# CVEs published 2026-03-24

252 CVEs were published on March 24, 2026: 41 critical, 125 high. Days are UTC.

- [CVE-2026-4781](https://cve.now/CVE-2026-4781.md): SourceCodester Sales and Inventory System HTTP GET Parameter update\_purchase.php sql injection (CVSS 5.3, SourceCodester Sales and Inventory System)
- [CVE-2026-4780](https://cve.now/CVE-2026-4780.md): SourceCodester Sales and Inventory System HTTP GET Parameter update\_out\_standing.php sql injection (CVSS 5.3, SourceCodester Sales and Inventory System)
- [CVE-2026-4779](https://cve.now/CVE-2026-4779.md): SourceCodester Sales and Inventory System HTTP GET Parameter update\_customer\_details.php sql injection (CVSS 5.3, SourceCodester Sales and Inventory System)
- [CVE-2026-4778](https://cve.now/CVE-2026-4778.md): SourceCodester Sales and Inventory System HTTP GET Parameter update\_category.php sql injection (CVSS 5.3, SourceCodester Sales and Inventory System)
- [CVE-2026-4777](https://cve.now/CVE-2026-4777.md): SourceCodester Sales and Inventory System POST Parameter view\_supplier.php sql injection (CVSS 5.3, SourceCodester Sales and Inventory System)
- [CVE-2026-33215](https://cve.now/CVE-2026-33215.md): NATS is vulnerable to MQTT hijacking via Client ID (CVSS 6.5, nats-io nats-server · github.com/nats-io/nats-server +1)
- [CVE-2026-3912](https://cve.now/CVE-2026-3912.md): TIBCO ActiveMatrix BusinessWorks Injection Vulnerability (CVSS 8.7, Tibco ActiveMatrix BusinessWorks · Tibco Enterprise Adminis…)
- [CVE-2026-24159](https://cve.now/CVE-2026-24159.md): NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. (CVSS 7.8, NVIDIA NeMo Framework · nemo-toolkit)
- [CVE-2026-4371](https://cve.now/CVE-2026-4371.md): Out of bounds read in IMAP parsing (CVSS 7.4, Mozilla Thunderbird)
- [CVE-2026-24157](https://cve.now/CVE-2026-24157.md): NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. (CVSS 7.8, NVIDIA NeMo Framework · nemo-toolkit)
- [CVE-2026-3889](https://cve.now/CVE-2026-3889.md): Spoofing issue in Thunderbird (CVSS 6.5, Mozilla Thunderbird)
- [CVE-2026-24141](https://cve.now/CVE-2026-24141.md): NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe dese (CVSS 7.8, NVIDIA Model Optimizer)
- [CVE-2026-24158](https://cve.now/CVE-2026-24158.md): NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of service by providing a (CVSS 7.5, NVIDIA Triton Inference Server)
- [CVE-2026-4433](https://cve.now/CVE-2026-4433.md): An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunn (CVSS 1.9, Tenable Operation Technology)
- [CVE-2025-33254](https://cve.now/CVE-2025-33254.md): NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption. (CVSS 7.5, NVIDIA Triton Inference Server)
- [CVE-2025-33238](https://cve.now/CVE-2025-33238.md): NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception. (CVSS 7.5, NVIDIA Triton Inference Server)
- [CVE-2025-33244](https://cve.now/CVE-2025-33244.md): NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data. (CVSS 9.0, NVIDIA Apex)
- [CVE-2026-24152](https://cve.now/CVE-2026-24152.md): NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciou (CVSS 7.8, NVIDIA Megatron LM)
- [CVE-2026-24151](https://cve.now/CVE-2026-24151.md): NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously cra (CVSS 7.8, NVIDIA Megatron LM)
- [CVE-2026-24150](https://cve.now/CVE-2026-24150.md): NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciou (CVSS 7.8, NVIDIA Megatron LM)
- [CVE-2025-33248](https://cve.now/CVE-2025-33248.md): NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load (CVSS 7.8, NVIDIA Megatron LM)
- [CVE-2025-33247](https://cve.now/CVE-2025-33247.md): NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. (CVSS 7.8, NVIDIA Megatron LM)
- [CVE-2025-33242](https://cve.now/CVE-2025-33242.md): NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad s (CVSS 5.9, NVIDIA HGX and DGX B300)
- [CVE-2025-33216](https://cve.now/CVE-2025-33216.md): NVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an attacker on a VM may cause an incorrect calculation (CVSS 6.8, NVIDIA SNAP-4 Container)
- [CVE-2025-33215](https://cve.now/CVE-2025-33215.md): NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointe (CVSS 6.8, NVIDIA SNAP-4 Container)
- [CVE-2026-21790](https://cve.now/CVE-2026-21790.md): HCL Traveler is susceptible to a weak default HTTP header validation vulnerability (CVSS 6.3, HCLSoftware Traveler)
- [CVE-2026-21783](https://cve.now/CVE-2026-21783.md): HCL Traveler is affected by sensitive information disclosure (CVSS 4.3, HCLSoftware Traveler)
- [CVE-2026-33412](https://cve.now/CVE-2026-33412.md): Vim affected by Command injection via newline in glob() (CVSS 5.6, vim)
- [CVE-2026-33353](https://cve.now/CVE-2026-33353.md): Soft Serve: Authenticated repo import can clone server-local private repositories (CVSS 7.1, charmbracelet soft-serve · github.com/charmbracelet/soft-se…)
- [CVE-2026-33349](https://cve.now/CVE-2026-33349.md): fast-xml-parser: Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation (CVSS 5.9, NaturalIntelligence fast-xml-parser · fast-xml-parser)
