CVEs published March 20, 2026
304 CVEs were published on March 20, 2026: 27 critical, 142 high. 1 is now in CISA KEV.
- Published
- 304
- Critical
- 27
- High
- 142
- Medium
- 121
- Low
- 12
- Unrated
- 2
- Now in CISA KEV
- 1
- Fix available
- 203
Most affected products
- Google Chrome
- 26
- discourse
- 16
- Linux
- 8
- siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- 7
- WWBN AVideo · wwbn/avideo
- 7
- Tenda A18 Pro
- 5
- CTEK Chargeportal
- 4
- free5gc · github.com/free5gc/udm
- 4
- IGL-Technologies eParking.fi
- 4
- itsourcecode Online Frozen Foods Ordering System
- 4
Critical 27
- CVE-2026-24060Automated Logic WebCTRL Premium Server Cleartext Transmission of Sensitive InformationAutomated Logic WebCTRL Premium Server
- CVE-2026-29796IGL-Technologies eParking.fi Missing Authentication for Critical FunctionIGL-Technologies eParking.fi
- CVE-2026-21732GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilationImagination Technologies Graphics DDK
- CVE-2026-25192CTEK Chargeportal Missing Authentication for Critical FunctionCTEK Chargeportal
- CVE-2026-33186gRPC-Go has an authorization bypass via missing leading slash in :pathgrpc-go · google.golang.org/grpc
- CVE-2026-3584Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_processwpchill Kali Forms — Contact Form & Drag-and-Drop Builder
- CVE-2026-22898QVR ProQNAP Systems QVR Pro
- CVE-2026-22172OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth ConnectionsOpenClaw
- CVE-2026-33136WeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameterLabRedesCefetRJ WeGIA
- CVE-2026-33135WeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameterLabRedesCefetRJ WeGIA
- CVE-2026-33134WeGIA has Authenticated Time-Based Blind SQL Injection in `restaurar_produto.php` via `id_produto` parameterLabRedesCefetRJ WeGIA
- CVE-2026-33075FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.ymllabring FastGPT
- CVE-2026-33057Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-pymesop-dev mesop · mesop
- CVE-2026-4478Yi Technology YI Home Camera HTTP Firmware Update ipc signature verificationYi Technology YI Home Camera
- CVE-2026-33054Mesop: Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletionmesop-dev mesop · mesop
- CVE-2026-33024AVideo-Encoder has Unauthenticated Blind Server-Side Request Forgery via Public Thumbnail GeneratorWWBN AVideo-Encoder
- CVE-2026-33017Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpointlangflow-ai langflow · langflow
- CVE-2026-4038Aimogen Pro <= 2.7.5 - Unauthenticated Privilege Escalation via Arbitrary Function CallCodeRevolution Aimogen Pro - All-in-One AI Content Writer,…
- CVE-2026-32940SiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183)siyuan-note siyuan · github.com/siyuan-note/siyuan
- CVE-2026-32938SiYuan has an Arbitrary File Read in its Desktop Publish Servicesiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-32891Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSSopenVESSL Anchorr
- CVE-2026-32890Anchorr: Stored XSS in User Mapping dropdown allows unprivileged Discord users to exfiltrate all secrets via /api/configopenVESSL Anchorr
- CVE-2026-21992Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services ManagOracle Identity Manager · Oracle Web Services Manager
- CVE-2026-32817Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletionadmidio · admidio/admidio
- CVE-2026-32767SiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search APIsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-32985Xerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code ExecutionXerte Online Toolkits
- CVE-2024-44722SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd.
