# CVEs published 2026-03-31

271 CVEs were published on March 31, 2026: 36 critical, 78 high. Days are UTC.

- [CVE-2026-5240](https://cve.now/CVE-2026-5240.md): code-projects BloodBank Managing System admin\_state.php cross site scripting (CVSS 5.3, code-projects BloodBank Managing System)
- [CVE-2026-5238](https://cve.now/CVE-2026-5238.md): itsourcecode Payroll Management System Parameter view\_employee.php sql injection (CVSS 6.9, itsourcecode Payroll Management System)
- [CVE-2026-4668](https://cve.now/CVE-2026-4668.md): Amelia \<= 2.1.2 - Authenticated (Manager+) SQL Injection via 'sort' Parameter (CVSS 6.5, ameliabooking Booking for Appointments and Events Calendar…)
- [CVE-2026-5237](https://cve.now/CVE-2026-5237.md): itsourcecode Payroll Management System Parameter manage\_user.php sql injection (CVSS 6.9, itsourcecode Payroll Management System)
- [CVE-2026-5236](https://cve.now/CVE-2026-5236.md): Axiomatic Bento4 DSI v1 Ap4Dac4Atom.cpp SkipBits heap-based overflow (CVSS 4.8, Axiomatic Bento4)
- [CVE-2026-2480](https://cve.now/CVE-2026-2480.md): WP Shortcodes Plugin — Shortcodes Ultimate \<= 7.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max\_width' Shortcode Attribute (CVSS 6.4, gn\_themes WP Shortcodes Plugin — Shortcodes Ultimate)
- [CVE-2026-34556](https://cve.now/CVE-2026-34556.md): iccDEV: HBO in icAnsiToUtf8() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34555](https://cve.now/CVE-2026-34555.md): iccDEV: SBO in CIccTagFixedNum::GetValues() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34554](https://cve.now/CVE-2026-34554.md): iccDEV: HBO in CIccApplyCmmSearch::costFunc() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34553](https://cve.now/CVE-2026-34553.md): iccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe() (CVSS 4.0, InternationalColorConsortium iccDEV)
- [CVE-2026-34552](https://cve.now/CVE-2026-34552.md): iccDEV: UB at IccTagLut.cpp (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-5235](https://cve.now/CVE-2026-5235.md): Axiomatic Bento4 MP4 File Ap4Dac4Atom.cpp ReadCache heap-based overflow (CVSS 4.8, Axiomatic Bento4)
- [CVE-2026-34551](https://cve.now/CVE-2026-34551.md): iccDEV: NPD in CIccTagLut16::Write() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34550](https://cve.now/CVE-2026-34550.md): iccDEV: UB at IccIO.cpp (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34549](https://cve.now/CVE-2026-34549.md): iccDEV: UB at IccUtil.cpp (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34548](https://cve.now/CVE-2026-34548.md): iccDEV: UB at IccUtilXml.cpp (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34547](https://cve.now/CVE-2026-34547.md): iccDEV: UB at IccUtil.cpp (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34546](https://cve.now/CVE-2026-34546.md): iccDEV: UB at TiffImg.h (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34542](https://cve.now/CVE-2026-34542.md): iccDEV: SBO in CIccCalculatorFunc::Apply() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34541](https://cve.now/CVE-2026-34541.md): iccDEV: UB in CIccCombinedConnectionConditions::CIccCombinedConnectionConditions() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34540](https://cve.now/CVE-2026-34540.md): iccDEV: HBO in icMemDump() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34539](https://cve.now/CVE-2026-34539.md): iccDEV: HBO in CTiffImg::WriteLine() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34537](https://cve.now/CVE-2026-34537.md): iccDEV: UB in CIccOpDefEnvVar::Exec() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34536](https://cve.now/CVE-2026-34536.md): iccDEV: SO in SIccCalcOp::ArgsUsed() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34535](https://cve.now/CVE-2026-34535.md): iccDEV: SEGV in CIccTagArray::Cleanup() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34534](https://cve.now/CVE-2026-34534.md): iccDEV: HBO in CIccMpeSpectralMatrix::Describe() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34533](https://cve.now/CVE-2026-34533.md): iccDEV: UB in CIccCalculatorFunc::ApplySequence() (CVSS 6.2, InternationalColorConsortium iccDEV)
- [CVE-2026-34605](https://cve.now/CVE-2026-34605.md): SiYuan: Reflected XSS via SVG namespace prefix bypass in SanitizeSVG ( getDynamicIcon, unauthenticated ) (CVSS 8.6, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-34585](https://cve.now/CVE-2026-34585.md): SiYuan: Stored XSS in imported .sy.zip content leads to arbitrary command execution (CVSS 8.6, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-34449](https://cve.now/CVE-2026-34449.md): SiYuan: Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injection (CVSS 9.7, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-34448](https://cve.now/CVE-2026-34448.md): SiYuan: Stored XSS in Attribute View gallery/kanban cover rendering allows arbitrary command execution in the desktop client (CVSS 9.1, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-34453](https://cve.now/CVE-2026-34453.md): SiYuan: Broken access control in /api/bookmark/getBookmark allows unauthenticated publish visitors to read password-protected bookmarked content (CVSS 7.5, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-34451](https://cve.now/CVE-2026-34451.md): Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories (CVSS 6.3, anthropics anthropic-sdk-typescript · @anthropic-ai/sdk)
- [CVE-2026-34450](https://cve.now/CVE-2026-34450.md): Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool (CVSS 4.8, anthropics anthropic-sdk-python · anthropic)