- [CVE-2026-33345](https://cve.now/CVE-2026-33345.md): solidtime vulnerable to IDOR in private projects (CVSS 6.5, solidtime-io solidtime)
- [CVE-2026-33347](https://cve.now/CVE-2026-33347.md): league/commonmark has an embed extension allowed\_domains bypass (CVSS 6.3, thephpleague commonmark · league/commonmark)
- [CVE-2026-33344](https://cve.now/CVE-2026-33344.md): Dagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG (CVSS 8.1, dagu-org dagu · github.com/dagu-org/dagu)
- [CVE-2026-33332](https://cve.now/CVE-2026-33332.md): NiceGUI's unvalidated chunk size parameter in media routes can cause memory exhaustion (CVSS 6.9, zauberzeug nicegui · nicegui)
- [CVE-2026-33331](https://cve.now/CVE-2026-33331.md): oRPC: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify (CVSS 8.2, middleapi orpc · @orpc/openapi)
- [CVE-2026-33330](https://cve.now/CVE-2026-33330.md): FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback (CVSS 7.1, error311 FileRise)
- [CVE-2026-33329](https://cve.now/CVE-2026-33329.md): FileRise: Path Traversal in \`resumableIdentifier\` Leading to Arbitrary File Write, Recursive Directory Deletion, and Limited Existence Oracle (CVSS 8.1, error311 FileRise)
- [CVE-2026-33326](https://cve.now/CVE-2026-33326.md): @keystone-6/core: \`isFilterable\` bypass via \`cursor\` parameter in findMany (CVSS 4.3, keystonejs keystone · @keystone-6/core)
- [CVE-2026-22559](https://cve.now/CVE-2026-22559.md): An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socia (CVSS 8.8, Ubiquiti UniFi Network Server)
- [CVE-2026-33419](https://cve.now/CVE-2026-33419.md): MinIO: LDAP login brute-force via user enumeration and missing rate limit (CVSS 9.1, minio · github.com/minio/minio)
- [CVE-2026-33322](https://cve.now/CVE-2026-33322.md): MinIO: JWT Algorithm Confusion in OIDC Authentication (CVSS 9.2, minio · github.com/minio/minio)
- [CVE-2026-33511](https://cve.now/CVE-2026-33511.md): pyload-ng: Authentication Bypass via Host Header Injection in ClickNLoad (CVSS 8.8, pyload)
- [CVE-2026-33509](https://cve.now/CVE-2026-33509.md): pyload-ng: SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration (CVSS 7.5, pyload · pyload-ng)
- [CVE-2026-33314](https://cve.now/CVE-2026-33314.md): pyload-ng: Improper Authentication and Origin Validation Error (CVSS 6.5, pyload · pyload-ng)
- [CVE-2026-32948](https://cve.now/CVE-2026-32948.md): sbt: Source dependency feature (via crafted VCS URL) leads to arbitrary code execution on Windows (CVSS 6.7, sbt · org.scala-sbt:sbt)
- [CVE-2026-30932](https://cve.now/CVE-2026-30932.md): Froxlor is vulnerable to BIND zone file injection via unsanitized DNS record content in DomainZones API (CVSS 8.6, froxlor · froxlor/froxlor)
- [CVE-2026-33769](https://cve.now/CVE-2026-33769.md): Astro: Remote allowlist bypass via unanchored matchPathname wildcard (CVSS 2.9, withastro astro · astro)
- [CVE-2026-33768](https://cve.now/CVE-2026-33768.md): Astro: Unauthenticated Path Override via \`x-astro-path\` / \`x\_astro\_path\` (CVSS 6.5, withastro astro · @astrojs/vercel)
- [CVE-2026-29772](https://cve.now/CVE-2026-29772.md): Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands (CVSS 5.9, withastro astro · @astrojs/node)
- [CVE-2026-33627](https://cve.now/CVE-2026-33627.md): Parse Server: Auth data exposed via /users/me endpoint (CVSS 7.1, parse-community parse-server · parse-server)
- [CVE-2026-23924](https://cve.now/CVE-2026-23924.md): Agent 2 Docker plugin arbitrary file read via Docker API injection (CVSS 6.1, Zabbix)
- [CVE-2026-23923](https://cve.now/CVE-2026-23923.md): Unauthenticated arbitrary PHP class instantiation (CVSS 6.9, Zabbix)
- [CVE-2026-33624](https://cve.now/CVE-2026-33624.md): Parse Server: MFA recovery code single-use bypass via concurrent requests (CVSS 2.1, parse-community parse-server · parse-server)
- [CVE-2026-23921](https://cve.now/CVE-2026-23921.md): Blind, read-only SQL injection in Zabbix API via sortfield parameter (CVSS 8.7, Zabbix)
- [CVE-2026-23920](https://cve.now/CVE-2026-23920.md): Host and event action script regex validation can be bypassed in certain situations, leading to potential command injection (CVSS 7.7, Zabbix)
- [CVE-2026-33539](https://cve.now/CVE-2026-33539.md): Parse Server: SQL injection via aggregate and distinct field names in PostgreSQL adapter (CVSS 8.6, parse-community parse-server · parse-server)
- [CVE-2026-23919](https://cve.now/CVE-2026-23919.md): Insufficient isolation of JavaScript (Duktape) execution context on Zabbix Server (CVSS 7.1, Zabbix)
- [CVE-2026-33538](https://cve.now/CVE-2026-33538.md): Parse Server: Denial of service via unindexed database query for unconfigured auth providers (CVSS 8.7, parse-community parse-server · parse-server)
- [CVE-2026-33527](https://cve.now/CVE-2026-33527.md): Parse Server: Session update endpoint allows overwriting server-generated session fields (CVSS 5.3, parse-community parse-server · parse-server)
- [CVE-2026-33508](https://cve.now/CVE-2026-33508.md): Parse Server: LiveQuery subscription query depth bypass (CVSS 8.2, parse-community parse-server · parse-server)
