# CVEs published 2026-04-01

235 CVEs were published on April 1, 2026: 29 critical, 87 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-21767](https://cve.now/CVE-2026-21767.md): HCL BigFix Platform is affected by insufficient authentication (CVSS 4.0, HCLSoftware BigFix Platform)
- [CVE-2026-21765](https://cve.now/CVE-2026-21765.md): HCL BigFix Platform is affected by insecure permissions on private cryptographic keys (CVSS 8.8, HCLSoftware BigFix Platform)
- [CVE-2026-5315](https://cve.now/CVE-2026-5315.md): Nothings stb TTF File stb\_truetype.h stbtt\_\_buf\_get8 out-of-bounds (CVSS 5.3, Nothings stb)
- [CVE-2025-66487](https://cve.now/CVE-2025-66487.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 2.7, IBM Aspera Shares)
- [CVE-2025-66486](https://cve.now/CVE-2025-66486.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 4.8, IBM Aspera Shares)
- [CVE-2025-66485](https://cve.now/CVE-2025-66485.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 5.4, IBM Aspera Shares)
- [CVE-2026-32929](https://cve.now/CVE-2026-32929.md): V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get\_macro\_mem\_COM. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-32928](https://cve.now/CVE-2026-32928.md): V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::\_conv\_AnimationItem. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2025-66484](https://cve.now/CVE-2025-66484.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 5.5, IBM Aspera Shares)
- [CVE-2026-32927](https://cve.now/CVE-2026-32927.md): V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set\_temp\_type\_default. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-32926](https://cve.now/CVE-2026-32926.md): V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load\_link\_inf. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2026-32925](https://cve.now/CVE-2026-32925.md): V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom. (CVSS 7.8, FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT)
- [CVE-2025-66483](https://cve.now/CVE-2025-66483.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 6.3, IBM Aspera Shares)
- [CVE-2025-36375](https://cve.now/CVE-2025-36375.md): IBM DataPower Gateway vulnerable to CSRF (CVSS 6.5, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2026-5314](https://cve.now/CVE-2026-5314.md): Nothings stb TTF File stb\_truetype.h stbtt\_InitFont\_internal out-of-bounds (CVSS 5.3, Nothings stb)
- [CVE-2026-34572](https://cve.now/CVE-2026-34572.md): CI4MS: Account Deactivation Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) (CVSS 8.8, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-3987](https://cve.now/CVE-2026-3987.md): WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2026-34571](https://cve.now/CVE-2026-34571.md): CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise (CVSS 10.0, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34570](https://cve.now/CVE-2026-34570.md): CI4MS: Account Deletion Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) (CVSS 8.8, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-5313](https://cve.now/CVE-2026-5313.md): Nothings stb GIF Decoder stb\_image.h stbi\_\_gif\_load\_next denial of service (CVSS 5.3, Nothings stb)
- [CVE-2026-34569](https://cve.now/CVE-2026-34569.md): CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 10.0, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34568](https://cve.now/CVE-2026-34568.md): CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34567](https://cve.now/CVE-2026-34567.md): CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34566](https://cve.now/CVE-2026-34566.md): CI4MS: Pages Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34565](https://cve.now/CVE-2026-34565.md): CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34564](https://cve.now/CVE-2026-34564.md): CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34563](https://cve.now/CVE-2026-34563.md): CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34562](https://cve.now/CVE-2026-34562.md): CI4MS: System Settings (Company Information) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 4.7, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34561](https://cve.now/CVE-2026-34561.md): CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 4.7, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34560](https://cve.now/CVE-2026-34560.md): CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-34559](https://cve.now/CVE-2026-34559.md): CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1, ci4-cms-erp ci4ms · ci4-cms-erp/ci4ms)
- [CVE-2026-2475](https://cve.now/CVE-2026-2475.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 3.1, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-34543](https://cve.now/CVE-2026-34543.md): OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo\_pxr24\_impl) (CVSS 8.7, AcademySoftwareFoundation openexr · openexr)
- [CVE-2026-34544](https://cve.now/CVE-2026-34544.md): OpenEXR: integer overflow to OOB write in uncompress\_b44\_impl() (CVSS 8.4, AcademySoftwareFoundation openexr · openexr)
- [CVE-2026-4820](https://cve.now/CVE-2026-4820.md): IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2\_\<workspace\_name\> was not set with secure flag (CVSS 4.3, IBM Maximo Application Suite)
- [CVE-2026-34545](https://cve.now/CVE-2026-34545.md): OpenEXR: integer overflow lead to OOB in HTJ2K decoder (CVSS 8.4, AcademySoftwareFoundation openexr)
- [CVE-2025-36373](https://cve.now/CVE-2025-36373.md): Incorrect administrative access control in IBM DataPower Gateway (CVSS 4.1, IBM DataPower Gateway 10.6CD · IBM DataPower Gateway)
- [CVE-2025-13916](https://cve.now/CVE-2025-13916.md): Multiple vulnerabilities have been addressed in IBM Aspera Shares (CVSS 5.9, IBM Aspera Shares)
- [CVE-2026-1491](https://cve.now/CVE-2026-1491.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.3, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-34531](https://cve.now/CVE-2026-34531.md): Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client (CVSS 6.5, miguelgrinberg Flask-HTTPAuth · flask-httpauth)
- [CVE-2026-34530](https://cve.now/CVE-2026-34530.md): File Browser is vulnerable to Stored Cross-Site Scripting via text/template branding injection (CVSS 6.9, filebrowser · github.com/filebrowser/filebrowser/v2 +1)
- [CVE-2026-2862](https://cve.now/CVE-2026-2862.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.3, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-34528](https://cve.now/CVE-2026-34528.md): File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution (CVSS 8.1, filebrowser · github.com/filebrowser/filebrowser +1)
- [CVE-2026-1345](https://cve.now/CVE-2026-1345.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 7.3, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-34529](https://cve.now/CVE-2026-34529.md): File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file (CVSS 7.6, filebrowser · github.com/filebrowser/filebrowser/v2 +1)
- [CVE-2026-4101](https://cve.now/CVE-2026-4101.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 8.1, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-4364](https://cve.now/CVE-2026-4364.md): Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVSS 5.4, IBM Verify Identity Access Container · IBM Security Veri… +2)
- [CVE-2026-5312](https://cve.now/CVE-2026-5312.md): D-Link DNS-1550-04 dsk\_mgr.cgi Get\_current\_raidtype access control (CVSS 6.9, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-34525](https://cve.now/CVE-2026-34525.md): AIOHTTP: Duplicate Host header accepted (CVSS 6.3, aio-libs aiohttp · aiohttp)