- [CVE-2026-34452](https://cve.now/CVE-2026-34452.md): Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape (CVSS 5.8, anthropics anthropic-sdk-python · anthropic)
- [CVE-2026-34442](https://cve.now/CVE-2026-34442.md): FreeScout: Host Header Injection Leading to External Resource Loading and Open Redirect in FreeScout (CVSS 5.4, freescout-help-desk freescout)
- [CVE-2026-34443](https://cve.now/CVE-2026-34443.md): FreeScout: SSRF protection bypass via broken CIDR check in checkIpByMask() (CVSS 6.9, freescout-help-desk freescout)
- [CVE-2026-34441](https://cve.now/CVE-2026-34441.md): cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body (CVSS 4.8, yhirose cpp-httplib)
- [CVE-2026-34406](https://cve.now/CVE-2026-34406.md): APTRS: Privilege Escalation via Mass Assignment of is\_superuser in User Edit Endpoint (CVSS 9.4, APTRS)
- [CVE-2026-34405](https://cve.now/CVE-2026-34405.md): Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes (CVSS 6.1, nuxt-modules og-image · nuxt-og-image)
- [CVE-2026-34404](https://cve.now/CVE-2026-34404.md): Nuxt OG Image vulnerable to DoS via image generation (CVSS 6.9, nuxt-modules og-image · nuxt-og-image)
- [CVE-2026-5215](https://cve.now/CVE-2026-5215.md): D-Link DNS-1550-04 network\_mgr.cgi cgi\_get\_ipv6 access control (CVSS 5.3, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-5214](https://cve.now/CVE-2026-5214.md): D-Link DNS-1550-04 account\_mgr.cgi cgi\_addgroup\_get\_group\_quota\_minsize stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-34401](https://cve.now/CVE-2026-34401.md): XML Notepad: XML External Entity (XXE) Injection via Unsafe XmlTextReader in XML Diff and Schema Loading (CVSS 6.5, microsoft XmlNotepad)
- [CVE-2026-34400](https://cve.now/CVE-2026-34400.md): alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API (CVSS 6.9, alerta · alerta-server)
- [CVE-2026-34740](https://cve.now/CVE-2026-34740.md): AVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL() Validation (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34739](https://cve.now/CVE-2026-34739.md): AVideo: Reflected XSS via Unescaped ip Parameter in User\_Location testIP.php (CVSS 6.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34738](https://cve.now/CVE-2026-34738.md): AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request Parameter (CVSS 4.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34737](https://cve.now/CVE-2026-34737.md): AVideo: Arbitrary Stripe Subscription Cancellation via Debug Endpoint and retrieveSubscriptions() Bug (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34733](https://cve.now/CVE-2026-34733.md): AVideo: Unauthenticated File Deletion via PHP Operator Precedence Bug in CLI Guard (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34732](https://cve.now/CVE-2026-34732.md): AVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 Endpoints (CVSS 5.3, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34731](https://cve.now/CVE-2026-34731.md): AVideo: Unauthenticated Live Stream Termination via RTMP Callback on\_publish\_done.php (CVSS 7.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34716](https://cve.now/CVE-2026-34716.md): AVideo: DOM XSS via Unsanitized Display Name in WebSocket Call Notification (CVSS 6.4, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34613](https://cve.now/CVE-2026-34613.md): AVideo: CSRF on Plugin Enable/Disable Endpoint Allows Disabling Security Plugins (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34611](https://cve.now/CVE-2026-34611.md): AVideo: CSRF on emailAllUsers.json.php Enables Mass Phishing Email to All Users (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34396](https://cve.now/CVE-2026-34396.md): AVideo: Stored XSS via Unescaped Plugin Configuration Values in Admin Panel (CVSS 6.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34394](https://cve.now/CVE-2026-34394.md): AVideo: CSRF on Admin Plugin Configuration Enables Payment Credential Hijacking (CVSS 8.1, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34395](https://cve.now/CVE-2026-34395.md): AVideo: Mass User PII Disclosure via Missing Authorization in YPTWallet users.json.php (CVSS 6.5, WWBN AVideo · wwbn/avideo)
- [CVE-2026-34384](https://cve.now/CVE-2026-34384.md): Admidio: Missing CSRF Protection on Registration Approval Actions (CVSS 4.5, admidio · admidio/admidio)
- [CVE-2026-34383](https://cve.now/CVE-2026-34383.md): Admidio: CSRF and Form Validation Bypass in Inventory Item Save via \`imported\` Parameter (CVSS 4.3, admidio · admidio/admidio)
- [CVE-2026-34382](https://cve.now/CVE-2026-34382.md): Admidio: Missing CSRF Protection on Custom List Deletion in mylist\_function.php (CVSS 4.6, admidio · admidio/admidio)
- [CVE-2026-34381](https://cve.now/CVE-2026-34381.md): Admidio: Unauthenticated Access to Role-Restricted documents via neutralized .htaccess (CVSS 7.5, admidio · admidio/admidio)
- [CVE-2026-34586](https://cve.now/CVE-2026-34586.md): PdfDing: Shared PDF Expiration, Max Views, and Deletion Bypass via Serve/Download Endpoints (CVSS 6.5, mrmn2 PdfDing)
- [CVE-2026-1579](https://cve.now/CVE-2026-1579.md): PX4 Autopilot Missing authentication for critical function (CVSS 9.3, PX4 Autopilot)
- [CVE-2026-3470](https://cve.now/CVE-2026-3470.md): A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowi (CVSS 3.8, SonicWall Email Security)