- [CVE-2026-33498](https://cve.now/CVE-2026-33498.md): Parse Server: Query condition depth bypass via pre-validation transform pipeline (CVSS 8.7, parse-community parse-server · parse-server)
- [CVE-2026-33429](https://cve.now/CVE-2026-33429.md): Parse Server: Protected field change detection oracle via LiveQuery watch parameter (CVSS 6.3, parse-community parse-server · parse-server)
- [CVE-2026-33421](https://cve.now/CVE-2026-33421.md): Parse Server: LiveQuery bypasses CLP pointer permission enforcement (CVSS 7.1, parse-community parse-server · parse-server)
- [CVE-2026-33409](https://cve.now/CVE-2026-33409.md): Parse Server: Auth provider validation bypass on login via partial authData (CVSS 7.0, parse-community parse-server · parse-server)
- [CVE-2026-2417](https://cve.now/CVE-2026-2417.md): Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller (CVSS 9.3, Pharos Controls Mosaic Show Controller)
- [CVE-2026-33323](https://cve.now/CVE-2026-33323.md): Parse Server: Email verification resend page leaks user existence (CVSS 6.3, parse-community parse-server · parse-server)
- [CVE-2026-33417](https://cve.now/CVE-2026-33417.md): Wallos: Password Reset Tokens Never Expire (CVSS 6.5, ellite Wallos)
- [CVE-2026-1995](https://cve.now/CVE-2026-1995.md): IDrive Cloud Backup Client for Windows contains a privilege escalation vulnerability (CVSS 7.8, IDrive Cloud Backup Client for Windows)
- [CVE-2026-33401](https://cve.now/CVE-2026-33401.md): Wallos: Incomplete fix for CVE-2026-30840 - SSRF in AI and notification endpoints bypass ssrf\_helper.php (CVSS 7.1, ellite Wallos)
- [CVE-2026-33400](https://cve.now/CVE-2026-33400.md): Wallos: Stored cross-site scripting (XSS) vulnerability in the payment method rename endpoint (CVSS 5.4, ellite Wallos)
- [CVE-2026-33399](https://cve.now/CVE-2026-33399.md): Wallos: SSRF Bypass - Incomplete Fix for CVE-2026-30839/30840 (CVSS 7.7, ellite Wallos)
- [CVE-2026-33407](https://cve.now/CVE-2026-33407.md): Wallos: SSRF via HTTP Proxy Environment Variable (CVSS 8.3, ellite Wallos)
- [CVE-2026-33162](https://cve.now/CVE-2026-33162.md): Craft CMS: Authorization bypass in "entries/move-to-section" allows control panel user to move entries without section permissions (CVSS 4.9, craftcms cms · craftcms/cms)
- [CVE-2026-32854](https://cve.now/CVE-2026-32854.md): LibVNCServer httpd proxy NULL Pointer Dereference (CVSS 6.3, LibVNCServer)
- [CVE-2026-33161](https://cve.now/CVE-2026-33161.md): Craft CMS: Anonymous "assets/image-editor" calls returns private asset editor metadata to unauthorized users (CVSS 1.3, craftcms cms · craftcms/cms)
- [CVE-2026-32853](https://cve.now/CVE-2026-32853.md): LibVNCServer UltraZip Encoding Heap Out-of-bounds Read (CVSS 6.9, LibVNCServer)
- [CVE-2026-33160](https://cve.now/CVE-2026-33160.md): Craft CMS: Anonymous "generate transform" calls for assets can expose private assets via transform URL (CVSS 2.7, craftcms cms · craftcms/cms)
- [CVE-2026-33159](https://cve.now/CVE-2026-33159.md): Craft CMS: Unauthenticated users could execute project configuration sync operations that should be restricted trusted users (CVSS 6.9, craftcms cms · craftcms/cms)
- [CVE-2026-33158](https://cve.now/CVE-2026-33158.md): Craft CMS: Low-privilege users could read private asset contents when editing an asset (IDOR) (CVSS 4.9, craftcms cms · craftcms/cms)
- [CVE-2026-33157](https://cve.now/CVE-2026-33157.md): Craft CMS: Potential authenticated Remote Code Execution via malicious attached Behavior (CVSS 8.6, craftcms cms · craftcms/cms)
- [CVE-2025-11571](https://cve.now/CVE-2025-11571.md): Command Execution vulnerability in Simplicity Installer (CVSS 2.1, silabs.com Simplicity Studio · silabs.com Simplicity Instal…)
- [CVE-2026-33340](https://cve.now/CVE-2026-33340.md): LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint (CVSS 9.1, ParisNeo lollms-webui)
- [CVE-2026-33700](https://cve.now/CVE-2026-33700.md): Vikunja has a Link Share Delete IDOR — Missing Project Ownership Check Allows Cross-Project Link Share Deletion (CVSS 6.9, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33680](https://cve.now/CVE-2026-33680.md): Vikunja Vulnerable to Link Share Hash Disclosure via ReadAll Endpoint Enables Permission Escalation (CVSS 7.5, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33679](https://cve.now/CVE-2026-33679.md): Vikunja has SSRF via OpenID Connect Avatar Download that Bypasses Webhook SSRF Protections (CVSS 6.4, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33678](https://cve.now/CVE-2026-33678.md): Vikunja has IDOR in Task Attachment ReadOne Allows Cross-Project File Access and Deletion (CVSS 8.1, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33677](https://cve.now/CVE-2026-33677.md): Webhook BasicAuth Credentials Exposed to Read-Only Project Collaborators via API (CVSS 6.5, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33676](https://cve.now/CVE-2026-33676.md): Vikunja has Cross-Project Information Disclosure via Task Relations — Missing Authorization Check on Related Task Read (CVSS 6.5, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33675](https://cve.now/CVE-2026-33675.md): Vikunja