# CVEs published 2026-03-30

140 CVEs were published on March 30, 2026: 20 critical, 40 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-5157](https://cve.now/CVE-2026-5157.md): code-projects Online Food Ordering System Order order.php cross site scripting (CVSS 5.3, code-projects Online Food Ordering System)
- [CVE-2026-5156](https://cve.now/CVE-2026-5156.md): Tenda CH22 Parameter QuickIndex formQuickIndex stack-based overflow (CVSS 8.7, Tenda CH22)
- [CVE-2026-5155](https://cve.now/CVE-2026-5155.md): Tenda CH22 Parameter AdvSetWan fromAdvSetWan stack-based overflow (CVSS 8.7, Tenda CH22)
- [CVE-2026-5154](https://cve.now/CVE-2026-5154.md): Tenda CH22 Parameter setcfm fromSetCfm stack-based overflow (CVSS 8.7, Tenda CH22)
- [CVE-2026-5130](https://cve.now/CVE-2026-5130.md): Debugger & Troubleshooter \<= 1.3.2 - Unauthenticated Privilege Escalation to Administrator via Cookie Manipulation (CVSS 8.8, jhimross Debugger & Troubleshooter)
- [CVE-2026-33995](https://cve.now/CVE-2026-33995.md): FreeRDP: Possible double free in kerberos\_AcceptSecurityContext (CVSS 5.3, FreeRDP)
- [CVE-2026-33987](https://cve.now/CVE-2026-33987.md): FreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write (CVSS 7.1, FreeRDP)
- [CVE-2026-32794](https://cve.now/CVE-2026-32794.md): Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token Exchange (CVSS 4.8, Apache Software Foundation Apache Airflow Provider for Data…)
- [CVE-2026-33986](https://cve.now/CVE-2026-33986.md): FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write (CVSS 7.5, FreeRDP)
- [CVE-2026-33985](https://cve.now/CVE-2026-33985.md): FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read (CVSS 5.9, FreeRDP)
- [CVE-2026-33984](https://cve.now/CVE-2026-33984.md): FreeRDP: ClearCodec resize\_vbar\_entry() Heap OOB Write (CVSS 7.5, FreeRDP)
- [CVE-2026-33983](https://cve.now/CVE-2026-33983.md): FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS (CVSS 6.5, FreeRDP)
- [CVE-2026-33982](https://cve.now/CVE-2026-33982.md): FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read (CVSS 7.1, FreeRDP)
- [CVE-2026-33952](https://cve.now/CVE-2026-33952.md): FreeRDP: DoS via WINPR\_ASSERT in rts\_read\_auth\_verifier\_no\_checks (CVSS 6.0, FreeRDP)
- [CVE-2026-33977](https://cve.now/CVE-2026-33977.md): FreeRDP: DoS via WINPR\_ASSERT in IMA ADPCM audio decoder (dsp.c:331) (CVSS 6.9, FreeRDP)
- [CVE-2026-5153](https://cve.now/CVE-2026-5153.md): Tenda CH22 WriteFacMac FormWriteFacMac command injection (CVSS 5.3, Tenda CH22)
- [CVE-2026-4257](https://cve.now/CVE-2026-4257.md): Contact Form by Supsystic \<= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality (CVSS 9.8, supsysticcom Contact Form by Supsystic)
- [CVE-2026-4789](https://cve.now/CVE-2026-4789.md): CVE-2026-4789 (CVSS 9.8, Kyverno · github.com/kyverno/kyverno)
- [CVE-2026-32877](https://cve.now/CVE-2026-32877.md): Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field (CVSS 8.2, randombit botan)
- [CVE-2026-32883](https://cve.now/CVE-2026-32883.md): Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass (CVSS 5.9, randombit botan)
- [CVE-2026-32884](https://cve.now/CVE-2026-32884.md): Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) (CVSS 5.9, randombit botan)
- [CVE-2026-28228](https://cve.now/CVE-2026-28228.md): OpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code Execution (CVSS 8.8, OpenOLAT)
- [CVE-2026-31946](https://cve.now/CVE-2026-31946.md): OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow (CVSS 9.8, OpenOLAT)
