CVEs published March 31, 2026
271 CVEs were published on March 31, 2026: 36 critical, 78 high.
- Published
- 271
- Critical
- 36
- High
- 78
- Medium
- 143
- Low
- 14
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 165
Most affected products
- InternationalColorConsortium iccDEV
- 20
- OpenClaw
- 20
- discourse
- 15
- WWBN AVideo · wwbn/avideo
- 13
- baserproject basercms · baserproject/basercms
- 9
- parse-community parse-server · parse-server
- 9
- PowerDNS DNSdist
- 7
- D-Link DNS-120 · D-Link DNR-202L +18
- 5
- siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- 5
- admidio · admidio/admidio
- 4
Critical 36
- CVE-2026-34449SiYuan: Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injectionsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-34448SiYuan: Stored XSS in Attribute View gallery/kanban cover rendering allows arbitrary command execution in the desktop clientsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-34406APTRS: Privilege Escalation via Mass Assignment of is_superuser in User Edit EndpointAPTRS
- CVE-2026-1579PX4 Autopilot Missing authentication for critical functionPX4 Autopilot
- CVE-2026-3356Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum MonitorAnritsu Remote Spectrum Monitor MS27100A · Anritsu Remot… +2
- CVE-2026-34361HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Thefthapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fhir.…
- CVE-2026-34243wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body`njzjz wenxian
- CVE-2026-34220MikroORM is vulnerable to SQL Injection via specially crafted objectmikro-orm · @mikro-orm/core
- CVE-2026-34532Parse Server: Cloud function validator bypass via prototype chain traversalparse-community parse-server · parse-server
- CVE-2026-0596Command Injection in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2026-33579OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair ApprovalOpenClaw
- CVE-2026-34202Zebra node crash — V5 transaction hash panic (P2P reachable)ZcashFoundation zebra · ZcashFoundation zebra-chain +2
- CVE-2026-34162FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theftlabring FastGPT
- CVE-2026-34156NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Nodenocobase · @nocobase/plugin-workflow-javascript
- CVE-2026-32917OpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCPOpenClaw
- CVE-2026-32916OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin ScopesOpenClaw
- CVE-2025-15618Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret keyMOCK Business::OnlinePayment::StoredTransaction
- CVE-2026-4317SQL inyection in Umami Software applicationUmami Software application Umami Software
- CVE-2026-3107Multiple vulnerabilities in TeampassTeampass
- CVE-2026-3106Multiple vulnerabilities in TeampassTeampass
- CVE-2026-32714SciTokens vulnerable to SQL Injection in KeyCachescitokens
- CVE-2026-3300Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation FieldWPEverest Everest Forms Pro
- CVE-2026-30877baserCMS: OS Command Injection in the baserCMS Update Functionalitybaserproject basercms · baserproject/basercms
- CVE-2026-30880baserCMS: OS command injection vulnerability in installerbaserproject basercms · baserproject/basercms
- CVE-2026-21861baserCMS: OS Command Injection Leading to Remote Code Execution (RCE)baserproject basercms · baserproject/basercms
- CVE-2026-30276An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via the
- CVE-2026-30278An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via
- CVE-2026-30281An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file import
- CVE-2026-30282An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical internal
- CVE-2026-30283An arbitrary file overwrite vulnerability in PEAKSEL D.O.O.
- CVE-2026-30285An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files vi
- CVE-2026-30286An arbitrary file overwrite vulnerability in Funambol, Inc.
- CVE-2026-30310In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands.