has SSRF via Todoist/Trello Migration File Attachment URLs that Allows Reading Internal Network Resources (CVSS 6.4, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33668](https://cve.now/CVE-2026-33668.md): Vikunja Allows Disabled/Locked User Accounts to Authenticate via API Tokens, CalDAV, and OpenID Connect (CVSS 7.1, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33474](https://cve.now/CVE-2026-33474.md): Vikunja Affected by DoS via Image Preview Generation (CVSS 6.5, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33473](https://cve.now/CVE-2026-33473.md): Vikunja has TOTP Reuse During Validity Window (CVSS 5.7, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33336](https://cve.now/CVE-2026-33336.md): Vikunja Desktop vulnerable to Remote Code Execution via same-window navigation (CVSS 6.5, go-vikunja vikunja)
- [CVE-2026-33335](https://cve.now/CVE-2026-33335.md): Vikunja Desktop allows arbitrary local application invocation via unvalidated shell.openExternal (CVSS 6.4, go-vikunja vikunja)
- [CVE-2026-33334](https://cve.now/CVE-2026-33334.md): Vikunja Desktop: Any frontend XSS escalates to Remote Code Execution due to nodeIntegration (CVSS 6.5, go-vikunja vikunja)
- [CVE-2026-33316](https://cve.now/CVE-2026-33316.md): Vikunja’s Improper Access Control Enables Bypass of Administrator-Imposed Account Disablement (CVSS 8.1, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33315](https://cve.now/CVE-2026-33315.md): Vikunja has a 2FA Bypass via Caldav Basic Auth (CVSS 6.9, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-33313](https://cve.now/CVE-2026-33313.md): Vikunja has an IDOR in Task Comments Allows Reading Arbitrary Comments (CVSS 5.3, go-vikunja vikunja · code.vikunja.io/api)
- [CVE-2026-4775](https://cve.now/CVE-2026-4775.md): Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing (CVSS 7.8, Red Hat Enterprise Linux · Red Hat AI Inference Server +2)
- [CVE-2026-27651](https://cve.now/CVE-2026-27651.md): NGINX ngx\_mail\_auth\_http\_module vulnerability (CVSS 7.5, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-27654](https://cve.now/CVE-2026-27654.md): NGINX ngx\_http\_dav\_module vulnerability (CVSS 8.2, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-28755](https://cve.now/CVE-2026-28755.md): NGINX ngx\_stream\_ssl\_module vulnerability (CVSS 5.4, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-28753](https://cve.now/CVE-2026-28753.md): NGINX ngx\_mail\_proxy\_module vulnerability (CVSS 3.7, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-32647](https://cve.now/CVE-2026-32647.md): NGINX ngx\_http\_mp4\_module vulnerability (CVSS 7.8, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-27784](https://cve.now/CVE-2026-27784.md): NGINX ngx\_http\_mp4\_module vulnerability (CVSS 7.8, F5 NGINX Open Source)
- [CVE-2026-33418](https://cve.now/CVE-2026-33418.md): @dicebear/converter ensureSize() Vulnerable to SVG Dimension Capping Bypass via XML Comment Injection (CVSS 7.5, dicebear · @dicebear/converter)
- [CVE-2026-33311](https://cve.now/CVE-2026-33311.md): @dicebear/core and @dicebear/initials Vulnerable to SVG Injection via Unsanitized Options (CVSS 4.7, dicebear · @dicebear/core +1)
- [CVE-2026-33310](https://cve.now/CVE-2026-33310.md): Intake has a Command Injection via shell() Expansion in Parameter Defaults (CVSS 8.8, intake)
- [CVE-2026-33497](https://cve.now/CVE-2026-33497.md): Langflow: /profile\_pictures/{folder\_name}/{file\_name} endpoint file reading (CVSS 8.7, langflow-ai langflow · langflow)
- [CVE-2026-33484](https://cve.now/CVE-2026-33484.md): Langflow has Unauthenticated IDOR on Image Downloads (CVSS 7.5, langflow-ai langflow · langflow)
- [CVE-2026-33475](https://cve.now/CVE-2026-33475.md): Langflow GitHub Actions Shell Injection (CVSS 9.1, langflow-ai langflow)
- [CVE-2026-33309](https://cve.now/CVE-2026-33309.md): Langflow has an Arbitrary File Write (RCE) via v2 API (CVSS 10.0, langflow-ai langflow · langflow)
- [CVE-2026-4721](https://cve.now/CVE-2026-4721.md): Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4729](https://cve.now/CVE-2026-4729.md): Memory safety bugs fixed in Firefox 149 and Thunderbird 149 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4720](https://cve.now/CVE-2026-4720.md): Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4719](https://cve.now/CVE-2026-4719.md): Incorrect boundary conditions in the Graphics: Text component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4718](https://cve.now/CVE-2026-4718.md): Undefined behavior in the WebRTC: Signaling component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4728](https://cve.now/CVE-2026-4728.md): Spoofing issue in the Privacy: Anti-Tracking component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4727](https://cve.now/CVE-2026-4727.md): Denial-of-service in the Libraries component in NSS (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4726](https://cve.now/CVE-2026-4726.md): Denial-of-service in the XML component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4717](https://cve.now/CVE-2026-4717.md): Privilege