- [CVE-2026-5152](https://cve.now/CVE-2026-5152.md): Tenda CH22 createFileName formCreateFileName stack-based overflow (CVSS 8.7, Tenda CH22)
- [CVE-2026-34558](https://cve.now/CVE-2026-34558.md): CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34557](https://cve.now/CVE-2026-34557.md): CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-27599](https://cve.now/CVE-2026-27599.md): CI4MS: System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 4.7, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-27018](https://cve.now/CVE-2026-27018.md): Gotenberg: Chromium deny-list bypass via case-insensitive URL scheme (CVSS 7.8, gotenberg · github.com/gotenberg/gotenberg/v7 +1)
- [CVE-2026-32696](https://cve.now/CVE-2026-32696.md): NanoMQ HTTP Auth: Missing username/password can trigger a NULL-pointer strlen() in auth\_http.c:set\_data(), causing a process crash — SIGSEGV, remotely triggerable (CVSS 3.1, nanomq)
- [CVE-2026-25627](https://cve.now/CVE-2026-25627.md): nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket (CVSS 6.5, nanomq)
- [CVE-2026-5150](https://cve.now/CVE-2026-5150.md): code-projects Accounting System Parameter viewin\_costumer.php sql injection (CVSS 6.9, code-projects Accounting System)
- [CVE-2026-5148](https://cve.now/CVE-2026-5148.md): YunaiV yudao-cloud page sql injection (CVSS 5.1, YunaiV yudao-cloud)
- [CVE-2026-32275](https://cve.now/CVE-2026-32275.md): Tautulli: Unsanitized JSONP callback parameter allows cross-origin script injection and API key theft (CVSS 7.4, Tautulli)
- [CVE-2026-31799](https://cve.now/CVE-2026-31799.md): Tautulli: SQL Injection in get\_home\_stats API endpoint via unsanitised filter parameters (CVSS 4.9, Tautulli)
- [CVE-2026-31831](https://cve.now/CVE-2026-31831.md): Tautulli: Unauthenticated Path Traversal in \`/newsletter/image/images\` endpoint (CVSS 8.7, Tautulli)
- [CVE-2026-31804](https://cve.now/CVE-2026-31804.md): Tautulli: Unauthenticated pms\_image\_proxy endpoint proxies arbitrary HTTP requests through the Plex Media Server (CVSS 4.0, Tautulli)
- [CVE-2026-28505](https://cve.now/CVE-2026-28505.md): Tautulli: RCE via eval() sandbox bypass using lambda nested scope to escape co\_names whitelist check (CVSS 7.5, Tautulli)
- [CVE-2026-33026](https://cve.now/CVE-2026-33026.md): nginx-ui Backup Restore Allows Tampering with Encrypted Backups (CVSS 9.4, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-21710](https://cve.now/CVE-2026-21710.md): A flaw in Node.js HTTP request handling causes an uncaught \`TypeError\` when a request is received with a header named \`\_\_proto\_\_\` and the ap (CVSS 7.5, nodejs node)
- [CVE-2026-21716](https://cve.now/CVE-2026-21716.md): An incomplete fix for CVE-2024-36137 leaves \`FileHandle.chmod()\` and \`FileHandle.chown()\` in the promises API without the required permissio (CVSS 3.3, nodejs node)
- [CVE-2026-21711](https://cve.now/CVE-2026-21711.md): A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operations without the required permission che (CVSS 5.3, nodejs node)
- [CVE-2026-21715](https://cve.now/CVE-2026-21715.md): A flaw in Node.js Permission Model filesystem enforcement leaves \`fs.realpathSync.native()\` without the required read permission checks, whi (CVSS 3.3, nodejs node)
- [CVE-2026-21717](https://cve.now/CVE-2026-21717.md): A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially pr (CVSS 5.9, nodejs node)