- [CVE-2026-34372](https://cve.now/CVE-2026-34372.md): Sulu checks fix permissions for subentities endpoints (CVSS 5.3, sulu · sulu/sulu)
- [CVE-2026-3469](https://cve.now/CVE-2026-3469.md): A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote (CVSS 2.7, SonicWall Email Security)
- [CVE-2026-3468](https://cve.now/CVE-2026-3468.md): A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralizati (CVSS 4.8, SonicWall Email Security)
- [CVE-2026-34367](https://cve.now/CVE-2026-34367.md): InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Field (CVSS 7.6, InvoiceShelf)
- [CVE-2026-5213](https://cve.now/CVE-2026-5213.md): D-Link DNS-1550-04 account\_mgr.cgi cgi\_adduser\_to\_session stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-5212](https://cve.now/CVE-2026-5212.md): D-Link DNS-1550-04 webdav\_mgr.cgi Webdav\_Upload\_File stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-34366](https://cve.now/CVE-2026-34366.md): InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes Field (CVSS 7.6, InvoiceShelf)
- [CVE-2026-34365](https://cve.now/CVE-2026-34365.md): InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes Field (CVSS 7.6, InvoiceShelf)
- [CVE-2026-34784](https://cve.now/CVE-2026-34784.md): Parse Server: Streaming file download bypasses afterFind file trigger authorization (CVSS 8.2, parse-community parse-server · parse-server)
- [CVE-2026-34215](https://cve.now/CVE-2026-34215.md): Parse Server: Auth data exposed via verify password endpoint (CVSS 8.2, parse-community parse-server · parse-server)
- [CVE-2026-34206](https://cve.now/CVE-2026-34206.md): Captcha Protect: Reflected XSS in challenge page via unsanitized destination rendered with text/template (CVSS 6.1, libops captcha-protect)
- [CVE-2026-34204](https://cve.now/CVE-2026-34204.md): MinIO is Vulnerable to SSE Metadata Injection via Replication Headers (CVSS 7.1, minio · github.com/minio/minio)
- [CVE-2026-5211](https://cve.now/CVE-2026-5211.md): D-Link DNS-1550-04 app\_mgr.cgi UPnP\_AV\_Server\_Path\_Del stack-based overflow (CVSS 8.7, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-34203](https://cve.now/CVE-2026-34203.md): Nautobot: Management of users via REST API does not apply configured password validators (CVSS 2.7, nautobot)
- [CVE-2026-4800](https://cve.now/CVE-2026-4800.md): lodash vulnerable to Code Injection via \`\_.template\` imports key names (CVSS 8.1, lodash · lodash-es +2)
- [CVE-2026-2950](https://cve.now/CVE-2026-2950.md): lodash vulnerable to Prototype Pollution via array path bypass in \`\_.unset\` and \`\_.omit\` (CVSS 6.5, lodash · lodash-es +3)
- [CVE-2026-3356](https://cve.now/CVE-2026-3356.md): Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor (CVSS 9.3, Anritsu Remote Spectrum Monitor MS27100A · Anritsu Remot… +2)
- [CVE-2026-5210](https://cve.now/CVE-2026-5210.md): SourceCodester Leave Application System file inclusion (CVSS 6.9, SourceCodester Leave Application System)
- [CVE-2026-5209](https://cve.now/CVE-2026-5209.md): SourceCodester Leave Application System User Management cross site scripting (CVSS 4.8, SourceCodester Leave Application System)
- [CVE-2025-62184](https://cve.now/CVE-2025-62184.md): Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. (CVSS 4.8, Pegasystems Pega Infinity)
- [CVE-2026-33415](https://cve.now/CVE-2026-33415.md): Discourse: Improper Access Control in discourse-ai Allows Unauthorized Category Content Exposure (CVSS 5.1, discourse)
- [CVE-2026-33300](https://cve.now/CVE-2026-33300.md): Discourse: Hidden group names and access metadata are exposed to moderators through the \`category-chatables\` endpoint (CVSS 5.3, discourse)
- [CVE-2026-33185](https://cve.now/CVE-2026-33185.md): Discourse: Group SMTP test endpoint susceptible to SSRF (CVSS 5.3, discourse)
- [CVE-2026-33074](https://cve.now/CVE-2026-33074.md): Discourse: Vulnerability in discourse-subscriptions plugin allowing users to self-grant to higher tier subscriptions (CVSS 6.3, discourse)
- [CVE-2026-32951](https://cve.now/CVE-2026-32951.md): Discourse: Authorization bypass in oneboxer via user-controlled category id (CVSS 4.3, discourse)
- [CVE-2026-32620](https://cve.now/CVE-2026-32620.md): Discourse: Missing post-level authorization allows whisper metadata disclosure (CVSS 5.3, discourse)
- [CVE-2026-32619](https://cve.now/CVE-2026-32619.md): Discourse: Insufficient topic visibility check allows unauthorized poll manipulation in private categories (CVSS 6.3, discourse)
- [CVE-2026-32618](https://cve.now/CVE-2026-32618.md): Discourse: Unauthorized channel membership inference via excluded\_memberships\_channel\_id (CVSS 4.3, discourse)
- [CVE-2026-32615](https://cve.now/CVE-2026-32615.md): Discourse: Category group moderators can perform actions on topics in restricted categories without read access (CVSS 5.3, discourse)
- [CVE-2026-32607](https://cve.now/CVE-2026-32607.md): Discourse: Stored XSS via unescaped assignee name (CVSS 2.1, discourse)
- [CVE-2026-32273](https://cve.now/CVE-2026-32273.md): Discourse: XSS on category description update via API (CVSS 5.4, discourse)
- [CVE-2026-32243](https://cve.now/CVE-2026-32243.md): Discourse: Stored XSS in discourse-ai shared conversations onebox (CVSS 5.3, discourse)
- [CVE-2026-32113](https://cve.now/CVE-2026-32113.md): Discourse: Open redirect via \`sso\_destination\_url\` cookie in \`enter\` (CVSS 5.1, discourse)
- [CVE-2026-32143](https://cve.now/CVE-2026-32143.md): Discourse: Admin-only report can be exported by moderators (CVSS 5.3, discourse)