escalation in the Netmonitor component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4716](https://cve.now/CVE-2026-4716.md): Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4715](https://cve.now/CVE-2026-4715.md): Uninitialized memory in the Graphics: Canvas2D component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4714](https://cve.now/CVE-2026-4714.md): Incorrect boundary conditions in the Audio/Video component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4713](https://cve.now/CVE-2026-4713.md): Incorrect boundary conditions in the Graphics component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4712](https://cve.now/CVE-2026-4712.md): Information disclosure in the Widget: Cocoa component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4725](https://cve.now/CVE-2026-4725.md): Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVSS 9.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4711](https://cve.now/CVE-2026-4711.md): Use-after-free in the Widget: Cocoa component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4710](https://cve.now/CVE-2026-4710.md): Incorrect boundary conditions in the Audio/Video component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4709](https://cve.now/CVE-2026-4709.md): Incorrect boundary conditions in the Audio/Video: GMP component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4708](https://cve.now/CVE-2026-4708.md): Incorrect boundary conditions in the Graphics component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4707](https://cve.now/CVE-2026-4707.md): Incorrect boundary conditions in the Graphics: Canvas2D component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4706](https://cve.now/CVE-2026-4706.md): Incorrect boundary conditions in the Graphics: Canvas2D component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4705](https://cve.now/CVE-2026-4705.md): Undefined behavior in the WebRTC: Signaling component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4704](https://cve.now/CVE-2026-4704.md): Denial-of-service in the WebRTC: Signaling component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4724](https://cve.now/CVE-2026-4724.md): Undefined behavior in the Audio/Video component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4723](https://cve.now/CVE-2026-4723.md): Use-after-free in the JavaScript Engine component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4702](https://cve.now/CVE-2026-4702.md): JIT miscompilation in the JavaScript Engine component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4722](https://cve.now/CVE-2026-4722.md): Privilege escalation in the IPC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4701](https://cve.now/CVE-2026-4701.md): Use-after-free in the JavaScript Engine component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4700](https://cve.now/CVE-2026-4700.md): Mitigation bypass in the Networking: HTTP component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4699](https://cve.now/CVE-2026-4699.md): Incorrect boundary conditions in the Layout: Text and Fonts component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4698](https://cve.now/CVE-2026-4698.md): JIT miscompilation in the JavaScript Engine: JIT component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4697](https://cve.now/CVE-2026-4697.md): Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4696](https://cve.now/CVE-2026-4696.md): Use-after-free in the Layout: Text and Fonts component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4695](https://cve.now/CVE-2026-4695.md): Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4694](https://cve.now/CVE-2026-4694.md): Incorrect boundary conditions, integer overflow in the Graphics component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4693](https://cve.now/CVE-2026-4693.md): Incorrect boundary conditions in the Audio/Video: Playback component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4692](https://cve.now/CVE-2026-4692.md): Sandbox escape in the Responsive Design Mode component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4691](https://cve.now/CVE-2026-4691.md): Use-after-free in the CSS Parsing and Computation component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4690](https://cve.now/CVE-2026-4690.md): Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4689](https://cve.now/CVE-2026-4689.md): Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVSS 10.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4688](https://cve.now/CVE-2026-4688.md): Sandbox escape due to use-after-free in the Disability Access APIs component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4687](https://cve.now/CVE-2026-4687.md): Sandbox escape due to incorrect boundary conditions in the Telemetry component (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4686](https://cve.now/CVE-2026-4686.md): Incorrect boundary conditions in the Graphics: Canvas2D component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4685](https://cve.now/CVE-2026-4685.md): Incorrect boundary conditions in the Graphics: Canvas2D component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-4684](https://cve.now/CVE-2026-4684.md): Race condition, use-after-free in the Graphics: WebRender component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2019-25647](https://cve.now/CVE-2019-25647.md): PhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager (CVSS 8.7, Phreesoft PhreeBooks ERP)