- [CVE-2026-21713](https://cve.now/CVE-2026-21713.md): A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing (CVSS 5.9, nodejs node)
- [CVE-2026-21714](https://cve.now/CVE-2026-21714.md): A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW\_UPDATE frames on stream 0 (connection-level) that cause the flow c (CVSS 5.3, nodejs node)
- [CVE-2026-5147](https://cve.now/CVE-2026-5147.md): YunaiV yudao-cloud get-by-website sql injection (CVSS 6.9, YunaiV yudao-cloud)
- [CVE-2026-34714](https://cve.now/CVE-2026-34714.md): Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} (CVSS 9.2, Vim)
- [CVE-2026-3991](https://cve.now/CVE-2026-3991.md): Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint (CVSS 7.8, Broadcom Data Loss Prevention)
- [CVE-2026-3502](https://cve.now/CVE-2026-3502.md): TrueConf Client Update Integrity Verification Bypass (CVSS 7.8, KEV, TrueConf Client)
- [CVE-2026-5126](https://cve.now/CVE-2026-5126.md): SourceCodester RSS Feed Parser file\_get\_contents server-side request forgery (CVSS 5.3, SourceCodester RSS Feed Parser)
- [CVE-2026-33027](https://cve.now/CVE-2026-33027.md): Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory (CVSS 6.9, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-33028](https://cve.now/CVE-2026-33028.md): Nginx UI: Race Condition Leads to Persistent Data Corruption and Service Collapse (CVSS 7.1, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI +1)
- [CVE-2026-33029](https://cve.now/CVE-2026-33029.md): Nginx UI: DoS via Negative Integer Input in Logrotate Interval (CVSS 6.9, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-33030](https://cve.now/CVE-2026-33030.md): Nginx UI: Unencrypted Storage of DNS API Tokens and ACME Private Keys (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/nginx-ui)
- [CVE-2026-33032](https://cve.now/CVE-2026-33032.md): Nginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx Takeover (CVSS 9.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-4046](https://cve.now/CVE-2026-4046.md): iconv crash due to assertion failure with untrusted input (CVSS 7.5, The GNU C Library glibc)
- [CVE-2025-66215](https://cve.now/CVE-2025-66215.md): OpenSC: Stack-buffer-overflow WRITE in card-oberthur (CVSS 3.8, OpenSC)
- [CVE-2025-66038](https://cve.now/CVE-2025-66038.md): OpenSC: \`sc\_compacttlv\_find\_tag\` can return out-of-bounds pointers (CVSS 3.9, OpenSC)
- [CVE-2025-66037](https://cve.now/CVE-2025-66037.md): OpenSC: Out of Bounds vulnerability (CVSS 3.9, OpenSC)
- [CVE-2026-5125](https://cve.now/CVE-2026-5125.md): raine consult-llm-mcp server.ts child\_process.execSync os command injection (CVSS 4.8, raine consult-llm-mcp)
- [CVE-2025-49010](https://cve.now/CVE-2025-49010.md): OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE (CVSS 3.8, OpenSC)
- [CVE-2026-27508](https://cve.now/CVE-2026-27508.md): Smoothwall Express \< 3.1 Update 13 Reflected XSS in redirect.cgi via url Parameter (CVSS 5.1, Smoothwall Express)
- [CVE-2026-26352](https://cve.now/CVE-2026-26352.md): Smoothwall Express \< 3.1 Update 13 Stored XSS in vpnmain.cgi via VPN\_IP Parameter (CVSS 5.1, Smoothwall Express)
- [CVE-2026-5124](https://cve.now/CVE-2026-5124.md): osrg GoBGP BGP Header bgp.go BGPHeader.DecodeFromBytes access control (CVSS 6.3, osrg GoBGP)
- [CVE-2026-2285](https://cve.now/CVE-2026-2285.md): CVE-2026-2285 (CVSS 7.5, CrewAI)
- [CVE-2026-2286](https://cve.now/CVE-2026-2286.md): CVE-2026-2286 (CVSS 9.8, CrewAI)
- [CVE-2026-2287](https://cve.now/CVE-2026-2287.md): CVE-2026-2287 (CVSS 9.8, CrewAI)