- [CVE-2026-34520](https://cve.now/CVE-2026-34520.md): AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypass (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-34519](https://cve.now/CVE-2026-34519.md): AIOHTTP: HTTP response splitting via \\r in reason phrase (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-34518](https://cve.now/CVE-2026-34518.md): AIOHTTP: Cookie and Proxy-Authorization headers leaked on cross-origin redirect (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-34517](https://cve.now/CVE-2026-34517.md): AIOHTTP: Late size enforcement for non-file multipart fields causes memory DoS (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-34516](https://cve.now/CVE-2026-34516.md): AIOHTTP: Multipart Header Size Bypass (CVSS 6.6, aio-libs aiohttp · aiohttp)
- [CVE-2026-34515](https://cve.now/CVE-2026-34515.md): AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows (CVSS 6.6, aio-libs aiohttp · aiohttp)
- [CVE-2026-34514](https://cve.now/CVE-2026-34514.md): AIOHTTP: CRLF injection in multipart part content type header construction (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-22815](https://cve.now/CVE-2026-22815.md): AIOHTTP: Uncapped memory usage possible through aiohttp allowing unlimited trailer headers (CVSS 6.9, aio-libs aiohttp · aiohttp)
- [CVE-2026-34513](https://cve.now/CVE-2026-34513.md): AIOHTTP: Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector (CVSS 2.7, aio-libs aiohttp · aiohttp)
- [CVE-2026-34456](https://cve.now/CVE-2026-34456.md): Reviactyl: OAuth account takeover via auto-linking (CVSS 9.1, reviactyl panel)
- [CVE-2026-34455](https://cve.now/CVE-2026-34455.md): Hi.Events: SQL Injection via Unvalidated sort\_by Query Parameter in Multiple Repository Classes (CVSS 8.7, HiEventsDev Hi.Events)
- [CVE-2026-34750](https://cve.now/CVE-2026-34750.md): Payload has Insufficient Filename Validation in Client-Upload Signed-URL Endpoints (CVSS 6.5, payloadcms payload · @payloadcms/storage-azure +3)
- [CVE-2026-34749](https://cve.now/CVE-2026-34749.md): Payload has a CSRF Protection Bypass in Authentication Flow (CVSS 5.4, payloadcms payload · payload)
- [CVE-2026-34748](https://cve.now/CVE-2026-34748.md): @payloadcms/next has Stored XSS in Admin Panel (CVSS 8.7, payloadcms payload · @payloadcms/next)
- [CVE-2026-34747](https://cve.now/CVE-2026-34747.md): Payload has an SQL Injection via Query Handling (CVSS 8.5, payloadcms payload · payload)
- [CVE-2026-5311](https://cve.now/CVE-2026-5311.md): D-Link DNS-1550-04 file\_center.cgi Webdav\_Access\_List access control (CVSS 6.9, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-34746](https://cve.now/CVE-2026-34746.md): Payload has Authenticated SSRF via Upload Functionality (CVSS 7.7, payloadcms payload · payload)
- [CVE-2026-35000](https://cve.now/CVE-2026-35000.md): ChangeDetection.io \< 0.54.7 SafeXPath3Parser Bypass Arbitrary File Read (CVSS 7.1, dgtlmoon ChangeDetection.io · changedetection-io)
- [CVE-2026-5199](https://cve.now/CVE-2026-5199.md): Cross Namespace Access via Batch Operation (CVSS 2.3, Temporal Technologies temporal · go.temporal.io/server)
- [CVE-2026-34751](https://cve.now/CVE-2026-34751.md): Payload has Unvalidated Input in Password Recovery Endpoints (CVSS 9.1, payloadcms payload · payload +1)
- [CVE-2026-34447](https://cve.now/CVE-2026-34447.md): ONNX: External Data Symlink Traversal (CVSS 5.5, onnx)
- [CVE-2026-34446](https://cve.now/CVE-2026-34446.md): ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load (CVSS 4.7, onnx)
- [CVE-2026-27489](https://cve.now/CVE-2026-27489.md): ONNX: Path Traversal via Symlink (CVSS 8.7, onnx)
- [CVE-2026-34445](https://cve.now/CVE-2026-34445.md): ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. (CVSS 8.6, onnx)
- [CVE-2026-34397](https://cve.now/CVE-2026-34397.md): himmelblau: NSS fake-primary group lookup reintroduces name collision risk (CVSS 6.3, himmelblau-idm himmelblau)
- [CVE-2026-34376](https://cve.now/CVE-2026-34376.md): PdfDing: Password-protected share bypass via direct serve endpoint (CVSS 7.5, mrmn2 PdfDing)
