026-30711Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the
Medium, low and unrated 128
- CVE-2026-22737Spring Framework Improper Path Limitation with Script View TemplatesSpring Framework · org.springframework:spring-webmvc +1
- CVE-2026-32761File Browser has an Authorization Policy Bypass in its Public Share Download Flowfilebrowser · github.com/filebrowser/filebrowser +2
- CVE-2026-22735Server Sent Event stream corruptionSpring Foundation · org.springframework:spring-webmvc +1
- CVE-2026-32759File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurelyfilebrowser · github.com/filebrowser/filebrowser +1
- CVE-2026-32758File Browser has an Access Rule Bypass via Path Traversal in Copy/Rename Destination Parameterfilebrowser · github.com/filebrowser/filebrowser/v2 +1
- CVE-2026-32697SuiteCRM: RecordHandler::getRecord() missing ACLAccess('view') check allows any authenticated user to read any record (IDOR)SuiteCRM-Core
- CVE-2026-32757Admidio: HTMLPurifier Bypass in eCard Message Allows HTML Email Injectionadmidio · admidio/admidio
- CVE-2026-29108Authenticated SuiteCRM Users Can Retrieve The Password Hash of Any UserSuiteCRM-Core
- CVE-2026-29107SuiteCRM vulnerable to authenticated SSRF via PDF exportSuiteCRM
- CVE-2026-29106SuiteCRM has blind XSS in return_id parameterSuiteCRM
- CVE-2026-32818Admidio is Missing Authorization on Forum Topic and Post Deletionadmidio · admidio/admidio
- CVE-2026-29105SuiteCRM has Unauthenticated Open Redirect in Leads WebToLead CaptureSuiteCRM
- CVE-2026-32816Admidio has Missing CSRF Validation on Role Delete, Activate, and Deactivate Actionsadmidio · admidio/admidio
- CVE-2026-29104SuiteCRM Vulnerable to Authenticated Arbitrary File Upload via Configurator addfontresult View in SuiteCRMSuiteCRM
- CVE-2026-32755Admidio is Missing CSRF Protection on Role Membership Date Changesadmidio · admidio/admidio
- CVE-2026-29101SuiteCRM Vulnerable to Directory Traversal to DoS in ModulesSuiteCRM
- CVE-2026-29098SuiteCRM has Relative Path Traversal via ModuleBuilder Modules ExportCustom ActionSuiteCRM
- CVE-2026-30874OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalationopenwrt
- CVE-2026-33408Discourse has Improper Authorization in "Post Edits" Report For Moderatorsdiscourse
- CVE-2026-33395Discourse has stored click‑based XSS via Graphviz SVG javascript: linksdiscourse
- CVE-2026-32040OpenClaw < 2026.2.23 - HTML Injection via Unvalidated Image MIME Type in Data-URL InterpolationOpenClaw
- CVE-2026-32039OpenClaw < 2026.2.22 - Sender Authorization Bypass via Identity Collision in toolsBySenderOpenClaw
- CVE-2026-32037OpenClaw < 2026.2.22 - Redirect Chain Bypass of Media Host Allowlist in MSTeams Attachment HandlingOpenClaw
- CVE-2026-32035OpenClaw < 2026.3.2 - Missing Owner Flag Validation in Discord Voice Transcript HandlerOpenClaw
- CVE-2026-32034OpenClaw < 2026.2.21 - Insecure Control UI Authentication over Plaintext HTTPOpenClaw
- CVE-2026-32033OpenClaw < 2026.2.24 - Path Traversal via @-prefixed Absolute Paths in Workspace Boundary ValidationOpenClaw
- CVE-2026-32031OpenClaw < 2026.2.26 - Authentication Bypass via Path Canonicalization Mismatch in /api/channels GatewayOpenClaw
- CVE-2026-32029OpenClaw < 2026.2.21 - Client IP Spoofing via X-Forwarded-For Header ParsingOpenClaw
- CVE-2026-32028OpenClaw < 2026.2.25 - Missing Authorization Check in Discord DM Reaction IngressOpenClaw
- CVE-2026-32024OpenClaw < 2026.2.22 - Symlink Traversal in Avatar HandlingOpenClaw