High 142
- CVE-2026-3368Injection Guard <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via Query Parameter Namefahadmahmood Injection Guard
- CVE-2026-32666Automated Logic WebCTRL Premium Server Authentication Bypass by SpoofingAutomated Logic WebCTRL Premium Server
- CVE-2026-25086Automated Logic WebCTRL Premium Server Multiple Binds to the Same PortAutomated Logic WebCTRL Premium Server
- CVE-2026-33228flatted: Prototype Pollution via parse()WebReflection flatted · flatted
- CVE-2026-33226Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Previewbudibase
- CVE-2026-32663IGL-Technologies eParking.fi Insufficient Session ExpirationIGL-Technologies eParking.fi
- CVE-2026-33210Ruby JSON has a format string injection vulnerabilityruby json · json
- CVE-2026-31903IGL-Technologies eParking.fi Improper Restriction of Excessive Authentication AttemptsIGL-Technologies eParking.fi
- CVE-2026-22163GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPUImagination Technologies Graphics DDK
- CVE-2026-33243barebox: FIT Signature Verification Bypass Vulnerabilitybarebox
- CVE-2026-33236NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwritenltk
- CVE-2026-27649CTEK Chargeportal Insufficient Session ExpirationCTEK Chargeportal
- CVE-2026-33231NLTK has unauthenticated remote shutdown in nltk.app.wordnet_appnltk
- CVE-2026-31904CTEK Chargeportal Improper Restriction of Excessive Authentication AttemptsCTEK Chargeportal
- CVE-2026-32733Halloy has a file transfer path traveral vulnerabilitysquidowl halloy
- CVE-2026-33204SimpleJWT has an Unauthenticated Denial of Service via JWE header tamperingkelvinmo simplejwt · kelvinmo/simplejwt
- CVE-2026-33476SiYuan has an Unauthenticated Arbitrary File Read via Path Traversalsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-33203SiYuan has an Unauthenticated WebSocket DoS via Auth Keepalive Bypasssiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-33180HAPI FHIR HTTP authentication leak in redirectshapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.f… +11
- CVE-2026-23536Feast: unauthenticated arbitrary file readRed Hat OpenShift AI
- CVE-2026-33172Statamic has Stored XSS via SVG Sanitization Bypassstatamic cms · statamic/cms
- CVE-2026-33166Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers)allure-framework allure2 · io.qameta.allure:allure-generator
- CVE-2026-32887Effect Bug: `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPCEffect-TS effect · effect
- CVE-2026-2378Address bar spoofing risk in ArcSearch on AndroidThe BrowserCompany of New York ArcSearch
- CVE-2026-33164NULL Pointer Dereference in libde265strukturag libde265
- CVE-2026-33156DLL Sideloading in ScreenToGifNickeManarin ScreenToGif
- CVE-2026-33155DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORTseperman deepdiff · deepdiff
- CVE-2026-33154dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolverdynaconf
- CVE-2026-33150Use After Free in libfuselibfuse
- CVE-2026-33151socket.io allows an unbounded number of binary attachmentssocketio socket.io · socket.io-parser
- CVE-2026-33147GMT: Stack-based Buffer Overflow in gmt_remote_dataset_idGenericMappingTools gmt
- CVE-2026-33142OneUptime: ClickHouse SQL Injection via unvalidated column identifiers in sort, select, and groupBy parametersoneuptime
- CVE-2026-33143OneUptime: WhatsApp Webhook Missing Signature Verificationoneuptime
- CVE-2026-33139PySpector: Plugin Sandbox Bypass leads to Arbitrary Code ExecutionParzivalHack PySpector · pyspector
- CVE-2026-4437gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS responseThe GNU C Library glibc
- CVE-2026-33010mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theftdoobidoo mcp-memory-service · mcp-memory-service
- CVE-2026-32710Heap-based Buffer Overflow in MariaDBMariaDB server
- CVE-2026-32317Cryptomator for Android: Tampered vault configuration allows MITM attack on Hub APIcryptomator android
- CVE-2026-32318Cryptomator for IOS: Tampered vault configuration allows MITM attack on Hub APIcryptomator ios
- CVE-2026-32309Cryptomator: Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemescryptomator
- CVE-2026-32303Cryptomator: Tampered vault configuration allows MITM attack on Hub APIcryptomator
- CVE-2026-31836Mass Assignment Privilege Escalation in Checkmatebluewave-labs Checkmate
- CVE-2026-4493Tenda A18 Pro MAC Filtering Configuration Endpoint setMacFilterCfg sub_423B50 stack-based overflowTenda A18 Pro
- CVE-2026-4492Tenda A18 Pro formSetQosBand set_qosMib_list stack-based overflowTenda A18 Pro
- CVE-2026-4491Tenda A18 Pro SetIpMacBind fromSetIpMacBind stack-based overflowTenda A18 Pro
- CVE-2026-4490Tenda A18 Pro openSchedWifi setSchedWifi stack-based overflowTenda A18 Pro