- [CVE-2026-2275](https://cve.now/CVE-2026-2275.md): CVE-2026-2275 (CVSS 9.6, CrewAI)
- [CVE-2026-5170](https://cve.now/CVE-2026-5170.md): Users could trigger a crash of mongod primaries during promotion to sharded (CVSS 6.0, MongoDB Server)
- [CVE-2026-5123](https://cve.now/CVE-2026-5123.md): osrg GoBGP bgp.go DecodeFromBytes off-by-one (CVSS 6.3, osrg GoBGP)
- [CVE-2026-21712](https://cve.now/CVE-2026-21712.md): A flaw in Node.js URL processing causes an assertion failure in native code when \`url.format()\` is called with a malformed internationalized (CVSS 5.7, nodejs node)
- [CVE-2026-5165](https://cve.now/CVE-2026-5165.md): Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset (CVSS 6.7, Red Hat Enterprise Linux)
- [CVE-2026-5164](https://cve.now/CVE-2026-5164.md): Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request (CVSS 6.7, Red Hat Enterprise Linux)
- [CVE-2026-5122](https://cve.now/CVE-2026-5122.md): osrg GoBGP BGP OPEN Message bgp.go DecodeFromBytes access control (CVSS 6.3, osrg GoBGP)
- [CVE-2026-28528](https://cve.now/CVE-2026-28528.md): BlueKitchen BTstack \< 1.8.1 AVRCP Browsing Target GET\_FOLDER\_ITEMS Handler OOB Read / Undefined Behavior (CVSS 2.1, BlueKitchen BTstack)
- [CVE-2026-28527](https://cve.now/CVE-2026-28527.md): BlueKitchen BTstack \< 1.8.1 AVRCP Controller GET\_PLAYER\_APPLICATION\_SETTING\_\*\_TEXT Handlers OOB Read (CVSS 2.1, BlueKitchen BTstack)
- [CVE-2026-28526](https://cve.now/CVE-2026-28526.md): BlueKitchen BTstack \< 1.8.1 AVRCP Controller LIST\_PLAYER\_APPLICATION\_SETTING\_\* Handlers OOB Read (CVSS 2.1, BlueKitchen BTstack)
- [CVE-2026-3321](https://cve.now/CVE-2026-3321.md): Authorization Bypass in ON24 Q&A chat (CVSS 8.7, ON24 Q&A chat)
- [CVE-2026-4315](https://cve.now/CVE-2026-4315.md): WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI (CVSS 7.1, WatchGuard Fireware OS)
- [CVE-2026-4266](https://cve.now/CVE-2026-4266.md): WatchGuard Firebox Insecure Deserialization in Fireware Access Portal (CVSS 8.4, WatchGuard Fireware OS)
- [CVE-2019-25655](https://cve.now/CVE-2019-25655.md): Device Monitoring Studio 8.10.00.8925 Denial of Service (CVSS 6.9, hdd Device Monitoring Studio)
- [CVE-2019-25654](https://cve.now/CVE-2019-25654.md): Core FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow (CVSS 8.7, Coreftp Core FTP/SFTP Server)
- [CVE-2019-25653](https://cve.now/CVE-2019-25653.md): Navicat for Oracle 12.1.15 Password Field Denial of Service (CVSS 6.9, Navicat for Oracle)
- [CVE-2018-25235](https://cve.now/CVE-2018-25235.md): NetworkActiv Web Server 4.0 Username Field Buffer Overflow DoS (CVSS 6.9, NetworkActiv Web Server)
- [CVE-2018-25234](https://cve.now/CVE-2018-25234.md): SmartFTP Client 9.0.2615.0 Denial of Service via Host Field (CVSS 6.9, SmartFTP Client)
- [CVE-2018-25233](https://cve.now/CVE-2018-25233.md): WebDrive 18.00.5057 Denial of Service via Secure WebDAV (CVSS 6.9, WebDrive)
- [CVE-2018-25232](https://cve.now/CVE-2018-25232.md): Softros LAN Messenger 9.2 Denial of Service via Log Files Location (CVSS 6.8, Softros LAN Messenger)
- [CVE-2018-25231](https://cve.now/CVE-2018-25231.md): HeidiSQL 9.5.0.5196 Denial of Service via Preferences (CVSS 6.9, HeidiSQL)
- [CVE-2018-25230](https://cve.now/CVE-2018-25230.md): Free IP Switcher 3.1 Denial of Service via Computer Name (CVSS 6.8, Eusing Free IP Switcher)
- [CVE-2018-25229](https://cve.now/CVE-2018-25229.md): BulletProof FTP Server 2019.0.0.50 Denial of Service via SMTP (CVSS 6.8, Bpftpserver BulletProof FTP Server)