- CVE-2026-32023OpenClaw < 2026.2.24 - Approval Gating Bypass via Dispatch-Wrapper Depth-Cap Mismatch in system.runOpenClaw
- CVE-2026-32022OpenClaw < 2026.2.21 - Arbitrary File Read via grep -e Flag Policy BypassOpenClaw
- CVE-2026-32021OpenClaw < 2026.2.22 - Authorization Bypass via Display Name Collision in Feishu allowFromOpenClaw
- CVE-2026-32020OpenClaw < 2026.2.22 - Arbitrary File Read via Symlink Following in Static File HandlerOpenClaw
- CVE-2026-32019OpenClaw < 2026.2.22 - Incomplete IPv4 Special-Use Range Blocking in SSRF GuardOpenClaw
- CVE-2026-32018OpenClaw < 2026.2.19 - Race Condition in Sandbox Registry Write OperationsOpenClaw
- CVE-2026-32017OpenClaw < 2026.2.19 - Arbitrary File Write via Short-Option Bypass in exec AllowlistOpenClaw
- CVE-2026-32010OpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program ParameterOpenClaw
- CVE-2026-32006OpenClaw < 2026.2.26 - Authorization Bypass via DM Pairing-Store Fallback in Group AllowlistOpenClaw
- CVE-2026-32002OpenClaw < 2026.2.23 - Sandbox Boundary Bypass via Image Tool workspaceOnly BypassOpenClaw
- CVE-2026-32001OpenClaw < 2026.2.22 - Node Role Device-Identity Bypass via WebSocket AuthenticationOpenClaw
- CVE-2026-33394Discourse leaks PM post edits to moderatorsdiscourse
- CVE-2026-33393Discourse fixes loose hostname matching in spam host allowlistdiscourse
- CVE-2026-33355Discourse filters whisper posts from private-posts feeddiscourse
- CVE-2026-30873OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokensopenwrt
- CVE-2026-33410Discourse hardens chat DM channel creation and expansiondiscourse
- CVE-2026-32099Discourse prevents hidden profile data leak via user oneboxdiscourse
- CVE-2026-28282Discourse vulnerable to group membership addition permission bypass via discourse-policy plugindiscourse
- CVE-2026-27936Discourse discloses restricted post-action counts to non-privileged usersdiscourse
- CVE-2026-32815SiYuan: Cross-Origin WebSocket Hijacking via Authentication Bypass — Unauthenticated Information Disclosuresiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-27935Discourse leaks private topic metadata to non-authorized usersdiscourse
- CVE-2026-32752FreeScout: Broken Access Control in ThreadPolicy — Any User Can Read/Edit All Customer Messagesfreescout-help-desk freescout
- CVE-2026-4159wc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds readwolfSSL
- CVE-2026-32750SiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notessiyuan-note siyuan · github.com/siyuan-note/siyuan
- CVE-2026-32751SiYuan Vulnerable to Remote Code Execution via Stored XSS in Notebook Name - Mobile Interfacesiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-3229Integer Overflow in Certificate Chain AllocationwofSSL wolfSSL
- CVE-2026-26136Microsoft Copilot Information Disclosure VulnerabilityMicrosoft Copilot
- CVE-2026-24299M365 Copilot Information Disclosure VulnerabilityMicrosoft 365 Copilot
- CVE-2026-26120Microsoft Bing Tampering VulnerabilityMicrosoft Bing
- CVE-2026-32747SiYuan: Incomplete sensitive path blocklist in globalCopyFiles allows reading /proc and Docker secretssiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-3230Improper key_share validation in TLS 1.3 HelloRetryRequestwolfSSL
- CVE-2026-27740Discourse has Stored XSS in AI Triage Automationdiscourse
- CVE-2026-27570Discourse Vulnerable to Stored XSS via Shared AI Conversation Oneboxdiscourse