- CVE-2026-30311Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechan
- CVE-2026-30312DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechani
- CVE-2026-30314Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechan
High 78
- CVE-2026-34605SiYuan: Reflected XSS via SVG namespace prefix bypass in SanitizeSVG ( getDynamicIcon, unauthenticated )siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-34585SiYuan: Stored XSS in imported .sy.zip content leads to arbitrary command executionsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-34453SiYuan: Broken access control in /api/bookmark/getBookmark allows unauthenticated publish visitors to read password-protected bookmarked contentsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-5214D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflowD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2026-34731AVideo: Unauthenticated Live Stream Termination via RTMP Callback on_publish_done.phpWWBN AVideo · wwbn/avideo
- CVE-2026-34394AVideo: CSRF on Admin Plugin Configuration Enables Payment Credential HijackingWWBN AVideo · wwbn/avideo
- CVE-2026-34381Admidio: Unauthenticated Access to Role-Restricted documents via neutralized .htaccessadmidio · admidio/admidio
- CVE-2026-34367InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes FieldInvoiceShelf
- CVE-2026-5213D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflowD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2026-5212D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflowD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2026-34366InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes FieldInvoiceShelf
- CVE-2026-34365InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes FieldInvoiceShelf
- CVE-2026-34784Parse Server: Streaming file download bypasses afterFind file trigger authorizationparse-community parse-server · parse-server
- CVE-2026-34215Parse Server: Auth data exposed via verify password endpointparse-community parse-server · parse-server
- CVE-2026-34204MinIO is Vulnerable to SSE Metadata Injection via Replication Headersminio · github.com/minio/minio
- CVE-2026-5211D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflowD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2026-4800lodash vulnerable to Code Injection via `_.template` imports key nameslodash · lodash-es +2
- CVE-2026-2123Privilege escalation vulnerability in Operations AgentOpenText Operations Agent
- CVE-2026-5190AWS C Event Stream Streaming Decoder Stack Buffer Overflowaws-c-event-stream
- CVE-2026-32725SciTokens C++: Relative Path Traversal Vulnerabilityscitokens-cpp
- CVE-2026-32726SciTokens C++: Sibling-Path Authorization Bypassscitokens-cpp
- CVE-2026-34359HAPI FHIR: Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect in HAPI FHIR Corehapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +1
- CVE-2026-24165NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data.NVIDIA BioNeMo Framework
- CVE-2026-24164NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data.NVIDIA BioNeMo Framework
- CVE-2026-24154NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguNVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson…
- CVE-2026-24148NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initiaNVIDIA Jetson Xavier Series and Jetson Orin Series
- CVE-2026-5087PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurelyJJNAPIORK PAGI::Middleware::Session::Store::Cookie
- CVE-2026-34219libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflowrust-libp2p · libp2p-gossipsub
- CVE-2026-5204Tenda CH22 Parameter webtypelibrary formWebTypeLibrary stack-based overflowTenda CH22
- CVE-2026-34240jose vulnerable to untrusted JWK header key acceptance during signature verificationappsup-dart jose
- CVE-2026-34221MikroORM has Prototype Pollution in Utils.mergemikro-orm · @mikro-orm/core
- CVE-2026-34573Parse Server: GraphQL complexity validator exponential fragment traversal DoSparse-community parse-server · parse-server
- CVE-2026-34363Parse Server: LiveQuery protected field leak via shared mutable state across concurrent subscribersparse-community parse-server · parse-server
- CVE-2026-34214Trino: Iceberg REST catalog static and vended credentials are accessible via query JSONtrinodb trino · io.trino:trino-iceberg