- [CVE-2026-34236](https://cve.now/CVE-2026-34236.md): Auth0 PHP SDK Insufficient Entropy in Cookie Encryption (CVSS 8.2, auth0-PHP · auth0/auth0-php)
- [CVE-2026-34222](https://cve.now/CVE-2026-34222.md): Open WebUI has Broken Access Control in Tool Valves (CVSS 7.7, open-webui)
- [CVE-2026-34159](https://cve.now/CVE-2026-34159.md): llama.cpp: Unauthenticated RCE via GRAPH\_COMPUTE buffer=0 bypass in llama.cpp RPC backend (CVSS 9.8, ggml-org llama.cpp)
- [CVE-2026-34076](https://cve.now/CVE-2026-34076.md): Clerk JavaScript: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host (CVSS 7.4, clerk javascript · @clerk/backend +3)
- [CVE-2026-34072](https://cve.now/CVE-2026-34072.md): cronmaster: Middleware authentication bypass enabling unauthorized page access and server-action execution (CVSS 8.3, fccview cronmaster)
- [CVE-2026-20090](https://cve.now/CVE-2026-20090.md): Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20089](https://cve.now/CVE-2026-20089.md): Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20087](https://cve.now/CVE-2026-20087.md): Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20088](https://cve.now/CVE-2026-20088.md): Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-5310](https://cve.now/CVE-2026-5310.md): Enter Software Iperius Backup IperiusAccounts.ini hard-coded key (CVSS 2.0, Enter Software Iperius Backup)
- [CVE-2026-20160](https://cve.now/CVE-2026-20160.md): Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability (CVSS 9.8, Cisco Smart Software Manager On-Prem)
- [CVE-2026-20174](https://cve.now/CVE-2026-20174.md): Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability (CVSS 4.9, Cisco Nexus Dashboard)
- [CVE-2026-20151](https://cve.now/CVE-2026-20151.md): Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability (CVSS 7.3, Cisco Smart Software Manager On-Prem)
- [CVE-2026-20155](https://cve.now/CVE-2026-20155.md): Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability (CVSS 8.0, Cisco Evolved Programmable Network Manager)
- [CVE-2026-20096](https://cve.now/CVE-2026-20096.md): Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 6.5, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20097](https://cve.now/CVE-2026-20097.md): Cisco Integrated Management Controller Remote Code Execution Vulnerability (CVSS 6.5, Cisco Unified Computing System)
- [CVE-2026-20094](https://cve.now/CVE-2026-20094.md): Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 8.8, Cisco Unified Computing System)
- [CVE-2026-20095](https://cve.now/CVE-2026-20095.md): Cisco Integrated Management Controller Command Injection Vulnerability (CVSS 6.5, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20093](https://cve.now/CVE-2026-20093.md): Cisco Integrated Management Controller Authentication Bypass Vulnerability (CVSS 9.8, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20085](https://cve.now/CVE-2026-20085.md): Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Enterprise NFV Infrastructure Software · Cisco Unifie…)
- [CVE-2026-20041](https://cve.now/CVE-2026-20041.md): Cisco Nexus Dashboard Server Side Request Forgery Vulnerability (CVSS 6.1, Cisco Nexus Dashboard)
- [CVE-2026-20042](https://cve.now/CVE-2026-20042.md): Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability (CVSS 6.5, Cisco Nexus Dashboard)
- [CVE-2026-33990](https://cve.now/CVE-2026-33990.md): Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) (CVSS 6.8, docker model-runner · github.com/docker/model-runner)
- [CVE-2026-33978](https://cve.now/CVE-2026-33978.md): Notesnook: Stored XSS in mobile share editor via unescaped web clip title metadata (CVSS 5.4, streetwriters notesnook)
- [CVE-2026-2265](https://cve.now/CVE-2026-2265.md): Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization (CVSS 6.5, Replicator)