- [CVE-2019-25646](https://cve.now/CVE-2019-25646.md): Tabs Mail Carrier 2.5.1 Buffer Overflow via MAIL FROM (CVSS 9.3, Tabs Mail Carrier)
- [CVE-2019-25645](https://cve.now/CVE-2019-25645.md): WinAVI iPod 3GP MP4 PSP Converter 4.4.2 Denial of Service (CVSS 6.9, WinAVI iPod/3GP/MP4/PSP Converter)
- [CVE-2019-25644](https://cve.now/CVE-2019-25644.md): WinMPG Video Convert 9.3.5 Buffer Overflow Local Denial of Service (CVSS 6.9, WinMPG Video Convert Local Dos Exploit)
- [CVE-2019-25643](https://cve.now/CVE-2019-25643.md): eNdonesia Portal v8.7 SQL Injection via banners.php (CVSS 8.8, eNdonesia Portal)
- [CVE-2019-25642](https://cve.now/CVE-2019-25642.md): Bootstrapy CMS Lastest Multiple SQL Injection via Forum and Contact Modules (CVSS 8.8, Bootstrapy CMS)
- [CVE-2019-25641](https://cve.now/CVE-2019-25641.md): Netartmedia Vlog System Lastest SQL Injection via email Parameter (CVSS 8.8, Netartmedia Vlog System)
- [CVE-2019-25640](https://cve.now/CVE-2019-25640.md): Inout Article Base CMS Lastest SQL Injection via portalLogin.php (CVSS 8.8, Inoutscripts Inout Article Base CMS)
- [CVE-2019-25639](https://cve.now/CVE-2019-25639.md): Matrimony Website Script M-Plus Multiple SQL Injection (CVSS 8.8, Matri4Web Matrimony Website Script)
- [CVE-2019-25638](https://cve.now/CVE-2019-25638.md): Meeplace Business Review Script Lastest SQL Injection via addclick.php (CVSS 7.1, Meeplace Business Review Script)
- [CVE-2019-25637](https://cve.now/CVE-2019-25637.md): X-NetStat Pro 5.63 Local Buffer Overflow via EggHunter (CVSS 8.6, Freshsoftware NetStat Pro)
- [CVE-2019-25636](https://cve.now/CVE-2019-25636.md): Zeeways Jobsite CMS Lastest SQL Injection via id Parameter (CVSS 8.8, Zeeways Jobsite CMS)
- [CVE-2019-25635](https://cve.now/CVE-2019-25635.md): Zeeways Matrimony CMS Lastest SQL Injection via profile\_list (CVSS 8.8, Zeeways Matrimony CMS)
- [CVE-2019-25634](https://cve.now/CVE-2019-25634.md): Base64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter (CVSS 8.6, 4Mhz Base64 Decoder)
- [CVE-2019-25633](https://cve.now/CVE-2019-25633.md): AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via EggHunter (CVSS 8.6, AIDA64 Extreme)
- [CVE-2019-25632](https://cve.now/CVE-2019-25632.md): phpFileManager 1.7.8 Local File Inclusion via index.php (CVSS 6.9, Sourceforge phpFileManager)
- [CVE-2019-25631](https://cve.now/CVE-2019-25631.md): AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter (CVSS 8.6, AIDA64 Business)
- [CVE-2019-25630](https://cve.now/CVE-2019-25630.md): PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager (CVSS 8.7, Phreesoft PhreeBooks ERP)
- [CVE-2019-25629](https://cve.now/CVE-2019-25629.md): AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via Logging (CVSS 8.6, AIDA64 Extreme)
- [CVE-2019-25628](https://cve.now/CVE-2019-25628.md): Download Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflow (CVSS 9.3, Speedbit Download Accelerator Plus DAP)
- [CVE-2019-25627](https://cve.now/CVE-2019-25627.md): FlexHEX 2.71 Local Buffer Overflow via SEH Unicode (CVSS 8.6, FlexHEX)
- [CVE-2019-25626](https://cve.now/CVE-2019-25626.md): River Past Cam Do 3.7.6 Local Buffer Overflow in Activation Code (CVSS 8.6, Flexhex River Past Cam Do)
- [CVE-2025-64998](https://cve.now/CVE-2025-64998.md): Session hijacking via exposed session signing secret in distributed Checkmk setups (CVSS 7.3, Checkmk)
- [CVE-2026-4649](https://cve.now/CVE-2026-4649.md): Auth bypass in Apache Artemis allows reading all internal messages (CVSS 5.3, KNIME Business Hub)
- [CVE-2026-32642](https://cve.now/CVE-2026-32642.md): Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission (CVSS 2.3, Apache Software Foundation Apache Artemis · Apache Softw… +2)
- [CVE-2026-3509](https://cve.now/CVE-2026-3509.md): CODESYS Control Audit Log Format String DoS (CVSS 7.5, CODESYS Control RTE · CODESYS Control Win +12)
- [CVE-2025-41660](https://cve.now/CVE-2025-41660.md): CODESYS Control Boot Application Replacement Enables Code Execution (CVSS 8.8, CODESYS Control RTE · CODESYS Control Win +13)
- [CVE-2026-4756](https://cve.now/CVE-2026-4756.md): Out-of-bounds Write in MolotovCherry Android-ImageMagick7 (CVSS 7.8, MolotovCherry Android-ImageMagick7)
- [CVE-2026-4755](https://cve.now/CVE-2026-4755.md): CWE-20 in MolotovCherry Android-ImageMagick7 (CVSS 9.8, MolotovCherry Android-ImageMagick7)
- [CVE-2026-4754](https://cve.now/CVE-2026-4754.md): CWE-79 in MolotovCherry Android-ImageMagick7 (CVSS 6.1, MolotovCherry Android-ImageMagick7)
- [CVE-2026-33852](https://cve.now/CVE-2026-33852.md): Missing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick7 (CVSS 7.5, MolotovCherry Android-ImageMagick7)