- CVE-2026-27491Discourse has a bypass of official warnings messages by non-staff usersdiscourse
- CVE-2026-4395Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI pathwolfssl
- CVE-2026-27454Discourse has check revision visibility on posts endpointdiscourse
- CVE-2026-33305OpenEMR has Authorization Bypass in FaxSMS AppDispatch Constructoropenemr
- CVE-2026-3849Buffer Overflow in HPKE via Oversized ECH ConfigwolfSSL
- CVE-2026-27166Discourse vulnerable to HTML injection via prohibited iframe URLsdiscourse
- CVE-2026-33304OpenEMR has Authorization Bypass in Dated Reminders Logopenemr
- CVE-2026-33303OpenEMR Vulnerable to Stored XSS via Unescaped portal_login_username in Credential Print Viewopenemr
- CVE-2026-3580Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-VwolfSSL
- CVE-2026-32119OpenEMR has Stored DOM XSS via SearchHighlight text-node reconstruction on Custom Report pageopenemr
- CVE-2026-3579Non-constant time multiplication subroutine __muldi3 on RISC-V RV32IwolfSSL
- CVE-2026-25928OpenEMR Vulnerable to Path Traversal When Zipping DICOM Foldersopenemr
- CVE-2026-25744OpenEMR: POST /api/.../vital Accepts Attacker-Supplied id and Overwrites Arbitrary Vitalsopenemr
- CVE-2026-3503Fault injection attack with ML-DSA and ML-KEM on ARMwolfSSL
- CVE-2026-2646Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() functionwolfssl
- CVE-2026-26940Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of ServiceElastic Kibana
- CVE-2026-26939Missing Authorization in Kibana Leading to Unauthorized Endpoint Response Action ConfigurationElastic Kibana
- CVE-2026-2645Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2wolfSSL
- CVE-2026-26933Improper Validation of Array Index in Packetbeat Leading to Denial of ServiceElastic Packetbeat · github.com/elastic/beats/v7 +1
- CVE-2026-26931Memory Allocation with Excessive Size Value in Metricbeat Leading to Denial of ServiceElastic Metricbeat · github.com/elastic/beats/v7 +1
- CVE-2026-1005Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt pathwolfSSL
- CVE-2026-0819Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributeswolfSSL
- CVE-2026-32869OPEXUS eComplaint and eCASE XSS via Name of Organization fieldOPEXUS eComplaint · OPEXUS eCASE
- CVE-2026-32868OPEXUS eComplaint and eCASE XSS via my informationOPEXUS eComplaint · OPEXUS eCASE
- CVE-2026-32867OPEXUS eComplaint unauthenticated file uploadOPEXUS eComplaint
- CVE-2026-32866OPEXUS eComplaint and eCase stored XSS via profile first and last nameOPEXUS eCASE
- CVE-2026-32843Linkit ONE Location Aware Sensor System (LASS) Reflected XSS via PM25.phpLinkItONEDevGroup Location Aware Sensor System
- CVE-2026-2369Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resourcesRed Hat Enterprise Linux
- CVE-2026-4426Libarchive: libarchive: denial of service via malformed iso file processingRed Hat Hardened Images · Red Hat Enterprise Linux +1
- CVE-2025-71259BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSSBMC Software FootPrints
- CVE-2025-71258BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWebBMC Software FootPrints
- CVE-2025-71257BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication BypassBMC Software FootPrints
- CVE-2025-14716Unauthorized access to informationSecomea GateManager
- CVE-2026-21788HCL Connections is vulnerable to cross-site scripting (XSS)HCLSoftware Connections
- CVE-2025-62043WordPress WPCasa plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerabilityWPSight WPCasa