- CVE-2026-34209mppx: Tempo has a session close voucher bypass vulnerability due to settled amount equalitywevm mppx · mppx
- CVE-2026-34503OpenClaw < 2026.3.28 - Incomplete WebSocket Session Termination on Device Removal and Token RevocationOpenClaw
- CVE-2026-33581OpenClaw < 2026.3.24 - Arbitrary File Read via mediaUrl and fileUrl ParametersOpenClaw
- CVE-2026-33577OpenClaw < 2026.3.28 - Insufficient Scope Validation in node.pair.approveOpenClaw
- CVE-2026-34377Zebra has a Consensus Failure due to Improper Verification of V5 TransactionsZcashFoundation zebra · ZcashFoundation zebra-consensus +2
- CVE-2026-34200Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Portnhost
- CVE-2026-20915Stored cross-site scripting in Pending Changes sidebarCheckmk
- CVE-2026-34172Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 EnvironmentGiskard-AI giskard-oss · giskard-agents
- CVE-2026-33276XSS in Unified Search via Unescaped Host/Service NamesCheckmk
- CVE-2026-34163Server-Side Request Forgery via MCP Tools Endpoint in FastGPTlabring FastGPT
- CVE-2026-34155RAUC: Improper Signing of Plain Bundles Exceeding 2 GiBrauc
- CVE-2026-3308CVE-2026-3308Artifex Software Inc. *PyMuPDF* MuPDF
- CVE-2025-14213Cato's Socket WebUI is vulnerable to OS Command InjectionCato Networks Socket
- CVE-2024-14031Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard libraryYVES Sereal::Encoder
- CVE-2024-14030Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard libraryYVES Sereal::Decoder
- CVE-2026-4267Query Monitor <= 3.20.3 - Reflected Cross-Site Scripting via Request URIjohnbillion Query Monitor · johnbillion/query-monitor
- CVE-2026-32982OpenClaw < 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error LogsOpenClaw
- CVE-2026-32976OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel CommandsOpenClaw
- CVE-2026-32971OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended CommandsOpenClaw
- CVE-2026-32920OpenClaw < 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace PluginsOpenClaw
- CVE-2026-4400Multiple vulnerabilities in 1millionbot Millie chatbot1millionbot Millie chat
- CVE-2026-4399Multiple vulnerabilities in 1millionbot Millie chatbot1millionbot Millie chat
- CVE-2025-10559Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes DELMIA Factory Resource Manager
- CVE-2025-10553Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes DELMIA Factory Resource Manager
- CVE-2025-10551Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes ENOVIA Collaborative Industry Innovator
- CVE-2026-5201Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imageRed Hat Enterprise Linux · Red Hat AI Inference Server
- CVE-2026-34070LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functionslangchain-ai langchain · langchain-core
- CVE-2026-34060Ruby LSP has arbitrary code execution through branch settingShopify ruby-lsp · Shopify.ruby-lsp +1
- CVE-2026-34054openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element)microsoft vcpkg
- CVE-2026-34042act: actions/cache server allows malicious cache injectionnektos act · github.com/nektos/act
- CVE-2026-34041act: Unrestricted set-env and add-path command processing enables environment injectionnektos act · github.com/nektos/act
- CVE-2026-34040Moby: AuthZ plugin bypass with oversized request bodymoby · github.com/moby/moby +2
- CVE-2026-32727SciTokens: Authorization Bypass via Path Traversal in Scope Validationscitokens
- CVE-2026-32716SciTokens: Authorization Bypass via Incorrect Scope Path Prefix Checkingscitokens
- CVE-2026-4020Gravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST APIRocketGenius Gravity SMTP
- CVE-2026-32734baserCMS: Multiple vulnerabilities in baserCMSbaserproject basercms · baserproject/basercms
- CVE-2026-30940baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCEbaserproject basercms · baserproject/basercms
- CVE-2025-32957baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE)baserproject basercms · baserproject/basercms
- CVE-2026-29870A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows arbitrary file writes via the checkpoi
- CVE-2026-30277An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical inte
- CVE-2026-30279An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows attackers to overwrite critical intern