- [CVE-2026-34603](https://cve.now/CVE-2026-34603.md): @tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions (CVSS 7.1, tinacms · @tinacms/graphql)
- [CVE-2026-34604](https://cve.now/CVE-2026-34604.md): @tinacms/graphql's \`FilesystemBridge\` Path Validation Can Be Bypassed via Symlinks or Junctions (CVSS 7.1, tinacms · @tinacms/graphql)
- [CVE-2026-33949](https://cve.now/CVE-2026-33949.md): @tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files (CVSS 8.1, tinacms · @tinacms/graphql)
- [CVE-2026-35099](https://cve.now/CVE-2026-35099.md): Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM. (CVSS 7.4, Lakeside Software SysTrack Agent)
- [CVE-2026-34510](https://cve.now/CVE-2026-34510.md): OpenClaw \< 2026.3.22 - Remote File URL Acceptance in Windows Media Loaders (CVSS 6.9, OpenClaw)
- [CVE-2026-4989](https://cve.now/CVE-2026-4989.md): Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform se (CVSS 4.3, Devolutions Server)
- [CVE-2026-5175](https://cve.now/CVE-2026-5175.md): Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenticated attacker to de (CVSS 5.0, Devolutions Server)
- [CVE-2026-4925](https://cve.now/CVE-2026-4925.md): Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restric (CVSS 5.0, Devolutions Server)
- [CVE-2026-4927](https://cve.now/CVE-2026-4927.md): Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privileges to obtain othe (CVSS 6.5, Devolutions Server)
- [CVE-2026-4924](https://cve.now/CVE-2026-4924.md): Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allows a remote attacke (CVSS 8.2, Devolutions Server)
- [CVE-2026-4828](https://cve.now/CVE-2026-4828.md): Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid cre (CVSS 8.2, Devolutions Server)
- [CVE-2026-4829](https://cve.now/CVE-2026-4829.md): Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user t (CVSS 5.4, Devolutions Server)
- [CVE-2025-13535](https://cve.now/CVE-2025-13535.md): King Addons for Elementor \<= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4, kingaddons King Addons for Elementor – 80+ Elementor Widget…)
- [CVE-2026-35094](https://cve.now/CVE-2026-35094.md): Libinput: libinput: information disclosure via dangling pointer in lua plugin handling (CVSS 3.3, Red Hat Enterprise Linux)
- [CVE-2026-35093](https://cve.now/CVE-2026-35093.md): Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins (CVSS 8.8, Red Hat Enterprise Linux)
- [CVE-2026-5271](https://cve.now/CVE-2026-5271.md): Possible to hijack modules in current working directory (CVSS 5.6, Python Software Foundation pymanager)
- [CVE-2026-34430](https://cve.now/CVE-2026-34430.md): ByteDance DeerFlow LocalSandboxProvider Host Bash Escape (CVSS 8.6, Bytedance DeerFlow)
- [CVE-2026-34999](https://cve.now/CVE-2026-34999.md): OpenViking 0.2.5 \< 0.2.14 Bot Proxy Endpoints Allow Unauthenticated Access (CVSS 6.9, Volcengine OpenViking)
- [CVE-2026-35092](https://cve.now/CVE-2026-35092.md): Corosync: corosync: denial of service via integer overflow in join message validation (CVSS 7.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-35091](https://cve.now/CVE-2026-35091.md): Corosync: corosync: denial of service and information disclosure via crafted udp packet (CVSS 8.2, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-3877](https://cve.now/CVE-2026-3877.md): Reflected Cross-Site Scripting in Dashboard Search (CVSS 7.3, VertiGIS FM)
- [CVE-2026-0522](https://cve.now/CVE-2026-0522.md): Local File Inclusion in the File Upload/Download Process (CVSS 7.4, VertiGIS FM)
- [CVE-2026-29014](https://cve.now/CVE-2026-29014.md): MetInfo CMS Unauthenticated PHP Code Injection RCE (CVSS 9.3, MetInfo CMS)
- [CVE-2026-22768](https://cve.now/CVE-2026-22768.md): Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. (CVSS 7.3, Dell AppSync)
- [CVE-2026-22767](https://cve.now/CVE-2026-22767.md): Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. (CVSS 7.3, Dell AppSync)