- CVE-2025-32223WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerabilityThemeum Tutor LMS
- CVE-2026-3475Instant Popup Builder <= 1.1.7 - Unauthenticated Arbitrary Shortcode Execution via 'token' Parameterinstantpopupbuilder Instant Popup Builder – Powerful Popup…
- CVE-2026-27091WordPress UiPress lite plugin <= 3.5.09 - Broken Access Control vulnerabilityUiPress lite
- CVE-2026-2571Download Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' Parametercodename065 Download Manager
- CVE-2026-4006Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameterdartiss Draft List
- CVE-2026-4120Info Cards <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributesbplugins Info Cards – Add Text and Media in Card Layouts
- CVE-2026-4068Add Custom Fields to Media <= 2.0.3 - Cross-Site Request Forgery to Custom Field Deletion via 'delete' Parameterpattihis Add Custom Fields to Media
- CVE-2026-27397WordPress Really Simple Security Pro plugin <= 9.5.4.0 - Insecure Direct Object References (IDOR) vulnerabilityReally Simple Plugins B.V. Really Simple Security Pro
- CVE-2026-28044WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerabilityWP Media WP Rocket
- CVE-2026-28070WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerabilityTips and Tricks HQ WP eMember
- CVE-2025-36051IBM QRadar SIEM Information DisclosureIBM QRadar SIEM
- CVE-2025-13995IBM QRadar SIEM Information DisclosureIBM QRadar
- CVE-2025-15051IBM QRadar SIEM Cross-Site ScriptingIBM QRadar SIEM
- CVE-2026-1276IBM QRadar SIEM Cross-Site ScriptingIBM QRadar SIEM
- CVE-2026-32000OpenClaw < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Tool ExecutionOpenClaw
- CVE-2026-31999OpenClaw 2026.2.26 < 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution FallbackOpenClaw
- CVE-2026-31997OpenClaw < 2026.3.1 - Executable Rebind via Unbound PATH-token in system.run ApprovalsOpenClaw
- CVE-2026-31996OpenClaw < 2026.2.19 - safeBins stdin-only bypass via sort output and recursive grep flagsOpenClaw
- CVE-2026-31995OpenClaw 2026.1.21 < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster ExtensionOpenClaw
- CVE-2026-31994OpenClaw < 2026.2.19 - Local Command Injection via Unsafe cmd Argument Handling in Windows Scheduled Task Script GenerationOpenClaw
- CVE-2026-31993OpenClaw < 2026.2.22 - Allowlist Parsing Mismatch in system.run Shell ChainsOpenClaw
- CVE-2026-31991OpenClaw < 2026.2.26 - Authorization Bypass via DM Pairing-Store Leakage in Signal Group AllowlistOpenClaw
- CVE-2026-31990OpenClaw < 2026.3.2 - Symlink Traversal in stageSandboxMedia DestinationOpenClaw
- CVE-2026-31989OpenClaw < 2026.3.1 - Server-Side Request Forgery via web_search Citation RedirectOpenClaw
- CVE-2026-29608OpenClaw 2026.3.1 < 2026.3.2 - Approval Integrity Bypass via system.run argv RewritingOpenClaw
- CVE-2026-28460OpenClaw < 2026.2.22 - Allowlist Bypass via Shell Line-Continuation Command Substitution in system.runOpenClaw
- CVE-2026-28449OpenClaw < 2026.2.25 - Webhook Replay Attack via Missing Durable Replay SuppressionOpenClaw
- CVE-2026-27670OpenClaw < 2026.3.2 - Arbitrary File Write via ZIP Extraction Parent Symlink Race ConditionOpenClaw
- CVE-2026-22176OpenClaw < 2026.2.19 - Command Injection via Unescaped Environment Variables in Windows Scheduled Task Script GenerationOpenClaw
- CVE-2025-67115A path traversal vulnerability in /ftl/web/setup.cgi in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@230804184