- CVE-2026-30284An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the
- CVE-2026-30290An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files
- CVE-2026-30309InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism c
Medium, low and unrated 157
- CVE-2026-5240code-projects BloodBank Managing System admin_state.php cross site scriptingcode-projects BloodBank Managing System
- CVE-2026-5238itsourcecode Payroll Management System Parameter view_employee.php sql injectionitsourcecode Payroll Management System
- CVE-2026-4668Amelia <= 2.1.2 - Authenticated (Manager+) SQL Injection via 'sort' Parameterameliabooking Booking for Appointments and Events Calendar…
- CVE-2026-5237itsourcecode Payroll Management System Parameter manage_user.php sql injectionitsourcecode Payroll Management System
- CVE-2026-5236Axiomatic Bento4 DSI v1 Ap4Dac4Atom.cpp SkipBits heap-based overflowAxiomatic Bento4
- CVE-2026-2480WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max_width' Shortcode Attributegn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2026-34556iccDEV: HBO in icAnsiToUtf8()InternationalColorConsortium iccDEV
- CVE-2026-34555iccDEV: SBO in CIccTagFixedNum::GetValues()InternationalColorConsortium iccDEV
- CVE-2026-34554iccDEV: HBO in CIccApplyCmmSearch::costFunc()InternationalColorConsortium iccDEV
- CVE-2026-34553iccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe()InternationalColorConsortium iccDEV
- CVE-2026-34552iccDEV: UB at IccTagLut.cppInternationalColorConsortium iccDEV
- CVE-2026-5235Axiomatic Bento4 MP4 File Ap4Dac4Atom.cpp ReadCache heap-based overflowAxiomatic Bento4
- CVE-2026-34551iccDEV: NPD in CIccTagLut16::Write()InternationalColorConsortium iccDEV
- CVE-2026-34550iccDEV: UB at IccIO.cppInternationalColorConsortium iccDEV
- CVE-2026-34549iccDEV: UB at IccUtil.cppInternationalColorConsortium iccDEV
- CVE-2026-34548iccDEV: UB at IccUtilXml.cppInternationalColorConsortium iccDEV
- CVE-2026-34547iccDEV: UB at IccUtil.cppInternationalColorConsortium iccDEV
- CVE-2026-34546iccDEV: UB at TiffImg.hInternationalColorConsortium iccDEV
- CVE-2026-34542iccDEV: SBO in CIccCalculatorFunc::Apply()InternationalColorConsortium iccDEV
- CVE-2026-34541iccDEV: UB in CIccCombinedConnectionConditions::CIccCombinedConnectionConditions()InternationalColorConsortium iccDEV
- CVE-2026-34540iccDEV: HBO in icMemDump()InternationalColorConsortium iccDEV
- CVE-2026-34539iccDEV: HBO in CTiffImg::WriteLine()InternationalColorConsortium iccDEV
- CVE-2026-34537iccDEV: UB in CIccOpDefEnvVar::Exec()InternationalColorConsortium iccDEV
- CVE-2026-34536iccDEV: SO in SIccCalcOp::ArgsUsed()InternationalColorConsortium iccDEV
- CVE-2026-34535iccDEV: SEGV in CIccTagArray::Cleanup()InternationalColorConsortium iccDEV
- CVE-2026-34534iccDEV: HBO in CIccMpeSpectralMatrix::Describe()InternationalColorConsortium iccDEV
- CVE-2026-34533iccDEV: UB in CIccCalculatorFunc::ApplySequence()InternationalColorConsortium iccDEV
- CVE-2026-34451Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directoriesanthropics anthropic-sdk-typescript · @anthropic-ai/sdk
- CVE-2026-34450Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Toolanthropics anthropic-sdk-python · anthropic
- CVE-2026-34452Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escapeanthropics anthropic-sdk-python · anthropic
- CVE-2026-34442FreeScout: Host Header Injection Leading to External Resource Loading and Open Redirect in FreeScoutfreescout-help-desk freescout
- CVE-2026-34443FreeScout: SSRF protection bypass via broken CIDR check in checkIpByMask()freescout-help-desk freescout
- CVE-2026-34441cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Bodyyhirose cpp-httplib
- CVE-2026-34405Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributesnuxt-modules og-image · nuxt-og-image
- CVE-2026-34404Nuxt OG Image vulnerable to DoS via image generationnuxt-modules og-image · nuxt-og-image
- CVE-2026-5215D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access controlD-Link DNS-120 · D-Link DNR-202L +18
- CVE-2026-34401XML Notepad: XML External Entity (XXE) Injection via Unsafe XmlTextReader in XML Diff and Schema Loadingmicrosoft XmlNotepad
- CVE-2026-34400alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) APIalerta · alerta-server
- CVE-2026-34740AVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL() ValidationWWBN AVideo · wwbn/avideo