- [CVE-2026-25601](https://cve.now/CVE-2026-25601.md): Credential Exposure vulnerability in MEPIS RM (CVSS 6.4, Metronik d.o.o. MEPIS RM)
- [CVE-2026-24096](https://cve.now/CVE-2026-24096.md): Insufficient permission validation on multiple REST API Quick Setup endpoints (CVSS 5.3, Checkmk)
- [CVE-2026-0932](https://cve.now/CVE-2026-0932.md): Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server befo (CVSS 6.9, M-Files Server)
- [CVE-2026-1879](https://cve.now/CVE-2026-1879.md): Harvard University IQSS Dataverse Theme Customization ThemeAndWidgets.xhtml unrestricted upload (CVSS 5.3, Harvard University IQSS Dataverse)
- [CVE-2024-53828](https://cve.now/CVE-2024-53828.md): Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability (CVSS 5.3, Ericsson Packet Core Controller)
- [CVE-2026-21630](https://cve.now/CVE-2026-21630.md): Joomla! Core - \[20260302\] - SQL injection in com\_content articles webservice endpoint (CVSS 6.9, Joomla! Project Joomla! CMS)
- [CVE-2026-23898](https://cve.now/CVE-2026-23898.md): Joomla! Core - \[20260305\] - Arbitrary file deletion in com\_joomlaupdate (CVSS 8.6, Joomla! Project Joomla! CMS)
- [CVE-2026-21629](https://cve.now/CVE-2026-21629.md): Joomla! Core - \[20260301\] - ACL hardening in com\_ajax (CVSS 6.3, Joomla! Project Joomla! CMS)
- [CVE-2026-23899](https://cve.now/CVE-2026-23899.md): Joomla! Core - \[20260306\] - Improper access check in webservice endpoints (CVSS 8.6, Joomla! Project Joomla! CMS)
- [CVE-2026-21631](https://cve.now/CVE-2026-21631.md): Joomla! Core - \[20260303\] - XSS vector in com\_associations comparison view (CVSS 5.9, Joomla! Project Joomla! CMS)
- [CVE-2026-21632](https://cve.now/CVE-2026-21632.md): Joomla! Core - \[20260304\] - XSS vectors in various article title outputs (CVSS 5.9, Joomla! Project Joomla! CMS)
- [CVE-2026-34889](https://cve.now/CVE-2026-34889.md): WordPress Ultimate Addons for WPBakery Page Builder plugin \< 3.21.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Brainstorm Force Ultimate Addons for WPBakery Page Builder)
- [CVE-2026-23411](https://cve.now/CVE-2026-23411.md): apparmor: fix race between freeing data and fs accessing it (CVSS 7.8, Linux)
- [CVE-2026-23410](https://cve.now/CVE-2026-23410.md): apparmor: fix race on rawdata dereference (CVSS 7.8, Linux)
- [CVE-2026-23409](https://cve.now/CVE-2026-23409.md): apparmor: fix differential encoding verification (no CVSS, Linux)
- [CVE-2026-23408](https://cve.now/CVE-2026-23408.md): apparmor: Fix double free of ns\_name in aa\_replace\_profiles() (CVSS 7.8, Linux)
- [CVE-2026-23407](https://cve.now/CVE-2026-23407.md): apparmor: fix missing bounds check on DEFAULT table in verify\_dfa() (CVSS 7.8, Linux)
- [CVE-2026-23406](https://cve.now/CVE-2026-23406.md): apparmor: fix side-effect bug in match\_char() macro usage (CVSS 7.8, Linux)
- [CVE-2026-23405](https://cve.now/CVE-2026-23405.md): apparmor: fix: limit the number of levels of policy namespaces (no CVSS, Linux)
- [CVE-2026-23404](https://cve.now/CVE-2026-23404.md): apparmor: replace recursive profile removal with iterative approach (no CVSS, Linux)
- [CVE-2026-23403](https://cve.now/CVE-2026-23403.md): apparmor: fix memory leak in verify\_header (no CVSS, Linux)
- [CVE-2026-23402](https://cve.now/CVE-2026-23402.md): KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (no CVSS, Linux)
- [CVE-2026-23401](https://cve.now/CVE-2026-23401.md): KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (CVSS 8.1, Linux)
- [CVE-2026-5261](https://cve.now/CVE-2026-5261.md): Shandong Hoteam InforCenter PLM BaseHandler.ashx uploadFileToIIS unrestricted upload (CVSS 6.9, Shandong Hoteam InforCenter PLM)
- [CVE-2026-4370](https://cve.now/CVE-2026-4370.md): Improper TLS Client/Server authentication and certificate verification on Database Cluster (CVSS 10.0, Canonical Juju · github.com/juju/juju)
- [CVE-2026-28265](https://cve.now/CVE-2026-28265.md): PowerStore, contains a Path Traversal vulnerability in the Service user. (CVSS 4.4, Dell PowerStore)