- [CVE-2026-33073](https://cve.now/CVE-2026-33073.md): discourse-subscriptions plugin leaking stripe API key in multisite environment (CVSS 2.0, discourse)
- [CVE-2026-5206](https://cve.now/CVE-2026-5206.md): code-projects Simple Gym Management System Payment sql injection (CVSS 5.3, code-projects Simple Gym Management System)
- [CVE-2026-2123](https://cve.now/CVE-2026-2123.md): Privilege escalation vulnerability in Operations Agent (CVSS 8.6, OpenText Operations Agent)
- [CVE-2026-5190](https://cve.now/CVE-2026-5190.md): AWS C Event Stream Streaming Decoder Stack Buffer Overflow (CVSS 7.5, aws-c-event-stream)
- [CVE-2026-32725](https://cve.now/CVE-2026-32725.md): SciTokens C++: Relative Path Traversal Vulnerability (CVSS 8.3, scitokens-cpp)
- [CVE-2026-32726](https://cve.now/CVE-2026-32726.md): SciTokens C++: Sibling-Path Authorization Bypass (CVSS 8.1, scitokens-cpp)
- [CVE-2026-34361](https://cve.now/CVE-2026-34361.md): HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft (CVSS 9.3, hapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fhir.…)
- [CVE-2026-34360](https://cve.now/CVE-2026-34360.md): HAPI FHIR: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probing (CVSS 5.8, hapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fhir.…)
- [CVE-2026-34359](https://cve.now/CVE-2026-34359.md): HAPI FHIR: Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect in HAPI FHIR Core (CVSS 7.4, hapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +1)
- [CVE-2026-5205](https://cve.now/CVE-2026-5205.md): chatwoot Webhook API trigger.rb Trigger server-side request forgery (CVSS 5.3, chatwoot)
- [CVE-2026-24165](https://cve.now/CVE-2026-24165.md): NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. (CVSS 7.8, NVIDIA BioNeMo Framework)
- [CVE-2026-24164](https://cve.now/CVE-2026-24164.md): NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. (CVSS 8.8, NVIDIA BioNeMo Framework)
- [CVE-2026-24154](https://cve.now/CVE-2026-24154.md): NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line argu (CVSS 7.6, NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson…)
- [CVE-2026-24153](https://cve.now/CVE-2026-24153.md): NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. (CVSS 5.2, NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson…)
- [CVE-2026-24148](https://cve.now/CVE-2026-24148.md): NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initia (CVSS 8.3, NVIDIA Jetson Xavier Series and Jetson Orin Series)
- [CVE-2026-5087](https://cve.now/CVE-2026-5087.md): PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely (CVSS 7.5, JJNAPIORK PAGI::Middleware::Session::Store::Cookie)
- [CVE-2026-34243](https://cve.now/CVE-2026-34243.md): wenxian: Command Injection in GitHub Actions Workflow via \`issue\_comment.body\` (CVSS 9.8, njzjz wenxian)
- [CVE-2026-34219](https://cve.now/CVE-2026-34219.md): libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow (CVSS 8.2, rust-libp2p · libp2p-gossipsub)
- [CVE-2026-5204](https://cve.now/CVE-2026-5204.md): Tenda CH22 Parameter webtypelibrary formWebTypeLibrary stack-based overflow (CVSS 8.7, Tenda CH22)
- [CVE-2026-5203](https://cve.now/CVE-2026-5203.md): CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php \_copyFilesToFolder path traversal (CVSS 5.1, CMS Made Simple)
- [CVE-2026-34240](https://cve.now/CVE-2026-34240.md): jose vulnerable to untrusted JWK header key acceptance during signature verification (CVSS 7.5, appsup-dart jose)
- [CVE-2026-34237](https://cve.now/CVE-2026-34237.md): MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: \*) (CVSS 6.1, modelcontextprotocol java-sdk · io.modelcontextprotocol.sdk…)
- [CVE-2026-34235](https://cve.now/CVE-2026-34235.md): PJSIP: Heap OOB read in VPX unpacketizer (CVSS 6.9, pjsip pjproject)
- [CVE-2026-34231](https://cve.now/CVE-2026-34231.md): Slippers: Cross-Site Scripting (XSS) in \`attrs\` Template Tag (CVSS 6.1, mixxorz slippers · slippers)
- [CVE-2026-22561](https://cve.now/CVE-2026-22561.md): Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privil (CVSS 4.7, Anthropic Claude Desktop - Windows)
- [CVE-2026-34227](https://cve.now/CVE-2026-34227.md): Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface (CVSS 5.9, BishopFox sliver · github.com/bishopfox/sliver)
- [CVE-2026-34220](https://cve.now/CVE-2026-34220.md): MikroORM is vulnerable to SQL Injection via specially crafted object (CVSS 9.3, mikro-orm · @mikro-orm/core)
- [CVE-2026-34221](https://cve.now/CVE-2026-34221.md): MikroORM has Prototype Pollution in Utils.merge (CVSS 8.3, mikro-orm · @mikro-orm/core)
- [CVE-2026-34218](https://cve.now/CVE-2026-34218.md): ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification (CVSS 6.3, craigjbass clearancekit)
- [CVE-2026-34595](https://cve.now/CVE-2026-34595.md): Parse Server: LiveQuery protected-field guard bypass via array-like logical operator value (CVSS 5.3, parse-community parse-server · parse-server)
- [CVE-2026-34574](https://cve.now/CVE-2026-34574.md): Parse Server: Session field immutability bypass via falsy-value guard (CVSS 5.3, parse-community parse-server · parse-server)
- [CVE-2026-34573](https://cve.now/CVE-2026-34573.md): Parse Server: GraphQL complexity validator exponential fragment traversal DoS (CVSS 8.2, parse-community parse-server · parse-server)
- [CVE-2026-4819](https://cve.now/CVE-2026-4819.md): Search Guard audit logs can contain under certain conditions user credentials (CVSS 4.9, floragunn Search Guard FLX)