- [CVE-2018-25228](https://cve.now/CVE-2018-25228.md): NetSetMan 4.7.1 Workgroup Buffer Overflow Denial of Service (CVSS 6.9, NetSetMan)
- [CVE-2018-25227](https://cve.now/CVE-2018-25227.md): Valentina Studio 9.0.4 Denial of Service via Host Parameter (CVSS 6.9, Valentina-Db Valentina Studio)
- [CVE-2018-25226](https://cve.now/CVE-2018-25226.md): FTPShell Server 6.83 Denial of Service via Account Name (CVSS 6.9, FTPShell Server)
- [CVE-2026-1612](https://cve.now/CVE-2026-1612.md): Hard-coded AWS Key in AL-KO Robolinho Update Software (CVSS 6.9, AL-KO Robolinho Update Software)
- [CVE-2026-4416](https://cve.now/CVE-2026-4416.md): GIGABYTE｜Performance Library - Insecure Deserialization (CVSS 8.5, GIGABYTE Performance Library)
- [CVE-2026-5121](https://cve.now/CVE-2026-5121.md): Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing (CVSS 7.5, Red Hat Enterprise Linux 7 Extended Lifecycle Support ·… +8)
- [CVE-2026-25704](https://cve.now/CVE-2026-25704.md): Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData (CVSS 5.8, pop-os cosmic-greeter)
- [CVE-2026-4415](https://cve.now/CVE-2026-4415.md): GIGABYTE｜Gigabyte Control Center - Arbitrary File Write (CVSS 9.2, Gigabyte Control Center)
- [CVE-2025-3716](https://cve.now/CVE-2025-3716.md): User enumeration in ESET Protect (on-prem) (CVSS 5.3, ESET, spol. s.r.o ESET Protect)
- [CVE-2025-15379](https://cve.now/CVE-2025-15379.md): Command Injection in mlflow/mlflow (CVSS 10.0, mlflow/mlflow · mlflow)
- [CVE-2026-3945](https://cve.now/CVE-2026-3945.md): tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service (CVSS 7.5, tinyproxy)
- [CVE-2026-2328](https://cve.now/CVE-2026-2328.md): Backend Access Due to Insufficient Input Validation (CVSS 7.5, WAGO Device Sphere · WAGO Solution Builder)
- [CVE-2026-5119](https://cve.now/CVE-2026-5119.md): Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment (CVSS 5.9, Red Hat Enterprise Linux)
- [CVE-2026-5107](https://cve.now/CVE-2026-5107.md): FRRouting FRR EVPN Type-2 Route bgp\_evpn.c process\_type2\_route access control (CVSS 2.3, FRRouting FRR)
- [CVE-2026-5106](https://cve.now/CVE-2026-5106.md): code-projects Exam Form Submission update\_fst.php cross site scripting (CVSS 4.8, code-projects Exam Form Submission)
- [CVE-2026-5105](https://cve.now/CVE-2026-5105.md): Totolink A3300R Parameter cstecgi.cgi setVpnPassCfg command injection (CVSS 5.3, Totolink A3300R)
- [CVE-2026-5104](https://cve.now/CVE-2026-5104.md): Totolink A3300R cstecgi.cgi setStaticRoute command injection (CVSS 5.3, Totolink A3300R)
- [CVE-2026-3124](https://cve.now/CVE-2026-3124.md): Download Monitor \<= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order\_id' (CVSS 7.5, wpchill Download Monitor)
- [CVE-2025-15036](https://cve.now/CVE-2025-15036.md): Path Traversal Vulnerability in mlflow/mlflow (CVSS 9.6, mlflow/mlflow · mlflow)
- [CVE-2026-5103](https://cve.now/CVE-2026-5103.md): Totolink A3300R cstecgi.cgi setUPnPCfg command injection (CVSS 5.3, Totolink A3300R)
- [CVE-2025-7741](https://cve.now/CVE-2025-7741.md): Hardcoded Password Vulnerability have been found in CENTUM. (CVSS 2.1, Yokogawa Electric CENTUM VP)
- [CVE-2026-5102](https://cve.now/CVE-2026-5102.md): Totolink A3300R Parameter cstecgi.cgi setSmartQosCfg command injection (CVSS 5.3, Totolink A3300R)
- [CVE-2026-29597](https://cve.now/CVE-2026-29597.md): DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability. (CVSS 6.5)
- [CVE-2026-29872](https://cve.now/CVE-2026-29872.md): A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab82 (CVSS 8.2)