- [CVE-2026-33856](https://cve.now/CVE-2026-33856.md): Missing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick7 (CVSS 7.5, MolotovCherry Android-ImageMagick7)
- [CVE-2026-33855](https://cve.now/CVE-2026-33855.md): Integer Overflow or Wraparound in MolotovCherry Android-ImageMagick7 (CVSS 5.5, MolotovCherry Android-ImageMagick7)
- [CVE-2026-33854](https://cve.now/CVE-2026-33854.md): Out-of-bounds Write in MolotovCherry Android-ImageMagick7 (CVSS 8.8, MolotovCherry Android-ImageMagick7)
- [CVE-2026-33853](https://cve.now/CVE-2026-33853.md): NULL Pointer Dereference in MolotovCherry Android-ImageMagick7 (CVSS 5.5, MolotovCherry Android-ImageMagick7)
- [CVE-2026-33847](https://cve.now/CVE-2026-33847.md): Improper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvms (CVSS 7.8, linkingvision rapidvms)
- [CVE-2026-33849](https://cve.now/CVE-2026-33849.md): Improper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvms (CVSS 8.8, linkingvision rapidvms)
- [CVE-2026-33848](https://cve.now/CVE-2026-33848.md): Improper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvms (CVSS 8.8, linkingvision rapidvms)
- [CVE-2026-33851](https://cve.now/CVE-2026-33851.md): Improper Restriction of Operations within the Bounds of a Memory Buffer in joncampbell123 doslib (CVSS 7.8, joncampbell123 doslib)
- [CVE-2026-33850](https://cve.now/CVE-2026-33850.md): Out-of-bounds Write in WujekFoliarz DualSenseY-v2 (CVSS 7.8, WujekFoliarz DualSenseY-v2)
- [CVE-2026-4753](https://cve.now/CVE-2026-4753.md): Out-of-bounds Read in slajerek RetroDebugger (CVSS 9.1, slajerek RetroDebugger)
- [CVE-2026-4752](https://cve.now/CVE-2026-4752.md): Use After Free in No-Chicken Echo-Mate (CVSS 6.4, No-Chicken Echo-Mate)
- [CVE-2026-4751](https://cve.now/CVE-2026-4751.md): NULL Pointer Dereference in tmate-io tmate (CVSS 5.3, tmate-io tmate)
- [CVE-2026-4750](https://cve.now/CVE-2026-4750.md): Out-of-bounds Read in fabiangreffrath woof (CVSS 9.1, fabiangreffrath woof)
- [CVE-2026-4749](https://cve.now/CVE-2026-4749.md): NVD-CWE-noinfo in albfan miraclecast (CVSS 6.5, albfan miraclecast)
- [CVE-2026-4662](https://cve.now/CVE-2026-4662.md): JetEngine \<= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered\_query' Parameter (CVSS 7.5, Crocoblock JetEngine)
- [CVE-2026-4283](https://cve.now/CVE-2026-4283.md): WP DSGVO Tools (GDPR) \<= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users (CVSS 9.1, legalweb WP DSGVO Tools)
- [CVE-2026-3138](https://cve.now/CVE-2026-3138.md): Product Filter for WooCommerce by WBW \<= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE (CVSS 6.5, woobewoo Product Filter for WooCommerce by WBW)
- [CVE-2026-4640](https://cve.now/CVE-2026-4640.md): Galaxy Software Services｜Vitals ESP - Missing Authentication (CVSS 8.7, Galaxy Software Services Vitals ESP)
- [CVE-2026-4639](https://cve.now/CVE-2026-4639.md): Galaxy Software Services｜Vitals ESP - Incorrect Authorization (CVSS 8.7, Galaxy Software Services Vitals ESP)
- [CVE-2026-4632](https://cve.now/CVE-2026-4632.md): itsourcecode Online Enrollment System Parameter index.php sql injection (CVSS 6.9, itsourcecode Online Enrollment System)
- [CVE-2026-4627](https://cve.now/CVE-2026-4627.md): D-Link DIR-825/DIR-825R NTP Service libdeuteron\_modules.so handler\_update\_system\_time os command injection (CVSS 8.6, D-Link DIR-825 · D-Link DIR-825R)
- [CVE-2026-4746](https://cve.now/CVE-2026-4746.md): Heap Buffer Over-Write Vulenrabilty in timeplus-io/proton (CVSS 10.0, timeplus-io proton)
- [CVE-2026-4745](https://cve.now/CVE-2026-4745.md): Arbitrary Code Execution via Crafted Bytecode in dendibakh/perf-ninja (CVSS 10.0, dendibakh perf-ninja)
- [CVE-2026-4744](https://cve.now/CVE-2026-4744.md): Notepad3 Bundled Oniguruma compile\_string\_node() Heap Buffer Overflow via Crafted Regex Pattern Allows Arbitrary Code Execution (CVSS 9.3, rizonesoft Notepad3)
- [CVE-2026-4743](https://cve.now/CVE-2026-4743.md): Null-Pointer Dereference Vulnerability in taurusxin/ncmdump (CVSS 5.2, taurusxin ncmdump)
- [CVE-2026-4742](https://cve.now/CVE-2026-4742.md): HTTP Request Smuggling in visualfc/liteide (CVSS 2.9, visualfc liteide)
- [CVE-2026-4741](https://cve.now/CVE-2026-4741.md): Path Traversal Vulnerability in TeamJCD/JoyConDroid (CVSS 8.6, TeamJCD JoyConDroid)
- [CVE-2026-4739](https://cve.now/CVE-2026-4739.md): Integer overflow vulnerabilities in InsightSoftwareConsortium/ITK (CVSS 9.4, InsightSoftwareConsortium ITK)
- [CVE-2026-4738](https://cve.now/CVE-2026-4738.md): GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution (CVSS 9.4, OSGeo gdal)
- [CVE-2026-4737](https://cve.now/CVE-2026-4737.md): Use-After-Free Vulnerability in No-Chicken/Echo-Mate (CVSS 7.3, No-Chicken Echo-Mate)
- [CVE-2026-4736](https://cve.now/CVE-2026-4736.md): Math Issue in No-Chicken/Echo-Mate (CVSS 7.3, No-Chicken Echo-Mate)
- [CVE-2026-4735](https://cve.now/CVE-2026-4735.md): A stack overflow and DoS vulnerability in DTStack/chunjun (CVSS 8.7, DTStack chunjun)
- [CVE-2026-4734](https://cve.now/CVE-2026-4734.md): Heap Buffer Overflow in yoyofr/modizer (CVSS 9.4, yoyofr modizer)