- [CVE-2026-22569](https://cve.now/CVE-2026-22569.md): Incorrect startup configuration in ZCC (CVSS 5.4, Zscaler Client Connector)
- [CVE-2026-4818](https://cve.now/CVE-2026-4818.md): Some management operations on data streams are not properly restricted when user does not have the necessary privileges (CVSS 6.8, floragunn Search Guard FLX)
- [CVE-2026-34532](https://cve.now/CVE-2026-34532.md): Parse Server: Cloud function validator bypass via prototype chain traversal (CVSS 9.1, parse-community parse-server · parse-server)
- [CVE-2026-4799](https://cve.now/CVE-2026-4799.md): Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests (CVSS 4.3, floragunn Search Guard FLX)
- [CVE-2026-34373](https://cve.now/CVE-2026-34373.md): Parse Server: GraphQL API endpoint ignores CORS origin restriction (CVSS 5.3, parse-community parse-server · parse-server)
- [CVE-2026-34363](https://cve.now/CVE-2026-34363.md): Parse Server: LiveQuery protected field leak via shared mutable state across concurrent subscribers (CVSS 8.2, parse-community parse-server · parse-server)
- [CVE-2026-0596](https://cve.now/CVE-2026-0596.md): Command Injection in mlflow/mlflow (CVSS 9.6, mlflow/mlflow · mlflow)
- [CVE-2026-34224](https://cve.now/CVE-2026-34224.md): Parse Server: MFA single-use token bypass via concurrent authData login requests (CVSS 2.1, parse-community parse-server · parse-server)
- [CVE-2026-34214](https://cve.now/CVE-2026-34214.md): Trino: Iceberg REST catalog static and vended credentials are accessible via query JSON (CVSS 7.7, trinodb trino · io.trino:trino-iceberg)
- [CVE-2026-34209](https://cve.now/CVE-2026-34209.md): mppx: Tempo has a session close voucher bypass vulnerability due to settled amount equality (CVSS 7.5, wevm mppx · mppx)
- [CVE-2026-34504](https://cve.now/CVE-2026-34504.md): OpenClaw \< 2026.3.28 - Server-Side Request Forgery via Unguarded Image Download in fal Provider (CVSS 6.9, OpenClaw)
- [CVE-2026-34503](https://cve.now/CVE-2026-34503.md): OpenClaw \< 2026.3.28 - Incomplete WebSocket Session Termination on Device Removal and Token Revocation (CVSS 8.6, OpenClaw)
- [CVE-2026-33581](https://cve.now/CVE-2026-33581.md): OpenClaw \< 2026.3.24 - Arbitrary File Read via mediaUrl and fileUrl Parameters (CVSS 7.1, OpenClaw)
- [CVE-2026-33580](https://cve.now/CVE-2026-33580.md): OpenClaw \< 2026.3.28 - Brute Force Attack via Missing Rate Limiting on Webhook Shared Secret Authentication (CVSS 6.3, OpenClaw)
- [CVE-2026-33579](https://cve.now/CVE-2026-33579.md): OpenClaw \< 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval (CVSS 9.4, OpenClaw)
- [CVE-2026-33578](https://cve.now/CVE-2026-33578.md): OpenClaw \< 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions (CVSS 5.3, OpenClaw)
- [CVE-2026-33577](https://cve.now/CVE-2026-33577.md): OpenClaw \< 2026.3.28 - Insufficient Scope Validation in node.pair.approve (CVSS 8.6, OpenClaw)
- [CVE-2026-33576](https://cve.now/CVE-2026-33576.md): OpenClaw \< 2026.3.28 - Unauthorized Media Download via Zalo Channel (CVSS 6.9, OpenClaw)
- [CVE-2026-34210](https://cve.now/CVE-2026-34210.md): mppx has Stripe charge credential replay via missing idempotency check (CVSS 6.0, wevm mppx · mppx)
- [CVE-2026-34377](https://cve.now/CVE-2026-34377.md): Zebra has a Consensus Failure due to Improper Verification of V5 Transactions (CVSS 8.4, ZcashFoundation zebra · ZcashFoundation zebra-consensus +2)
- [CVE-2026-34202](https://cve.now/CVE-2026-34202.md): Zebra node crash — V5 transaction hash panic (P2P reachable) (CVSS 9.2, ZcashFoundation zebra · ZcashFoundation zebra-chain +2)
- [CVE-2026-34200](https://cve.now/CVE-2026-34200.md): Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Port (CVSS 7.7, nhost)
- [CVE-2026-20915](https://cve.now/CVE-2026-20915.md): Stored cross-site scripting in Pending Changes sidebar (CVSS 8.5, Checkmk)
- [CVE-2026-34172](https://cve.now/CVE-2026-34172.md): Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment (CVSS 7.7, Giskard-AI giskard-oss · giskard-agents)
- [CVE-2026-33762](https://cve.now/CVE-2026-33762.md): go-git: Missing validation decoding Index v4 files leads to panic (CVSS 2.8, go-git · github.com/go-git/go-git/v5 +2)
- [CVE-2026-34165](https://cve.now/CVE-2026-34165.md): go-git: Maliciously crafted idx file can cause asymmetric memory consumption (CVSS 5.0, go-git · github.com/go-git/go-git +2)
- [CVE-2026-33276](https://cve.now/CVE-2026-33276.md): XSS in Unified Search via Unescaped Host/Service Names (CVSS 8.6, Checkmk)
- [CVE-2026-34162](https://cve.now/CVE-2026-34162.md): FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft (CVSS 10.0, labring FastGPT)
- [CVE-2026-34163](https://cve.now/CVE-2026-34163.md): Server-Side Request Forgery via MCP Tools Endpoint in FastGPT (CVSS 7.7, labring FastGPT)
- [CVE-2026-34156](https://cve.now/CVE-2026-34156.md): NocoBase Affected by Sandbox Escape to RCE via console.\_stdout Prototype Chain Traversal in Workflow Script Node (CVSS 10.0, nocobase · @nocobase/plugin-workflow-javascript)
- [CVE-2026-34155](https://cve.now/CVE-2026-34155.md): RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB (CVSS 7.2, rauc)
- [CVE-2026-3308](https://cve.now/CVE-2026-3308.md): CVE-2026-3308 (CVSS 7.8, Artifex Software Inc. \*PyMuPDF\* MuPDF)
- [CVE-2026-27854](https://cve.now/CVE-2026-27854.md): Use after free when parsing EDNS options in Lua (CVSS 4.8, PowerDNS DNSdist)
- [CVE-2026-27853](https://cve.now/CVE-2026-27853.md): Out-of-bounds write when rewriting large DNS packets (CVSS 5.9, PowerDNS DNSdist)