- [CVE-2026-29909](https://cve.now/CVE-2026-29909.md): MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. (CVSS 5.3)
- [CVE-2026-29924](https://cve.now/CVE-2026-29924.md): Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File (CVSS 7.6)
- [CVE-2026-29925](https://cve.now/CVE-2026-29925.md): Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php. (CVSS 7.7)
- [CVE-2026-29953](https://cve.now/CVE-2026-29953.md): SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column (CVSS 7.4)
- [CVE-2026-29954](https://cve.now/CVE-2026-29954.md): In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of (CVSS 7.6)
- [CVE-2026-30077](https://cve.now/CVE-2026-30077.md): OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. (CVSS 7.5)
- [CVE-2026-30082](https://cve.now/CVE-2026-30082.md): Multiple stored cross-site scripting (XSS) vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14. (CVSS 6.1)
- [CVE-2026-30305](https://cve.now/CVE-2026-30305.md): Syntx's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism co (CVSS 9.8)
- [CVE-2026-30306](https://cve.now/CVE-2026-30306.md): In its design for automatic terminal command execution, SakaDev offers two options: Execute safe commands and execute all commands. (CVSS 9.8)
- [CVE-2026-30307](https://cve.now/CVE-2026-30307.md): Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism (CVSS 9.8)
- [CVE-2026-30308](https://cve.now/CVE-2026-30308.md): In its design for automatic terminal command execution, HAI Build Code Generator offers two options: Execute safe commands and Execute all c (CVSS 9.8)
- [CVE-2026-30313](https://cve.now/CVE-2026-30313.md): DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechani (CVSS 9.8)
- [CVE-2026-30556](https://cve.now/CVE-2026-30556.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 6.1)
- [CVE-2026-30557](https://cve.now/CVE-2026-30557.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 6.1)
- [CVE-2026-30558](https://cve.now/CVE-2026-30558.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 6.1)
- [CVE-2026-30559](https://cve.now/CVE-2026-30559.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 6.1)
- [CVE-2026-30560](https://cve.now/CVE-2026-30560.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 6.1)
- [CVE-2026-30561](https://cve.now/CVE-2026-30561.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 6.1)
- [CVE-2026-30562](https://cve.now/CVE-2026-30562.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 9.3)
- [CVE-2026-30563](https://cve.now/CVE-2026-30563.md): A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 6.1)
- [CVE-2026-30564](https://cve.now/CVE-2026-30564.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 6.1)
- [CVE-2026-30565](https://cve.now/CVE-2026-30565.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 6.1)
- [CVE-2026-30566](https://cve.now/CVE-2026-30566.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. (CVSS 6.1)
- [CVE-2026-33373](https://cve.now/CVE-2026-33373.md): An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. (CVSS 8.8)
- [CVE-2026-33643](https://cve.now/CVE-2026-33643.md): SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/colu (CVSS 7.4)
- [CVE-2026-34472](https://cve.now/CVE-2026-34472.md): Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2\_TE and V6.0.10P3N3\_TE allows unauthenticated attac (CVSS 7.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-03-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.