- CVE-2026-34739AVideo: Reflected XSS via Unescaped ip Parameter in User_Location testIP.phpWWBN AVideo · wwbn/avideo
- CVE-2026-34738AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request ParameterWWBN AVideo · wwbn/avideo
- CVE-2026-34737AVideo: Arbitrary Stripe Subscription Cancellation via Debug Endpoint and retrieveSubscriptions() BugWWBN AVideo · wwbn/avideo
- CVE-2026-34733AVideo: Unauthenticated File Deletion via PHP Operator Precedence Bug in CLI GuardWWBN AVideo · wwbn/avideo
- CVE-2026-34732AVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 EndpointsWWBN AVideo · wwbn/avideo
- CVE-2026-34716AVideo: DOM XSS via Unsanitized Display Name in WebSocket Call NotificationWWBN AVideo · wwbn/avideo
- CVE-2026-34613AVideo: CSRF on Plugin Enable/Disable Endpoint Allows Disabling Security PluginsWWBN AVideo · wwbn/avideo
- CVE-2026-34611AVideo: CSRF on emailAllUsers.json.php Enables Mass Phishing Email to All UsersWWBN AVideo · wwbn/avideo
- CVE-2026-34396AVideo: Stored XSS via Unescaped Plugin Configuration Values in Admin PanelWWBN AVideo · wwbn/avideo
- CVE-2026-34395AVideo: Mass User PII Disclosure via Missing Authorization in YPTWallet users.json.phpWWBN AVideo · wwbn/avideo
- CVE-2026-34384Admidio: Missing CSRF Protection on Registration Approval Actionsadmidio · admidio/admidio
- CVE-2026-34383Admidio: CSRF and Form Validation Bypass in Inventory Item Save via `imported` Parameteradmidio · admidio/admidio
- CVE-2026-34382Admidio: Missing CSRF Protection on Custom List Deletion in mylist_function.phpadmidio · admidio/admidio
- CVE-2026-34586PdfDing: Shared PDF Expiration, Max Views, and Deletion Bypass via Serve/Download Endpointsmrmn2 PdfDing
- CVE-2026-3470A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowiSonicWall Email Security
- CVE-2026-34372Sulu checks fix permissions for subentities endpointssulu · sulu/sulu
- CVE-2026-3469A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remoteSonicWall Email Security
- CVE-2026-3468A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralizatiSonicWall Email Security
- CVE-2026-34206Captcha Protect: Reflected XSS in challenge page via unsanitized destination rendered with text/templatelibops captcha-protect
- CVE-2026-34203Nautobot: Management of users via REST API does not apply configured password validatorsnautobot
- CVE-2026-2950lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`lodash · lodash-es +3
- CVE-2026-5210SourceCodester Leave Application System file inclusionSourceCodester Leave Application System
- CVE-2026-5209SourceCodester Leave Application System User Management cross site scriptingSourceCodester Leave Application System
- CVE-2025-62184Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.Pegasystems Pega Infinity
- CVE-2026-33415Discourse: Improper Access Control in discourse-ai Allows Unauthorized Category Content Exposurediscourse
- CVE-2026-33300Discourse: Hidden group names and access metadata are exposed to moderators through the `category-chatables` endpointdiscourse
- CVE-2026-33185Discourse: Group SMTP test endpoint susceptible to SSRFdiscourse
- CVE-2026-33074Discourse: Vulnerability in discourse-subscriptions plugin allowing users to self-grant to higher tier subscriptionsdiscourse
- CVE-2026-32951Discourse: Authorization bypass in oneboxer via user-controlled category iddiscourse
- CVE-2026-32620Discourse: Missing post-level authorization allows whisper metadata disclosurediscourse
- CVE-2026-32619Discourse: Insufficient topic visibility check allows unauthorized poll manipulation in private categoriesdiscourse
- CVE-2026-32618Discourse: Unauthorized channel membership inference via excluded_memberships_channel_iddiscourse
- CVE-2026-32615Discourse: Category group moderators can perform actions on topics in restricted categories without read accessdiscourse
- CVE-2026-32607Discourse: Stored XSS via unescaped assignee namediscourse
- CVE-2026-32273Discourse: XSS on category description update via APIdiscourse
- CVE-2026-32243Discourse: Stored XSS in discourse-ai shared conversations oneboxdiscourse
- CVE-2026-32113Discourse: Open redirect via `sso_destination_url` cookie in `enter`discourse
- CVE-2026-32143Discourse: Admin-only report can be exported by moderatorsdiscourse