- [CVE-2026-24030](https://cve.now/CVE-2026-24030.md): Unbounded memory allocation for DoQ and DoH3 (CVSS 5.3, PowerDNS DNSdist)
- [CVE-2026-24029](https://cve.now/CVE-2026-24029.md): DNS over HTTPS ACL bypass (CVSS 6.5, PowerDNS DNSdist)
- [CVE-2026-24028](https://cve.now/CVE-2026-24028.md): Out-of-bounds read when parsing DNS packets via Lua (CVSS 5.3, PowerDNS DNSdist)
- [CVE-2026-0397](https://cve.now/CVE-2026-0397.md): Information disclosure via CORS misconfiguration (CVSS 3.1, PowerDNS DNSdist)
- [CVE-2026-0396](https://cve.now/CVE-2026-0396.md): HTML injection in the web dashboard (CVSS 3.1, PowerDNS DNSdist)
- [CVE-2025-14213](https://cve.now/CVE-2025-14213.md): Cato's Socket WebUI is vulnerable to OS Command Injection (CVSS 8.3, Cato Networks Socket)
- [CVE-2024-14031](https://cve.now/CVE-2024-14031.md): Sereal::Encoder versions from 4.000 through 4.009\_002 for Perl embeds a vulnerable version of the Zstandard library (CVSS 8.1, YVES Sereal::Encoder)
- [CVE-2024-14030](https://cve.now/CVE-2024-14030.md): Sereal::Decoder versions from 4.000 through 4.009\_002 for Perl embeds a vulnerable version of the Zstandard library (CVSS 8.1, YVES Sereal::Decoder)
- [CVE-2026-4267](https://cve.now/CVE-2026-4267.md): Query Monitor \<= 3.20.3 - Reflected Cross-Site Scripting via Request URI (CVSS 7.2, johnbillion Query Monitor · johnbillion/query-monitor)
- [CVE-2026-3191](https://cve.now/CVE-2026-3191.md): Minify HTML \<= 2.1.12 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 5.4, teckel Minify HTML)
- [CVE-2026-3139](https://cve.now/CVE-2026-3139.md): User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor \<= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field (CVSS 4.3, cozmoslabs User Profile Builder – Beautiful User Registrati…)
- [CVE-2026-34506](https://cve.now/CVE-2026-34506.md): OpenClaw \< 2026.3.8 - Sender Allowlist Bypass in Microsoft Teams Plugin via Route Allowlist Configuration (CVSS 2.3, OpenClaw)
- [CVE-2026-34505](https://cve.now/CVE-2026-34505.md): OpenClaw \< 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret Validation (CVSS 6.9, OpenClaw)
- [CVE-2026-32988](https://cve.now/CVE-2026-32988.md): OpenClaw \< 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation (CVSS 5.8, OpenClaw)
- [CVE-2026-32982](https://cve.now/CVE-2026-32982.md): OpenClaw \< 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error Logs (CVSS 8.7, OpenClaw)
- [CVE-2026-32977](https://cve.now/CVE-2026-32977.md): OpenClaw \< 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit Path (CVSS 5.8, OpenClaw)
- [CVE-2026-32976](https://cve.now/CVE-2026-32976.md): OpenClaw \< 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands (CVSS 7.1, OpenClaw)
- [CVE-2026-32971](https://cve.now/CVE-2026-32971.md): OpenClaw \< 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands (CVSS 7.3, OpenClaw)
- [CVE-2026-32970](https://cve.now/CVE-2026-32970.md): OpenClaw \< 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs (CVSS 2.0, OpenClaw)
- [CVE-2026-32921](https://cve.now/CVE-2026-32921.md): OpenClaw \< 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.run (CVSS 5.3, OpenClaw)
- [CVE-2026-32920](https://cve.now/CVE-2026-32920.md): OpenClaw \< 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace Plugins (CVSS 8.6, OpenClaw)
- [CVE-2026-32917](https://cve.now/CVE-2026-32917.md): OpenClaw \< 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCP (CVSS 9.2, OpenClaw)
- [CVE-2026-32916](https://cve.now/CVE-2026-32916.md): OpenClaw 2026.3.7 \< 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes (CVSS 9.2, OpenClaw)
- [CVE-2026-5198](https://cve.now/CVE-2026-5198.md): code-projects Student Membership System Admin Login index.php sql injection (CVSS 6.9, code-projects Student Membership System)
- [CVE-2026-34887](https://cve.now/CVE-2026-34887.md): WordPress Kubio AI Page Builder plugin \<= 2.7.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Extend Themes Kubio AI Page Builder)
- [CVE-2026-4400](https://cve.now/CVE-2026-4400.md): Multiple vulnerabilities in 1millionbot Millie chatbot (CVSS 7.0, 1millionbot Millie chat)
- [CVE-2026-4399](https://cve.now/CVE-2026-4399.md): Multiple vulnerabilities in 1millionbot Millie chatbot (CVSS 8.7, 1millionbot Millie chat)
- [CVE-2025-15618](https://cve.now/CVE-2025-15618.md): Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key (CVSS 9.1, MOCK Business::OnlinePayment::StoredTransaction)
- [CVE-2026-5197](https://cve.now/CVE-2026-5197.md): code-projects Student Membership System delete\_user.php sql injection (CVSS 5.3, code-projects Student Membership System)
- [CVE-2026-4317](https://cve.now/CVE-2026-4317.md): SQL inyection in Umami Software application (CVSS 9.3, Umami Software application Umami Software)
- [CVE-2026-5196](https://cve.now/CVE-2026-5196.md): code-projects Student Membership System delete\_member.php sql injection (CVSS 5.3, code-projects Student Membership System)
- [CVE-2026-3107](https://cve.now/CVE-2026-3107.md): Multiple vulnerabilities in Teampass (CVSS 9.3, Teampass)
- [CVE-2025-41357](https://cve.now/CVE-2025-41357.md): Reflected Cross-Site Scripting on Anon Proxy Server (CVSS 5.1, Anon Proxy Server)
- [CVE-2025-41356](https://cve.now/CVE-2025-41356.md): Reflected Cross-Site Scripting in Anon Proxy Server (CVSS 5.1, Anon Proxy Server)
- [CVE-2026-3106](https://cve.now/CVE-2026-3106.md): Multiple vulnerabilities in Teampass (CVSS 9.3, Teampass)