- CVE-2025-15608Buffer Overflow in Network Probe Handling Function of TP-Link Archer AX53 + Archer AX55TP-Link Systems AX53 · TP-Link Systems AX55
- CVE-2025-15607Authenticated Command Injection in mcsd Service of TP-Link Archer AX53TP-Link Systems AX53
- CVE-2025-62846QuRouterQNAP Systems QuRouter
- CVE-2026-22897QuNetSwitchQNAP Systems QuNetSwitch
- CVE-2026-4489Tenda A18 Pro fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflowTenda A18 Pro
- CVE-2026-32989Precurio Intranet Portal 4.4: Cross-Site Request Forgery leading to arbitrary file uploadPrecurio Intranet Portal
- CVE-2026-4488UTT HiPER 1250GW setSysAdm strcpy buffer overflowUTT HiPER 1250GW
- CVE-2026-4519webbrowser.open() allows leading dashes in URLsPython Software Foundation CPython
- CVE-2026-4487UTT HiPER 1200GW websHostFilter strcpy buffer overflowUTT HiPER 1200GW
- CVE-2026-4486D-Link DIR-513 Web Service formEasySetPassword stack-based overflowD-Link DIR-513
- CVE-2026-4434Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack viDevolutions Server
- CVE-2026-33133WeGIA has an arbitrary SQL execution vulnerability via crafted backup archiveLabRedesCefetRJ WeGIA
- CVE-2026-33131h3 has a middleware bypass with one gadgeth3js h3 · h3
- CVE-2026-32305Traefik mTLS bypass via fragmented ClientHello SNI extraction failuretraefik · github.com/traefik/traefik +2
- CVE-2026-33128h3 has a Server-Sent Events Injection via Unsanitized Newlines in Event Stream Fieldsh3js h3 · h3
- CVE-2026-22324WordPress Melania theme <= 2.5.0 - Local File Inclusion vulnerabilityThemeREX Melania
- CVE-2026-33125Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accountsblakeblackshear frigate · frigate
- CVE-2026-33124Frigate has insecure password change functionalityblakeblackshear frigate
- CVE-2024-32537WordPress Flash Video Player plugin <= 5.0.4 - CSRF to XSS vulnerabilityjoshuae1974 Flash Video Player
- CVE-2026-33080Filament: Unvalidated Range and Values summarizer values can be used for XSSfilamentphp filament · filament/tables
- CVE-2026-32701Qwik has array method pollution in FormData processing, allowing type confusion and DoSQwikDev qwik · @builder.io/qwik-city
- CVE-2026-27625Stirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP ExtractionStirling-Tools Stirling-PDF
- CVE-2026-33072FileRise: Default Encryption Key Enables Token Forgery and Config Decryptionerror311 FileRise
- CVE-2026-33068Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings Fileanthropics claude-code · @anthropic-ai/claude-code
- CVE-2026-33192free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions requesfree5gc · github.com/free5gc/udm
- CVE-2026-23278netfilter: nf_tables: always walk all pending catchall elementsLinux
- CVE-2026-23275io_uring: ensure ctx->rings is stable for task work flags manipulationLinux
- CVE-2026-23274netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labelsLinux
- CVE-2026-23273macvlan: observe an RCU grace period in macvlan_common_newlink() error pathLinux
- CVE-2026-23272netfilter: nf_tables: unconditionally bump set->nelems before insertionLinux
- CVE-2026-23271perf: Fix __perf_event_overflow() vs perf_remove_from_context() raceLinux
- CVE-2026-33064free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereferencefree5gc · github.com/free5gc/udm
- CVE-2026-33191free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Errorfree5gc · github.com/free5gc/udm
- CVE-2026-4475Yi Technology YI Home Camera ipc hard-coded credentialsYi Technology YI Home Camera
- CVE-2026-33043AVideo affected by Session Hijacking via Unauthenticated Session ID Disclosure with Permissive CORSWWBN AVideo · wwbn/avideo
- CVE-2026-33040libp2p-rust: Gossipsub PRUNE.backoff Duration Overflowrust-libp2p · libp2p-gossipsub
- CVE-2026-33039AVideo vulnerable to unauthenticated SSRF via HTTP redirect bypass in LiveLinks proxyWWBN AVideo · wwbn/avideo
- CVE-2026-33038AVideo affected by unauthenticated application takeover via exposed web installer on uninitialized deploymentsWWBN AVideo · wwbn/avideo
- CVE-2026-32768Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespacectfer-io chall-manager · github.com/ctfer-io/chall-manag… +1
- CVE-2026-33037WWBN AVideo has predictable default admin credentials in official Docker deployment pathWWBN AVideo
- CVE-2026-33036fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)NaturalIntelligence fast-xml-parser · fast-xml-parser
- CVE-2026-33025AVideo-Encoder is Vulnerable to Authenticated SQL Injection via ORDER BY ClauseWWBN AVideo-Encoder
- CVE-2026-33013Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indicesmicronaut-projects micronaut-core · io.micronaut:micronaut-…
- CVE-2026-33012Micronaut Framework vulnerable to a Denial of Service in HTML error response cachingmicronaut-projects micronaut-core · io.micronaut:micronaut-…
- CVE-2026-33011Nest Fastify HEAD Request Middleware Bypassnestjs nest · @nestjs/platform-fastify
- CVE-2026-32954ERP has a possibility SQL Injection vulnerability due to missing validationfrappe erpnext
- CVE-2026-32950SQLBot: RCE via SQL Injection in Excel Upload Endpointdataease SQLBot
- CVE-2026-32949SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQLdataease SQLBot
- CVE-2026-32945PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parserpjsip pjproject
- CVE-2026-32942PJSIP has ICE session use-after-free race conditionspjsip pjproject
- CVE-2026-32939DataEase is Vulnerable to H2 JDBC RCE Bypassdataease
- CVE-2026-33063free5GC AUSF UE Authentication Panic on Nil SuciSupiMap Interface Conversionfree5gc ausf · github.com/free5gc/ausf
- CVE-2026-32935phpseclib's AES-CBC unpadding susceptible to padding oracle timing attackphpseclib · phpseclib/phpseclib
- CVE-2026-33062free5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameterfree5gc nrf · github.com/free5gc/nrf
- CVE-2026-32937free5GC CHF has Out-of-Bounds Slice Access that Leads to DoSfree5gc chf · github.com/free5gc/chf
- CVE-2026-32933AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled RecursionLuckyPennySoftware AutoMapper · AutoMapper
- CVE-2026-32888Open Source Point of Sale is Vulnerable to SQL Injection Through its Item Search Functionalityopensourcepos
- CVE-2026-32813Admidio: Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)admidio · admidio/admidio
- CVE-2026-32811Heimdall: Path received via Envoy gRPC corrupted when containing query stringdadrus heimdall · github.com/dadrus/heimdall
- CVE-2026-32808pyLoad: Arbitrary File Deletion via Path Traversal during Encrypted 7z Password Verificationpyload
- CVE-2026-32875UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loopultrajson · ujson
- CVE-2026-4464Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2026-4463Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption viaGoogle Chrome
- CVE-2026-4462Out of bounds read in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via aGoogle Chrome
- CVE-2026-4461Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruptionGoogle Chrome
- CVE-2026-4460Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a Google Chrome
- CVE-2026-4459Out of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corrGoogle Chrome
- CVE-2026-4458Use after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who convinced a user to install a malicious extensGoogle Chrome
- CVE-2026-4457Type Confusion in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2026-4456Use after free in Digital Credentials API in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the rendereGoogle Chrome
- CVE-2026-4455Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption viaGoogle Chrome
- CVE-2026-4454Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2026-4452Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruptiGoogle Chrome
- CVE-2026-4451Insufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromiGoogle Chrome
- CVE-2026-4450Out of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2026-4449Use after free in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2026-4448Heap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via Google Chrome
- CVE-2026-4447Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sanGoogle Chrome
- CVE-2026-4446Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2026-4445Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2026-4444Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption vGoogle Chrome
- CVE-2026-4443Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbGoogle Chrome
- CVE-2026-4442Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a Google Chrome
- CVE-2026-4441Use after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2026-4440Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write viaGoogle Chrome
- CVE-2026-4439Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote attacker to potentially perform a Google Chrome
- CVE-2026-32874UltraJSON has a Memory Leak parsing large integers allows DoSultrajson · ujson
- CVE-2026-32711pydicom: Path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set rootpydicom
- CVE-2026-32873ewe: Loop with Unreachable Exit Condition ('Infinite Loop')vshakitskiy ewe
- CVE-2026-32829lz4_flex: Decompression can leak information from uninitialized memory or reused output bufferPSeitz lz4_flex · lz4_flex
- CVE-2026-32771Monitoring is vulnerable to Archive Slip due to missing checks in sanitizationctfer-io monitoring · github.com/ctfer-io/monitoring
- CVE-2026-32769Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespacectfer-io fullchain · github.com/ctfer-io/fullchain
- CVE-2025-46597Bitcoin Core 0.13.0 through 29.x has an integer overflow.
- CVE-2025-55988An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via dreamfactory/df-core
- CVE-2025-63261AWStats 8.0 is vulnerable to Command Injection via the open function
- CVE-2025-67260The Terrapack software, from ASTER TEC / ASTER S.p.A., with the indicated components and versions has a file upload vulnerability that may a
Medium, low and unrated 135
- CVE-2026-33238AVideo has a Path Traversal in listFiles.json.php that Enables Server Filesystem EnumerationWWBN AVideo · wwbn/avideo
- CVE-2026-33237AVideo has SSRF in Scheduler Plugin via callbackURL Missing `isSSRFSafeURL()` ValidationWWBN AVideo · wwbn/avideo
- CVE-2026-2430Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributesoptimizingmatters Autoptimize
- CVE-2026-3474EmailKit <= 1.6.3 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameterroxnor EmailKit – Email Customizer for WooCommerce & WP
- CVE-2026-3350Image Alt Text Manager <= 1.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Titlewpsaad Image Alt Text Manager – Bulk & Dynamic Alt Tags For…
- CVE-2026-3567RepairBuddy <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Actionsweetdaisy86 RepairBuddy – Repair Shop CRM & Booking Plugin…
- CVE-2026-3516Contact List <= 3.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' Parameteranssilaitila Contact List – Online Staff Directory & Addres…
- CVE-2026-2352Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta Valueoptimizingmatters Autoptimize
- CVE-2026-3572iTracker360 <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'itracker_license' Settings FieldiTracker360
- CVE-2026-4083Scoreboard for HTML5 Games Lite <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesdemonisblack Scoreboard for HTML5 Games Lite
- CVE-2026-3577Keep Backup Daily <= 2.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup Titlefahadmahmood Keep Backup Daily
- CVE-2026-3339Keep Backup Daily <= 2.1.1 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' Parameterfahadmahmood Keep Backup Daily
- CVE-2026-33428Discourse Allows Unauthorized Access to Deleted Posts Index via Group Membershipdiscourse
- CVE-2026-33427Discourse Authorization Page Displays Unvalidated Redirect Domaindiscourse
- CVE-2026-33426Discourse users can edit or synonymize hidden tags they can't seediscourse
- CVE-2026-33425Discourse has inferable private group membership or existence via exclude_groups parameterdiscourse
- CVE-2026-33424PM access granted through invites after access revocationdiscourse
- CVE-2026-33423Discourse staff can modify any user's group notification leveldiscourse
- CVE-2026-31926IGL-Technologies eParking.fi Insufficiently Protected CredentialsIGL-Technologies eParking.fi
- CVE-2026-33422Discourse exposes ip_address of flagged userdiscourse
- CVE-2026-33221Nhost Storage Affected by MIME Type Spoofing via Trusted Client Content-Type Header in Storage Uploadnhost · github.com/nhost/nhost
- CVE-2026-33411Discourse's solved topic stream has potential stored XSS in topic titlediscourse
- CVE-2026-33291Discourse user can create Zendesk tickets even when it does not have access to topicdiscourse
- CVE-2026-33251Discourse has a Hidden Solved topics permission bypassdiscourse
- CVE-2026-28204CTEK Chargeportal Insufficiently Protected CredentialsCTEK Chargeportal
- CVE-2026-33230nltk Vulnerable to Cross-site Scriptingnltk
- CVE-2026-32810Halloy has insecure file permissions on credential filessquidowl halloy
- CVE-2026-33209Avo has a XSS vulnerability on `return_to` paramavo-hq avo · avo
- CVE-2026-4508PbootCMS Member Login MemberController.php checkUsername sql injectionPbootCMS
- CVE-2026-33194SiYuan has an Incomplete Fix for IsSensitivePath Denylist Allows File Read from /opt, /usr, /homesiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-3864CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS serverKubernetes CSI Driver for NFS · github.com/kubernetes-csi/c…
- CVE-2026-4507Mindinventory MindSQL mindsql_core.py ask_db sql injectionMindinventory MindSQL
- CVE-2026-4506Mindinventory MindSQL mindsql_core.py ask_db code injectionMindinventory MindSQL · mindsql
- CVE-2026-33177Statamic is missing authorization check on taxonomy term creation via fieldtypestatamic cms · statamic/cms
- CVE-2026-33171Statamic has a path traversal in file dictionary fieldtypestatamic cms · statamic/cms
- CVE-2026-33165heap out-of-bounds write in libde265 1.0.16strukturag libde265
- CVE-2026-33179libfuse: NULL Pointer Dereference and Memory Leak in io_uring Queue Initializationlibfuse
- CVE-2026-33144GPAC MP4Box Heap Buffer Overflow Write in gf_xml_parse_bit_sequence_bs (NHML BS Parsing)gpac
- CVE-2026-4505eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted uploadeosphoros-ai DB-GPT
- CVE-2026-4504eosphoros-ai db-gpt Incomplete Fix editor sql injectioneosphoros-ai db-gpt
- CVE-2026-33140PySpector: Stored XSS in PySpector HTML Report Generation leads to Javascript Code ExecutionParzivalHack PySpector · pyspector
- CVE-2026-4438gethostbyaddr and gethostbyaddr_r return invalid DNS hostnamesThe GNU C Library glibc
- CVE-2026-33126Frigate has SSRF vulnerability in /ffprobe endpointblakeblackshear frigate
- CVE-2026-4500bagofwords1 bagofwords code_execution.py generate_df injectionbagofwords1 bagofwords
- CVE-2026-4499D-Link DIR-820LW SSDP ssdpcgi_main os command injectionD-Link DIR-820LW
- CVE-2026-4497Totolink WA300 cstecgi.cgi recvUpgradeNewFw os command injectionTotolink WA300
- CVE-2026-4496sigmade Git-MCP-Server gitUtils.ts child_process.exec os command injectionsigmade Git-MCP-Server
- CVE-2026-32310Cryptomator: Unverified masterkeyfile key IDs can access arbitrary local or UNC pathscryptomator
- CVE-2026-4495atjiu pybbs CommentApiController.java create cross site scriptingatjiu pybbs
- CVE-2026-4494atjiu pybbs TopicApiController.java create cross site scriptingatjiu pybbs
- CVE-2026-32844XinLiangCoder / php_api_doc Reflected XSS via list_method.phpXinLiangCoder php_api_doc
- CVE-2025-59383Media Streaming Add-onQNAP Systems Media Streaming Add-on
- CVE-2025-62843QuRouterQNAP Systems QuRouter
- CVE-2025-62844QuRouterQNAP Systems QuRouter
- CVE-2025-62845QuRouterQNAP Systems QuRouter
- CVE-2026-22895QuFTP ServiceQNAP Systems QuFTP Service
- CVE-2026-22900QuNetSwitchQNAP Systems QuNetSwitch
- CVE-2026-22901QuNetSwitchQNAP Systems QuNetSwitch
- CVE-2026-22902QuNetSwitchQNAP Systems QuNetSwitch
- CVE-2026-32986Textpattern CMS 4.9.0: Second-Order XSS via Atom Feed InjectionTextpattern CMS
- CVE-2026-33312Read-only Vikunja users can delete project background images via broken object-level authorizationgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-29794Vikunja has Rate-Limit Bypass for Unauthenticated Users via Spoofed Headersgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-4485itsourcecode College Management System search_student.php sql injectionitsourcecode College Management System
- CVE-2026-31382Gainsight Assist reflected XSS/HTML injectionGainsight Assist
- CVE-2026-31381Gainsight Assist plugin information disclosureGainsight Assist
- CVE-2026-33132ZITADEL is missing enforcement of organization scopeszitadel · github.com/zitadel/zitadel
- CVE-2026-32595Traefik: BasicAuth Middleware Timing Attack Allows Username Enumerationtraefik · github.com/traefik/traefik +2
- CVE-2026-25792Greenshot Vulnerable to OS Command Injection via ExternalCommand Plugingreenshot
- CVE-2026-33130Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)louislam uptime-kuma
- CVE-2026-33129h3 has an observable timing discrepancy in basic auth utilsh3js h3 · h3
- CVE-2026-0677WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerabilityTotalSuite TotalContest Lite
- CVE-2026-33123pypdf has inefficient decoding of array-based streamspy-pdf pypdf · pypdf
- CVE-2024-31119WordPress Download Special Box for Content plugin <= 1 - Cross Site Scripting (XSS) vulnerabilityVasilis Triantafyllou Special Box for Content
- CVE-2026-33081PinchTab has Blind SSRF via browser-side redirect bypass in /download URL validationpinchtab · github.com/pinchtab/pinchtab
- CVE-2026-33071FileRise: WebDAV upload path bypasses filename validation enforced by regular uploadserror311 FileRise
- CVE-2026-2432CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labelscreativemindssolutions CM Custom Reports – Flexible reporti…
- CVE-2026-3550RockPress <= 1.0.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via AJAX Actionsfiretree RockPress
- CVE-2026-2421ilGhera Carta Docente for WooCommerce <= 1.5.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'cert' Parameterghera74 ilGhera Carta Docente for WooCommerce
- CVE-2026-33070FileRise has Unauthenticated Share Link Deletionerror311 FileRise
- CVE-2026-33069PJSIP has an Out-of-bounds Read in SIP multipart parsingpjsip pjproject
- CVE-2026-33067SiYuan has Stored XSS to RCE via Unsanitized Bazaar Package Metadatasiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-33066SiYuan has Stored XSS to RCE via Unsanitized Bazaar README Renderingsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-23277net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmitLinux
- CVE-2026-23276net: add xmit recursion limit to tunnel xmit functionsLinux
- CVE-2026-33065free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions requestfree5gc · github.com/free5gc/udm
- CVE-2026-33022Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRuntektoncd pipeline · github.com/tektoncd/pipeline
- CVE-2026-33061Jexactyl has Stored DOM Cross-Site Scripting (XSS) via unescaped JSON in Blade templateJexactyl
- CVE-2026-33060CKAN MCP Server: SSRF via base_url allows access to internal networksondata ckan-mcp-server · @aborruso/ckan-mcp-server
- CVE-2026-33056tar-rs: unpack_in can chmod arbitrary directories by following symlinksalexcrichton tar-rs · tar
- CVE-2026-33055tar-rs incorrectly ignores PAX size headers if header size is nonzeroalexcrichton tar-rs · tar
- CVE-2026-4477Yi Technology YI Home Camera WPA/WPS hard-coded keyYi Technology YI Home Camera
- CVE-2026-33053Langflow has Missing Ownership Verification in API Key Deletion (IDOR)langflow-ai langflow · langflow
- CVE-2026-4476Yi Technology YI Home Camera CGI Endpoint ipc missing authenticationYi Technology YI Home Camera
- CVE-2026-4474itsourcecode University Management System admin_single_student_update.php cross site scriptingitsourcecode University Management System
- CVE-2026-33051Craft CMS Vulnerable to Stored XSS in Revision Context Menucraftcms cms · craftcms/cms
- CVE-2026-33041AVideo has an Unauthenticated Password Hash Oracle via encryptPass.json.phpWWBN AVideo · wwbn/avideo
- CVE-2026-4473itsourcecode Online Doctor Appointment System appointment_action.php sql injectionitsourcecode Online Doctor Appointment System
- CVE-2026-33035Unauthenticated Reflected XSS via innerHTML in AVideoWWBN AVideo · wwbn/avideo
- CVE-2026-4472itsourcecode Online Frozen Foods Ordering System admin_edit_supplier.php sql injectionitsourcecode Online Frozen Foods Ordering System