- CVE-2026-33073discourse-subscriptions plugin leaking stripe API key in multisite environmentdiscourse
- CVE-2026-5206code-projects Simple Gym Management System Payment sql injectioncode-projects Simple Gym Management System
- CVE-2026-34360HAPI FHIR: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probinghapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fhir.…
- CVE-2026-5205chatwoot Webhook API trigger.rb Trigger server-side request forgerychatwoot
- CVE-2026-24153NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled.NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson…
- CVE-2026-5203CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversalCMS Made Simple
- CVE-2026-34237MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)modelcontextprotocol java-sdk · io.modelcontextprotocol.sdk…
- CVE-2026-34235PJSIP: Heap OOB read in VPX unpacketizerpjsip pjproject
- CVE-2026-34231Slippers: Cross-Site Scripting (XSS) in `attrs` Template Tagmixxorz slippers · slippers
- CVE-2026-22561Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilAnthropic Claude Desktop - Windows
- CVE-2026-34227Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP InterfaceBishopFox sliver · github.com/bishopfox/sliver
- CVE-2026-34218ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modificationcraigjbass clearancekit
- CVE-2026-34595Parse Server: LiveQuery protected-field guard bypass via array-like logical operator valueparse-community parse-server · parse-server
- CVE-2026-34574Parse Server: Session field immutability bypass via falsy-value guardparse-community parse-server · parse-server
- CVE-2026-4819Search Guard audit logs can contain under certain conditions user credentialsfloragunn Search Guard FLX
- CVE-2026-22569Incorrect startup configuration in ZCCZscaler Client Connector
- CVE-2026-4818Some management operations on data streams are not properly restricted when user does not have the necessary privilegesfloragunn Search Guard FLX
- CVE-2026-4799Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requestsfloragunn Search Guard FLX
- CVE-2026-34373Parse Server: GraphQL API endpoint ignores CORS origin restrictionparse-community parse-server · parse-server
- CVE-2026-34224Parse Server: MFA single-use token bypass via concurrent authData login requestsparse-community parse-server · parse-server
- CVE-2026-34504OpenClaw < 2026.3.28 - Server-Side Request Forgery via Unguarded Image Download in fal ProviderOpenClaw
- CVE-2026-33580OpenClaw < 2026.3.28 - Brute Force Attack via Missing Rate Limiting on Webhook Shared Secret AuthenticationOpenClaw
- CVE-2026-33578OpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser ExtensionsOpenClaw
- CVE-2026-33576OpenClaw < 2026.3.28 - Unauthorized Media Download via Zalo ChannelOpenClaw
- CVE-2026-34210mppx has Stripe charge credential replay via missing idempotency checkwevm mppx · mppx
- CVE-2026-33762go-git: Missing validation decoding Index v4 files leads to panicgo-git · github.com/go-git/go-git/v5 +2
- CVE-2026-34165go-git: Maliciously crafted idx file can cause asymmetric memory consumptiongo-git · github.com/go-git/go-git +2
- CVE-2026-27854Use after free when parsing EDNS options in LuaPowerDNS DNSdist
- CVE-2026-27853Out-of-bounds write when rewriting large DNS packetsPowerDNS DNSdist
- CVE-2026-24030Unbounded memory allocation for DoQ and DoH3PowerDNS DNSdist
- CVE-2026-24029DNS over HTTPS ACL bypassPowerDNS DNSdist
- CVE-2026-24028Out-of-bounds read when parsing DNS packets via LuaPowerDNS DNSdist
- CVE-2026-0397Information disclosure via CORS misconfigurationPowerDNS DNSdist
- CVE-2026-0396HTML injection in the web dashboardPowerDNS DNSdist
- CVE-2026-3191Minify HTML <= 2.1.12 - Cross-Site Request Forgery to Plugin Settings Updateteckel Minify HTML
- CVE-2026-3139User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Fieldcozmoslabs User Profile Builder – Beautiful User Registrati…
- CVE-2026-34506OpenClaw < 2026.3.8 - Sender Allowlist Bypass in Microsoft Teams Plugin via Route Allowlist ConfigurationOpenClaw
- CVE-2026-34505OpenClaw < 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret ValidationOpenClaw
- CVE-2026-32988OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File CreationOpenClaw
- CVE-2026-32977OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit PathOpenClaw