- [CVE-2025-41355](https://cve.now/CVE-2025-41355.md): Reflected Cross-Site Scripting on Anon Proxy Server (CVSS 5.1, Anon Proxy Server)
- [CVE-2025-10559](https://cve.now/CVE-2025-10559.md): Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 7.1, Dassault Systèmes DELMIA Factory Resource Manager)
- [CVE-2025-10553](https://cve.now/CVE-2025-10553.md): Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 8.7, Dassault Systèmes DELMIA Factory Resource Manager)
- [CVE-2025-10551](https://cve.now/CVE-2025-10551.md): Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 8.7, Dassault Systèmes ENOVIA Collaborative Industry Innovator)
- [CVE-2026-5201](https://cve.now/CVE-2026-5201.md): Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image (CVSS 7.5, Red Hat Enterprise Linux · Red Hat AI Inference Server)
- [CVE-2026-5195](https://cve.now/CVE-2026-5195.md): code-projects Student Membership System User Registration sql injection (CVSS 6.9, code-projects Student Membership System)
- [CVE-2026-5186](https://cve.now/CVE-2026-5186.md): Nothings stb Multi-frame GIF File stb\_image.h stbi\_\_load\_gif\_main double free (CVSS 4.8, Nothings stb)
- [CVE-2026-5185](https://cve.now/CVE-2026-5185.md): Nothings stb\_image Multi-frame GIF File stb\_image.h stbi\_\_gif\_load\_next heap-based overflow (CVSS 4.8, Nothings stb\_image)
- [CVE-2026-5184](https://cve.now/CVE-2026-5184.md): TRENDnet TEW-713RE setSysAdm command injection (CVSS 5.3, TRENDnet TEW-713RE)
- [CVE-2026-3881](https://cve.now/CVE-2026-3881.md): Performance Monitor \<= 1.0.6 - Unauthenticated Blind SSRF (CVSS 5.8, Performance Monitor)
- [CVE-2026-5183](https://cve.now/CVE-2026-5183.md): TRENDnet TEW-713RE addRouting sub\_421494 command injection (CVSS 5.3, TRENDnet TEW-713RE)
- [CVE-2026-5182](https://cve.now/CVE-2026-5182.md): SourceCodester Teacher Record System Parameter sql injection (CVSS 6.9, SourceCodester Teacher Record System)
- [CVE-2026-34881](https://cve.now/CVE-2026-34881.md): OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). (CVSS 5.0, OpenStack Glance · glance)
- [CVE-2026-1877](https://cve.now/CVE-2026-1877.md): Auto Post Scheduler \<= 1.84 - Cross-Site Request Forgery to Stored Cross-Site Scripting via aps\_options\_page (CVSS 6.1, johnh10 Auto Post Scheduler)
- [CVE-2026-1834](https://cve.now/CVE-2026-1834.md): Ibtana - WordPress Website Builder \<= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, vowelweb Ibtana – WordPress Website Builder)
- [CVE-2026-5181](https://cve.now/CVE-2026-5181.md): SourceCodester Simple Doctors Appointment System ajax.php unrestricted upload (CVSS 5.3, SourceCodester Simple Doctors Appointment System)
- [CVE-2026-4146](https://cve.now/CVE-2026-4146.md): Loco Translate \<= 2.8.2 - Reflected Cross-Site Scripting via 'update\_href' Parameter (CVSS 6.1, timwhitlock Loco Translate)
- [CVE-2026-1710](https://cve.now/CVE-2026-1710.md): WooPayments \<= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save\_upe\_appearance\_ajax (CVSS 6.5, WooPayments: Integrated WooCommerce Payments)
- [CVE-2026-1797](https://cve.now/CVE-2026-1797.md): Truebooker - Appointment Booking and Scheduler Plugin \<= 1.1.4 - Sensitive Information Exposure via Views Files (CVSS 5.3, themetechmount TrueBooker – Appointment Booking and Schedul…)
- [CVE-2026-5180](https://cve.now/CVE-2026-5180.md): SourceCodester Simple Doctors Appointment System ajax.php sql injection (CVSS 6.9, SourceCodester Simple Doctors Appointment System)
- [CVE-2026-5179](https://cve.now/CVE-2026-5179.md): SourceCodester Simple Doctors Appointment System login.php sql injection (CVSS 6.9, SourceCodester Simple Doctors Appointment System)
- [CVE-2026-5178](https://cve.now/CVE-2026-5178.md): Totolink A3300R cstecgi.cgi setIptvCfg command injection (CVSS 5.3, Totolink A3300R)
- [CVE-2026-34073](https://cve.now/CVE-2026-34073.md): cryptography has incomplete DNS name constraint enforcement on peer names (CVSS 1.7, pyca cryptography · cryptography)
- [CVE-2026-34070](https://cve.now/CVE-2026-34070.md): LangChain Core has Path Traversal vulnerabilites in legacy \`load\_prompt\` functions (CVSS 7.5, langchain-ai langchain · langchain-core)
- [CVE-2026-5177](https://cve.now/CVE-2026-5177.md): Totolink A3300R cstecgi.cgi setWiFiBasicCfg command injection (CVSS 5.3, Totolink A3300R)
- [CVE-2026-34060](https://cve.now/CVE-2026-34060.md): Ruby LSP has arbitrary code execution through branch setting (CVSS 7.1, Shopify ruby-lsp · Shopify.ruby-lsp +1)
- [CVE-2026-34054](https://cve.now/CVE-2026-34054.md): openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element) (CVSS 7.8, microsoft vcpkg)
- [CVE-2026-34043](https://cve.now/CVE-2026-34043.md): Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects (CVSS 5.9, yahoo serialize-javascript · serialize-javascript)
- [CVE-2026-34042](https://cve.now/CVE-2026-34042.md): act: actions/cache server allows malicious cache injection (CVSS 8.2, nektos act · github.com/nektos/act)
- [CVE-2026-34041](https://cve.now/CVE-2026-34041.md): act: Unrestricted set-env and add-path command processing enables environment injection (CVSS 7.7, nektos act · github.com/nektos/act)
- [CVE-2026-34036](https://cve.now/CVE-2026-34036.md): Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php (CVSS 6.5, dolibarr · dolibarr/dolibarr)
- [CVE-2026-33997](https://cve.now/CVE-2026-33997.md): Moby: Off-by-one error in plugin privilege validation (CVSS 6.8, moby · github.com/docker/docker +2)
- [CVE-2026-34040](https://cve.now/CVE-2026-34040.md): Moby: AuthZ plugin bypass with oversized request body (CVSS 8.8, moby · github.com/moby/moby +2)
- [CVE-2026-32727](https://cve.now/CVE-2026-32727.md): SciTokens: Authorization Bypass via Path Traversal in Scope Validation (CVSS 8.1, scitokens)
- [CVE-2026-32716](https://cve.now/CVE-2026-32716.md): SciTokens: Authorization Bypass via Incorrect Scope Path Prefix Checking (CVSS 8.1, scitokens)
- [CVE-2026-32714](https://cve.now/CVE-2026-32714.md): SciTokens vulnerable to SQL Injection in KeyCache (CVSS 9.8, scitokens)
- [CVE-2026-3300](https://cve.now/CVE-2026-3300.md): Everest Forms Pro \<= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field (CVSS 9.8, WPEverest Everest Forms Pro)
- [CVE-2026-4020](https://cve.now/CVE-2026-4020.md): Gravity SMTP \<= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST API (CVSS 7.5, RocketGenius Gravity SMTP)
- [CVE-2026-5176](https://cve.now/CVE-2026-5176.md): Totolink A3300R cstecgi.cgi setSyslogCfg command injection (CVSS 6.9, Totolink A3300R)
- [CVE-2026-5115](https://cve.now/CVE-2026-5115.md): Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices (CVSS 3.6, Papercut NG/MF)
- [CVE-2026-32734](https://cve.now/CVE-2026-32734.md): baserCMS: Multiple vulnerabilities in baserCMS (CVSS 7.1, baserproject basercms · baserproject/basercms)
- [CVE-2026-30879](https://cve.now/CVE-2026-30879.md): baserCMS: Cross-site scripting vulnerability in blog post (CVSS 6.9, baserproject basercms · baserproject/basercms)
- [CVE-2026-30940](https://cve.now/CVE-2026-30940.md): baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE (CVSS 7.2, baserproject basercms · baserproject/basercms)
- [CVE-2026-30878](https://cve.now/CVE-2026-30878.md): baserCMS: Mail Form Acceptance Bypass via Public API (CVSS 5.3, baserproject basercms · baserproject/basercms)
- [CVE-2026-30877](https://cve.now/CVE-2026-30877.md): baserCMS: OS Command Injection in the baserCMS Update Functionality (CVSS 9.1, baserproject basercms · baserproject/basercms)
- [CVE-2026-30880](https://cve.now/CVE-2026-30880.md): baserCMS: OS command injection vulnerability in installer (CVSS 9.2, baserproject basercms · baserproject/basercms)
- [CVE-2026-27697](https://cve.now/CVE-2026-27697.md): baserCMS: SQL injection vulnerability in blog post (CVSS 6.9, baserproject basercms · baserproject/basercms)
- [CVE-2026-21861](https://cve.now/CVE-2026-21861.md): baserCMS: OS Command Injection Leading to Remote Code Execution (RCE) (CVSS 9.1, baserproject basercms · baserproject/basercms)
- [CVE-2025-32957](https://cve.now/CVE-2025-32957.md): baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE) (CVSS 8.7, baserproject basercms · baserproject/basercms)
- [CVE-2026-4794](https://cve.now/CVE-2026-4794.md): Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF (CVSS 2.1, PaperCut NG/MF)
- [CVE-2026-29870](https://cve.now/CVE-2026-29870.md): A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows arbitrary file writes via the checkpoi (CVSS 7.6)
- [CVE-2026-30276](https://cve.now/CVE-2026-30276.md): An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via the (CVSS 9.8)
- [CVE-2026-30277](https://cve.now/CVE-2026-30277.md): An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical inte (CVSS 8.4)
- [CVE-2026-30278](https://cve.now/CVE-2026-30278.md): An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via (CVSS 9.8)
- [CVE-2026-30279](https://cve.now/CVE-2026-30279.md): An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows attackers to overwrite critical intern (CVSS 8.4)
- [CVE-2026-30280](https://cve.now/CVE-2026-30280.md): An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to ov (CVSS 5.3)
- [CVE-2026-30281](https://cve.now/CVE-2026-30281.md): An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file import (CVSS 9.8)
- [CVE-2026-30282](https://cve.now/CVE-2026-30282.md): An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical internal (CVSS 9.0)
- [CVE-2026-30283](https://cve.now/CVE-2026-30283.md): An arbitrary file overwrite vulnerability in PEAKSEL D.O.O. (CVSS 9.8)
- [CVE-2026-30284](https://cve.now/CVE-2026-30284.md): An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the (CVSS 8.6)
- [CVE-2026-30285](https://cve.now/CVE-2026-30285.md): An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files vi (CVSS 9.8)
- [CVE-2026-30286](https://cve.now/CVE-2026-30286.md): An arbitrary file overwrite vulnerability in Funambol, Inc. (CVSS 9.8)
- [CVE-2026-30290](https://cve.now/CVE-2026-30290.md): An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files (CVSS 8.4)
- [CVE-2026-30309](https://cve.now/CVE-2026-30309.md): InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism c (CVSS 7.8)
- [CVE-2026-30310](https://cve.now/CVE-2026-30310.md): In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands. (CVSS 9.8)
- [CVE-2026-30311](https://cve.now/CVE-2026-30311.md): Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechan (CVSS 9.8)
- [CVE-2026-30312](https://cve.now/CVE-2026-30312.md): DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechani (CVSS 9.8)
- [CVE-2026-30314](https://cve.now/CVE-2026-30314.md): Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechan (CVSS 9.8)
- [CVE-2026-30520](https://cve.now/CVE-2026-30520.md): A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. (CVSS 5.4)
- [CVE-2026-30521](https://cve.now/CVE-2026-30521.md): A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-03-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.