- CVE-2026-4471itsourcecode Online Frozen Foods Ordering System admin_edit_employee.php sql injectionitsourcecode Online Frozen Foods Ordering System
- CVE-2026-4470itsourcecode Online Frozen Foods Ordering System admin_edit_menu.php sql injectionitsourcecode Online Frozen Foods Ordering System
- CVE-2026-32953Tillitis: TKey Client has an Error in Protocol Implementationtillitis tkeyclient · github.com/tillitis/tkeyclient
- CVE-2026-32947Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)step-security harden-runner
- CVE-2026-4469itsourcecode Online Frozen Foods Ordering System admin_edit_menu_action.php sql injectionitsourcecode Online Frozen Foods Ordering System
- CVE-2026-32946Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)step-security harden-runner
- CVE-2026-32941Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard TransportsBishopFox sliver · github.com/bishopfox/sliver
- CVE-2026-4136Membership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirectstellarwp Membership Plugin – Restrict Content
- CVE-2026-4468Comfast CF-AC100 mbox-config command injectionComfast CF-AC100
- CVE-2026-32114Discourse's unscoped status lookups leak restricted metadatadiscourse
- CVE-2026-31869Discourse: Composer mentions endpoint leaks hidden group membership through PM `allowed_names` checkdiscourse
- CVE-2026-31805Discourse has a poll authorization bypass via post_id array parameterdiscourse
- CVE-2026-30891Discourse hasUnauthorized Exposure of Private User Action Typesdiscourse
- CVE-2026-30889Discourse has Unauthorized Post Data Exposure in discourse-user-notesdiscourse
- CVE-2026-30888Discourse has moderator privilege escalation via arbitrary post_id in suspend/silence endpointdiscourse
- CVE-2026-4467Comfast CF-AC100 mbox-config command injectionComfast CF-AC100
- CVE-2026-32889tinytag: Denial of Service via non-terminating SYLT frame parsing looptinytag
- CVE-2026-4466Comfast CF-AC100 mbox-config command injectionComfast CF-AC100
- CVE-2026-4465D-Link DIR-513 formSysCmd os command injectionD-Link DIR-513
- CVE-2026-32812Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpointadmidio · admidio/admidio
- CVE-2026-4453Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote attacker to leak cross-origin data via a crafted HGoogle Chrome
- CVE-2026-32881ewe has an Overly Permissive List of Allowed Inputsvshakitskiy ewe
- CVE-2026-32880ChurchCRM is vulnerable to Stored XSS through JSON handling in SystemSettings.phpChurchCRM CRM
- CVE-2026-32828Kargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltrationakuity kargo · github.com/akuity/kargo
- CVE-2026-32766astral-tokio-tar insufficiently validates PAX extensions during extractionastral-sh tokio-tar · astral-tokio-tar
- CVE-2025-46598Bitcoin Core through 29.0 allows a denial of service via a crafted transaction.
- CVE-2025-63260SyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to comment field and Chat-UI Chat message.
- CVE-2026-29828DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc.
- CVE-2026-30578File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS).
- CVE-2026-30579File Thingie 2.5.7 is vulnerable to Cross Site Scripting (XSS).
- CVE-2026-30580File Thingie 2.5.7 is vulnerable to Directory Traversal.
- CVE-2026-33368Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS) vulnerability in the Classic Webmail REST int
- CVE-2026-33369Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operatio
- CVE-2026-33370An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.
- CVE-2026-33371An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.
- CVE-2026-33372An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.