- [CVE-2026-5259](https://cve.now/CVE-2026-5259.md): AutohomeCorp frostmourne Alarm Preview AlarmController.java server-side request forgery (CVSS 5.3, AutohomeCorp frostmourne)
- [CVE-2026-27101](https://cve.now/CVE-2026-27101.md): Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a (CVSS 4.7, Dell Secure Connect Gateway)
- [CVE-2026-5258](https://cve.now/CVE-2026-5258.md): Sanster IOPaint File Manager file\_manager.py \_get\_file path traversal (CVSS 6.9, Sanster IOPaint)
- [CVE-2026-4748](https://cve.now/CVE-2026-4748.md): pf silently ignores certain rules (CVSS 7.5, FreeBSD)
- [CVE-2026-5257](https://cve.now/CVE-2026-5257.md): code-projects Simple Laundry System Parameter delstaffinfo.php sql injection (CVSS 6.9, code-projects Simple Laundry System)
- [CVE-2026-5256](https://cve.now/CVE-2026-5256.md): code-projects Simple Laundry System Parameter modify.php sql injection (CVSS 6.9, code-projects Simple Laundry System)
- [CVE-2026-2696](https://cve.now/CVE-2026-2696.md): Export All URLs \< 5.1 - Unauthenticated Sensitive Data Exposure (CVSS 5.3, Export All URLs)
- [CVE-2025-15484](https://cve.now/CVE-2025-15484.md): Order Notification for WooCommerce \< 3.6.3 - Unauthenticated WooCommerce REST Permission Bypass (CVSS 9.1, Order Notification for WooCommerce)
- [CVE-2026-5255](https://cve.now/CVE-2026-5255.md): code-projects Simple Laundry System Parameter delstaffinfo.php cross site scripting (CVSS 5.3, code-projects Simple Laundry System)
- [CVE-2026-5292](https://cve.now/CVE-2026-5292.md): Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read v (CVSS 8.8, Google Chrome)
- [CVE-2026-5291](https://cve.now/CVE-2026-5291.md): Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive inf (CVSS 6.5, Google Chrome)
- [CVE-2026-5290](https://cve.now/CVE-2026-5290.md): Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to (CVSS 9.6, Google Chrome)
- [CVE-2026-5289](https://cve.now/CVE-2026-5289.md): Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to (CVSS 9.6, Google Chrome)
- [CVE-2026-5288](https://cve.now/CVE-2026-5288.md): Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer pro (CVSS 9.6, Google Chrome)
- [CVE-2026-5287](https://cve.now/CVE-2026-5287.md): Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-5273](https://cve.now/CVE-2026-5273.md): Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a cr (CVSS 6.3, Google Chrome)
- [CVE-2026-5286](https://cve.now/CVE-2026-5286.md): Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (CVSS 8.8, Google Chrome)
- [CVE-2026-5285](https://cve.now/CVE-2026-5285.md): Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-5284](https://cve.now/CVE-2026-5284.md): Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execut (CVSS 7.5, Google Chrome)
- [CVE-2026-5283](https://cve.now/CVE-2026-5283.md): Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a cra (CVSS 6.5, Google Chrome)
- [CVE-2026-5272](https://cve.now/CVE-2026-5272.md): Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML (CVSS 8.8, Google Chrome)
- [CVE-2026-5282](https://cve.now/CVE-2026-5282.md): Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read v (CVSS 8.1, Google Chrome)
- [CVE-2026-5281](https://cve.now/CVE-2026-5281.md): Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execut (CVSS 8.8, KEV, Google Chrome)
- [CVE-2026-5280](https://cve.now/CVE-2026-5280.md): Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-5279](https://cve.now/CVE-2026-5279.md): Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-5278](https://cve.now/CVE-2026-5278.md): Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a cra (CVSS 8.8, Google Chrome)
- [CVE-2026-5277](https://cve.now/CVE-2026-5277.md): Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer pro (CVSS 7.5, Google Chrome)