- [CVE-2026-4733](https://cve.now/CVE-2026-4733.md): Information disclosure in ixray-1.6-stcop (CVSS 5.3, ixray-team ixray-1.6-stcop)
- [CVE-2026-4732](https://cve.now/CVE-2026-4732.md): Out-of-bounds Read Overflow in tildearrow/furnace (CVSS 8.4, tildearrow furnace)
- [CVE-2026-4626](https://cve.now/CVE-2026-4626.md): projectworlds Lawyer Management System lawyer\_booking.php cross site scripting (CVSS 5.1, projectworlds Lawyer Management System)
- [CVE-2026-4625](https://cve.now/CVE-2026-4625.md): SourceCodester Online Admission System programmes.php sql injection (CVSS 6.9, SourceCodester Online Admission System)
- [CVE-2026-4731](https://cve.now/CVE-2026-4731.md): An Integer Overflow Vulnerability in artraweditor/ART (CVSS 8.5, artraweditor ART)
- [CVE-2026-4624](https://cve.now/CVE-2026-4624.md): SourceCodester Online Library Management System Parameter home.php sql injection (CVSS 6.9, SourceCodester Online Library Management System)
- [CVE-2026-4623](https://cve.now/CVE-2026-4623.md): DefaultFuction Jeson-Customer-Relationship-Management-System API Module System.php server-side request forgery (CVSS 6.9, DefaultFuction Jeson-Customer-Relationship-Management-System)
- [CVE-2026-33308](https://cve.now/CVE-2026-33308.md): mod\_gnutls missing key purpose check in client certificate verification (CVSS 6.8, airtower-luna mod\_gnutls)
- [CVE-2026-33307](https://cve.now/CVE-2026-33307.md): mod\_gnutils has stack-based buffer overflow caused by a long client certificate chain (CVSS 7.5, airtower-luna mod\_gnutls)
- [CVE-2026-3079](https://cve.now/CVE-2026-3079.md): LearnDash LMS \<= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters\[orderby\_order\]' Parameter (CVSS 6.5, StellarWP LearnDash LMS)
- [CVE-2026-4617](https://cve.now/CVE-2026-4617.md): SourceCodester Patients Waiting Area Queue Management System Patient Check-In api\_patient\_checkin.php ValidateToken improper authorization (CVSS 6.9, SourceCodester Patients Waiting Area Queue Management System)
- [CVE-2026-4680](https://cve.now/CVE-2026-4680.md): Use after free in FedCM in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-4679](https://cve.now/CVE-2026-4679.md): Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a (CVSS 8.8, Google Chrome)
- [CVE-2026-4678](https://cve.now/CVE-2026-4678.md): Use after free in WebGPU in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-4677](https://cve.now/CVE-2026-4677.md): Inappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memo (CVSS 8.8, Google Chrome)
- [CVE-2026-4676](https://cve.now/CVE-2026-4676.md): Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a craf (CVSS 8.8, Google Chrome)
- [CVE-2026-4675](https://cve.now/CVE-2026-4675.md): Heap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via (CVSS 8.8, Google Chrome)
- [CVE-2026-4674](https://cve.now/CVE-2026-4674.md): Out of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform out of bounds memory access via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-4673](https://cve.now/CVE-2026-4673.md): Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write (CVSS 8.8, Google Chrome)
- [CVE-2026-22739](https://cve.now/CVE-2026-22739.md): Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks (CVSS 8.6, Spring Cloud · org.springframework.cloud:spring-cloud-confi…)
- [CVE-2026-4616](https://cve.now/CVE-2026-4616.md): bolo-blog Article Title article cross site scripting (CVSS 4.8, bolo-blog)
- [CVE-2026-33306](https://cve.now/CVE-2026-33306.md): bcrypt-ruby has an Integer Overflow that Causes Zero Key-Strengthening Iterations at Cost=31 on JRuby (CVSS 4.5, bcrypt-ruby · bcrypt)
- [CVE-2026-33320](https://cve.now/CVE-2026-33320.md): Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service (CVSS 6.2, TomWright dasel · github.com/tomwright/dasel/v3 +2)
- [CVE-2026-33298](https://cve.now/CVE-2026-33298.md): llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing (CVSS 7.8, ggml-org llama.cpp)
- [CVE-2026-29839](https://cve.now/CVE-2026-29839.md): DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys\_task\_add.php. (CVSS 8.8)
- [CVE-2026-29840](https://cve.now/CVE-2026-29840.md): JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserControll (CVSS 5.4)
- [CVE-2026-30653](https://cve.now/CVE-2026-30653.md): An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of (CVSS 7.5)
- [CVE-2026-30655](https://cve.now/CVE-2026-30655.md): SQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows unauthenticated remote attackers to gain unauth (CVSS 6.5)
- [CVE-2026-30661](https://cve.now/CVE-2026-30661.md): iCMS v8.0.0 contains a Cross-Site Scripting (XSS) vulnerability in the User Management component, specifically within the index.html file. (CVSS 6.1)
- [CVE-2026-30662](https://cve.now/CVE-2026-30662.md): ConcreteCMS v9.4.7 contains a Denial of Service (DoS) vulnerability in the File Manager component. (CVSS 6.5, concrete5/concrete5)
- [CVE-2026-33554](https://cve.now/CVE-2026-33554.md): ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. (CVSS 7.5, FreeIPMI)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-03-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.