- CVE-2026-32970OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefsOpenClaw
- CVE-2026-32921OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.runOpenClaw
- CVE-2026-5198code-projects Student Membership System Admin Login index.php sql injectioncode-projects Student Membership System
- CVE-2026-34887WordPress Kubio AI Page Builder plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerabilityExtend Themes Kubio AI Page Builder
- CVE-2026-5197code-projects Student Membership System delete_user.php sql injectioncode-projects Student Membership System
- CVE-2026-5196code-projects Student Membership System delete_member.php sql injectioncode-projects Student Membership System
- CVE-2025-41357Reflected Cross-Site Scripting on Anon Proxy ServerAnon Proxy Server
- CVE-2025-41356Reflected Cross-Site Scripting in Anon Proxy ServerAnon Proxy Server
- CVE-2025-41355Reflected Cross-Site Scripting on Anon Proxy ServerAnon Proxy Server
- CVE-2026-5195code-projects Student Membership System User Registration sql injectioncode-projects Student Membership System
- CVE-2026-5186Nothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double freeNothings stb
- CVE-2026-5185Nothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflowNothings stb_image
- CVE-2026-5184TRENDnet TEW-713RE setSysAdm command injectionTRENDnet TEW-713RE
- CVE-2026-3881Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRFPerformance Monitor
- CVE-2026-5183TRENDnet TEW-713RE addRouting sub_421494 command injectionTRENDnet TEW-713RE
- CVE-2026-5182SourceCodester Teacher Record System Parameter sql injectionSourceCodester Teacher Record System
- CVE-2026-34881OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF).OpenStack Glance · glance
- CVE-2026-1877Auto Post Scheduler <= 1.84 - Cross-Site Request Forgery to Stored Cross-Site Scripting via aps_options_pagejohnh10 Auto Post Scheduler
- CVE-2026-1834Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodevowelweb Ibtana – WordPress Website Builder
- CVE-2026-5181SourceCodester Simple Doctors Appointment System ajax.php unrestricted uploadSourceCodester Simple Doctors Appointment System
- CVE-2026-4146Loco Translate <= 2.8.2 - Reflected Cross-Site Scripting via 'update_href' Parametertimwhitlock Loco Translate
- CVE-2026-1710WooPayments <= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save_upe_appearance_ajaxWooPayments: Integrated WooCommerce Payments
- CVE-2026-1797Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Filesthemetechmount TrueBooker – Appointment Booking and Schedul…
- CVE-2026-5180SourceCodester Simple Doctors Appointment System ajax.php sql injectionSourceCodester Simple Doctors Appointment System
- CVE-2026-5179SourceCodester Simple Doctors Appointment System login.php sql injectionSourceCodester Simple Doctors Appointment System
- CVE-2026-5178Totolink A3300R cstecgi.cgi setIptvCfg command injectionTotolink A3300R
- CVE-2026-34073cryptography has incomplete DNS name constraint enforcement on peer namespyca cryptography · cryptography
- CVE-2026-5177Totolink A3300R cstecgi.cgi setWiFiBasicCfg command injectionTotolink A3300R
- CVE-2026-34043Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objectsyahoo serialize-javascript · serialize-javascript
- CVE-2026-34036Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.phpdolibarr · dolibarr/dolibarr
- CVE-2026-33997Moby: Off-by-one error in plugin privilege validationmoby · github.com/docker/docker +2
- CVE-2026-5176Totolink A3300R cstecgi.cgi setSyslogCfg command injectionTotolink A3300R
- CVE-2026-5115Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devicesPapercut NG/MF
- CVE-2026-30879baserCMS: Cross-site scripting vulnerability in blog postbaserproject basercms · baserproject/basercms
- CVE-2026-30878baserCMS: Mail Form Acceptance Bypass via Public APIbaserproject basercms · baserproject/basercms
- CVE-2026-27697baserCMS: SQL injection vulnerability in blog postbaserproject basercms · baserproject/basercms
- CVE-2026-4794Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MFPaperCut NG/MF
- CVE-2026-30280An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to ov
- CVE-2026-30520A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0.
- CVE-2026-30521A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation.