CVEs published March 30, 2026
140 CVEs were published on March 30, 2026: 20 critical, 40 high. 1 is now in CISA KEV.
- Published
- 140
- Critical
- 20
- High
- 40
- Medium
- 68
- Low
- 12
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 55
Most affected products
- FreeRDP
- 9
- nodejs node
- 8
- Tautulli
- 5
- Tenda CH22
- 5
- 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- 4
- CrewAI
- 4
- OpenSC
- 4
- Totolink A3300R
- 4
- BlueKitchen BTstack
- 3
- ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- 3
Critical 20
- CVE-2026-4257Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionalitysupsysticcom Contact Form by Supsystic
- CVE-2026-4789CVE-2026-4789Kyverno · github.com/kyverno/kyverno
- CVE-2026-31946OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flowOpenOLAT
- CVE-2026-34558CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- CVE-2026-34557CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- CVE-2026-33026nginx-ui Backup Restore Allows Tampering with Encrypted Backups0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-34714Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr}Vim
- CVE-2026-33032Nginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx Takeover0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-2286CVE-2026-2286CrewAI
- CVE-2026-2287CVE-2026-2287CrewAI
- CVE-2026-2275CVE-2026-2275CrewAI
- CVE-2026-4415GIGABYTE｜Gigabyte Control Center - Arbitrary File WriteGigabyte Control Center
- CVE-2025-15379Command Injection in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2025-15036Path Traversal Vulnerability in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2026-30305Syntx's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism co
- CVE-2026-30306In its design for automatic terminal command execution, SakaDev offers two options: Execute safe commands and execute all commands.
- CVE-2026-30307Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism
- CVE-2026-30308In its design for automatic terminal command execution, HAI Build Code Generator offers two options: Execute safe commands and Execute all c
- CVE-2026-30313DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechani
- CVE-2026-30562A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.
High 40
- CVE-2026-5156Tenda CH22 Parameter QuickIndex formQuickIndex stack-based overflowTenda CH22
- CVE-2026-5155Tenda CH22 Parameter AdvSetWan fromAdvSetWan stack-based overflowTenda CH22
- CVE-2026-5154Tenda CH22 Parameter setcfm fromSetCfm stack-based overflowTenda CH22
- CVE-2026-5130Debugger & Troubleshooter <= 1.3.2 - Unauthenticated Privilege Escalation to Administrator via Cookie Manipulationjhimross Debugger & Troubleshooter
- CVE-2026-33987FreeRDP: Persistent Cache bmpSize Desync - Heap OOB WriteFreeRDP
- CVE-2026-33986FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB WriteFreeRDP
- CVE-2026-33984FreeRDP: ClearCodec resize_vbar_entry() Heap OOB WriteFreeRDP
- CVE-2026-33982FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB ReadFreeRDP
- CVE-2026-32877Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Fieldrandombit botan
- CVE-2026-28228OpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code ExecutionOpenOLAT
- CVE-2026-5152Tenda CH22 createFileName formCreateFileName stack-based overflowTenda CH22
- CVE-2026-27018Gotenberg: Chromium deny-list bypass via case-insensitive URL schemegotenberg · github.com/gotenberg/gotenberg/v7 +1
- CVE-2026-32275Tautulli: Unsanitized JSONP callback parameter allows cross-origin script injection and API key theftTautulli
- CVE-2026-31831Tautulli: Unauthenticated Path Traversal in `/newsletter/image/images` endpointTautulli
- CVE-2026-28505Tautulli: RCE via eval() sandbox bypass using lambda nested scope to escape co_names whitelist checkTautulli
- CVE-2026-21710A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the apnodejs node
- CVE-2026-3991Elevation of Privileges in Symantec Data Loss Prevention Windows EndpointBroadcom Data Loss Prevention
- CVE-2026-3502TrueConf Client Update Integrity Verification BypassTrueConf Client
- CVE-2026-33028Nginx UI: Race Condition Leads to Persistent Data Corruption and Service Collapse0xJacky nginx-ui · github.com/0xJacky/Nginx-UI +1
- CVE-2026-33030Nginx UI: Unencrypted Storage of DNS API Tokens and ACME Private Keys0xJacky nginx-ui · github.com/0xJacky/nginx-ui
- CVE-2026-4046iconv crash due to assertion failure with untrusted inputThe GNU C Library glibc
- CVE-2026-2285CVE-2026-2285CrewAI
- CVE-2026-3321Authorization Bypass in ON24 Q&A chatON24 Q&A chat
- CVE-2026-4315WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UIWatchGuard Fireware OS
- CVE-2026-4266WatchGuard Firebox Insecure Deserialization in Fireware Access PortalWatchGuard Fireware OS
- CVE-2019-25654Core FTP/SFTP Server 1.2 Denial of Service via Buffer OverflowCoreftp Core FTP/SFTP Server
- CVE-2026-4416GIGABYTE｜Performance Library - Insecure DeserializationGIGABYTE Performance Library
- CVE-2026-5121Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processingRed Hat Enterprise Linux 7 Extended Lifecycle Support ·… +8
- CVE-2026-3945tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Servicetinyproxy
- CVE-2026-2328Backend Access Due to Insufficient Input ValidationWAGO Device Sphere · WAGO Solution Builder
- CVE-2026-3124Download Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'wpchill Download Monitor
- CVE-2026-29872A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab82
- CVE-2026-29924Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File
- CVE-2026-29925Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.
- CVE-2026-29953SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column
- CVE-2026-29954In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of
- CVE-2026-30077OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message.
- CVE-2026-33373An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.
- CVE-2026-33643SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/colu
- CVE-2026-34472Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attac
Medium, low and unrated 80
- CVE-2026-5157code-projects Online Food Ordering System Order order.php cross site scriptingcode-projects Online Food Ordering System
- CVE-2026-33995FreeRDP: Possible double free in kerberos_AcceptSecurityContextFreeRDP
- CVE-2026-32794Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token ExchangeApache Software Foundation Apache Airflow Provider for Data…
- CVE-2026-33985FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB ReadFreeRDP
- CVE-2026-33983FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoSFreeRDP
- CVE-2026-33952FreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checksFreeRDP
- CVE-2026-33977FreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)FreeRDP
- CVE-2026-5153Tenda CH22 WriteFacMac FormWriteFacMac command injectionTenda CH22
- CVE-2026-32883Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypassrandombit botan
- CVE-2026-32884Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation)randombit botan
- CVE-2026-27599CI4MS: System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSci4-cms-erp ci4ms · ci4-cms-erp/ci4ms
- CVE-2026-32696NanoMQ HTTP Auth: Missing username/password can trigger a NULL-pointer strlen() in auth_http.c:set_data(), causing a process crash — SIGSEGV, remotely triggerablenanomq
- CVE-2026-25627nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocketnanomq
- CVE-2026-5150code-projects Accounting System Parameter viewin_costumer.php sql injectioncode-projects Accounting System
- CVE-2026-5148YunaiV yudao-cloud page sql injectionYunaiV yudao-cloud
- CVE-2026-31799Tautulli: SQL Injection in get_home_stats API endpoint via unsanitised filter parametersTautulli
- CVE-2026-31804Tautulli: Unauthenticated pms_image_proxy endpoint proxies arbitrary HTTP requests through the Plex Media ServerTautulli
- CVE-2026-21716An incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the promises API without the required permissionodejs node
- CVE-2026-21711A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operations without the required permission chenodejs node
- CVE-2026-21715A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync.native()` without the required read permission checks, whinodejs node
- CVE-2026-21717A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially prnodejs node
- CVE-2026-21713A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timingnodejs node
- CVE-2026-21714A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow cnodejs node
- CVE-2026-5147YunaiV yudao-cloud get-by-website sql injectionYunaiV yudao-cloud
- CVE-2026-5126SourceCodester RSS Feed Parser file_get_contents server-side request forgerySourceCodester RSS Feed Parser
- CVE-2026-33027Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-33029Nginx UI: DoS via Negative Integer Input in Logrotate Interval0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2025-66215OpenSC: Stack-buffer-overflow WRITE in card-oberthurOpenSC
- CVE-2025-66038OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointersOpenSC
- CVE-2025-66037OpenSC: Out of Bounds vulnerabilityOpenSC
- CVE-2026-5125raine consult-llm-mcp server.ts child_process.execSync os command injectionraine consult-llm-mcp
- CVE-2025-49010OpenSC: Stack-buffer-overflow WRITE in GET RESPONSEOpenSC
- CVE-2026-27508Smoothwall Express < 3.1 Update 13 Reflected XSS in redirect.cgi via url ParameterSmoothwall Express
- CVE-2026-26352Smoothwall Express < 3.1 Update 13 Stored XSS in vpnmain.cgi via VPN_IP ParameterSmoothwall Express
- CVE-2026-5124osrg GoBGP BGP Header bgp.go BGPHeader.DecodeFromBytes access controlosrg GoBGP
- CVE-2026-5170Users could trigger a crash of mongod primaries during promotion to shardedMongoDB Server
- CVE-2026-5123osrg GoBGP bgp.go DecodeFromBytes off-by-oneosrg GoBGP
- CVE-2026-21712A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalizednodejs node
- CVE-2026-5165Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device resetRed Hat Enterprise Linux
- CVE-2026-5164Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap requestRed Hat Enterprise Linux
- CVE-2026-5122osrg GoBGP BGP OPEN Message bgp.go DecodeFromBytes access controlosrg GoBGP
- CVE-2026-28528BlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined BehaviorBlueKitchen BTstack
- CVE-2026-28527BlueKitchen BTstack < 1.8.1 AVRCP Controller GET_PLAYER_APPLICATION_SETTING_*_TEXT Handlers OOB ReadBlueKitchen BTstack
- CVE-2026-28526BlueKitchen BTstack < 1.8.1 AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_* Handlers OOB ReadBlueKitchen BTstack
- CVE-2019-25655Device Monitoring Studio 8.10.00.8925 Denial of Servicehdd Device Monitoring Studio
- CVE-2019-25653Navicat for Oracle 12.1.15 Password Field Denial of ServiceNavicat for Oracle
- CVE-2018-25235NetworkActiv Web Server 4.0 Username Field Buffer Overflow DoSNetworkActiv Web Server
- CVE-2018-25234SmartFTP Client 9.0.2615.0 Denial of Service via Host FieldSmartFTP Client
- CVE-2018-25233WebDrive 18.00.5057 Denial of Service via Secure WebDAVWebDrive
- CVE-2018-25232Softros LAN Messenger 9.2 Denial of Service via Log Files LocationSoftros LAN Messenger
- CVE-2018-25231HeidiSQL 9.5.0.5196 Denial of Service via PreferencesHeidiSQL
- CVE-2018-25230Free IP Switcher 3.1 Denial of Service via Computer NameEusing Free IP Switcher
- CVE-2018-25229BulletProof FTP Server 2019.0.0.50 Denial of Service via SMTPBpftpserver BulletProof FTP Server
- CVE-2018-25228NetSetMan 4.7.1 Workgroup Buffer Overflow Denial of ServiceNetSetMan
- CVE-2018-25227Valentina Studio 9.0.4 Denial of Service via Host ParameterValentina-Db Valentina Studio
- CVE-2018-25226FTPShell Server 6.83 Denial of Service via Account NameFTPShell Server
- CVE-2026-1612Hard-coded AWS Key in AL-KO Robolinho Update SoftwareAL-KO Robolinho Update Software
- CVE-2026-25704Incomplete privilege drop for com.system76.CosmicGreeter.GetUserDatapop-os cosmic-greeter
- CVE-2025-3716User enumeration in ESET Protect (on-prem)ESET, spol. s.r.o ESET Protect
- CVE-2026-5119Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishmentRed Hat Enterprise Linux
- CVE-2026-5107FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access controlFRRouting FRR
- CVE-2026-5106code-projects Exam Form Submission update_fst.php cross site scriptingcode-projects Exam Form Submission
- CVE-2026-5105Totolink A3300R Parameter cstecgi.cgi setVpnPassCfg command injectionTotolink A3300R
- CVE-2026-5104Totolink A3300R cstecgi.cgi setStaticRoute command injectionTotolink A3300R
- CVE-2026-5103Totolink A3300R cstecgi.cgi setUPnPCfg command injectionTotolink A3300R
- CVE-2025-7741Hardcoded Password Vulnerability have been found in CENTUM.Yokogawa Electric CENTUM VP
- CVE-2026-5102Totolink A3300R Parameter cstecgi.cgi setSmartQosCfg command injectionTotolink A3300R
- CVE-2026-29597DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability.
- CVE-2026-29909MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module.
- CVE-2026-30082Multiple stored cross-site scripting (XSS) vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.
- CVE-2026-30556A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.
- CVE-2026-30557A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.
- CVE-2026-30558A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.
- CVE-2026-30559A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.
- CVE-2026-30560A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.
- CVE-2026-30561A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.
- CVE-2026-30563A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.
- CVE-2026-30564A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.
- CVE-2026-30565A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.
- CVE-2026-30566A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.