- [CVE-2026-5276](https://cve.now/CVE-2026-5276.md): Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive (CVSS 6.5, Google Chrome)
- [CVE-2026-5275](https://cve.now/CVE-2026-5275.md): Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a craf (CVSS 8.8, Google Chrome)
- [CVE-2026-5274](https://cve.now/CVE-2026-5274.md): Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform arbitrary read/write via a crafted (CVSS 8.8, Google Chrome)
- [CVE-2026-5254](https://cve.now/CVE-2026-5254.md): welovemedia FFmate Webhook AppJsonTreeView.vue cross site scripting (CVSS 5.1, welovemedia FFmate)
- [CVE-2026-5253](https://cve.now/CVE-2026-5253.md): bufanyun HotGo editNotice Endpoint MessageList.vue cross site scripting (CVSS 5.1, bufanyun HotGo)
- [CVE-2026-5252](https://cve.now/CVE-2026-5252.md): z-9527 admin Message Create Endpoint message.js cross site scripting (CVSS 5.1, z-9527 admin)
- [CVE-2026-5251](https://cve.now/CVE-2026-5251.md): z-9527 admin User Update Endpoint user.js dynamically-determined object attributes (CVSS 5.3, z-9527 admin)
- [CVE-2026-3774](https://cve.now/CVE-2026-3774.md): Self-Modifications Affecting Altered Printing and Redaction in Foxit PDF Editor (CVSS 4.7, Foxit Software Foxit PDF Editor)
- [CVE-2026-3775](https://cve.now/CVE-2026-3775.md): Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-3776](https://cve.now/CVE-2026-3776.md): Null pointer dereference in Foxit PDF Editor/Reader when accessing stamp annotation (CVSS 5.5, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-3780](https://cve.now/CVE-2026-3780.md): Foxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege Escalation (CVSS 7.3, Foxit Software Foxit PDF Reader · Foxit Software Foxit PDF…)
- [CVE-2026-3778](https://cve.now/CVE-2026-3778.md): Stack exhaustion caused by cyclic references in Foxit PDF Editor/Reader (CVSS 6.2, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-3779](https://cve.now/CVE-2026-3779.md): Foxit PDF Editor/Reader List Box Calculate Array Use-After-Free Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-3777](https://cve.now/CVE-2026-3777.md): Use after free of view cache in Foxit PDF Editor/Reader (CVSS 5.5, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-4947](https://cve.now/CVE-2026-4947.md): Insecure Direct Object Reference (IDOR) Leading to Signature Forgery in Foxit eSign (CVSS 7.1, Foxit Software na1.foxitesign.foxit.com)
- [CVE-2026-5249](https://cve.now/CVE-2026-5249.md): gougucms Record Endpoint record.html cross site scripting (CVSS 5.1, gougucms)
- [CVE-2026-3831](https://cve.now/CVE-2026-3831.md): Database for Contact Form 7, WPforms, Elementor forms \<= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode (CVSS 4.3, crmperks Database for Contact Form 7, WPforms, Elementor fo…)
- [CVE-2026-4374](https://cve.now/CVE-2026-4374.md): Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking, Data Serializat... (CVSS 8.8, RTI Connext Professional)
- [CVE-2026-2394](https://cve.now/CVE-2026-2394.md): Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. (CVSS 6.3, RTI Connext Professional)
- [CVE-2026-5248](https://cve.now/CVE-2026-5248.md): gougucms User Registration Login.php reg\_submit dynamically-determined object attributes (CVSS 5.3, gougucms)
- [CVE-2026-35057](https://cve.now/CVE-2026-35057.md): XenForo Stored Cross-Site Scripting via Structured Text Mentions (CVSS 5.1, XenForo)
- [CVE-2026-35056](https://cve.now/CVE-2026-35056.md): XenForo Remote Code Execution via Authenticated Admin (CVSS 8.6, XenForo)
- [CVE-2026-35055](https://cve.now/CVE-2026-35055.md): XenForo Cross-Site Scripting via Lightbox in Posts (CVSS 5.1, XenForo)
- [CVE-2026-35054](https://cve.now/CVE-2026-35054.md): XenForo Stored Cross-Site Scripting via BB Code Rendering (CVSS 5.1, XenForo)
- [CVE-2025-71282](https://cve.now/CVE-2025-71282.md): XenForo Path Disclosure via open\_basedir Exceptions (CVSS 8.7, XenForo)
- [CVE-2025-71281](https://cve.now/CVE-2025-71281.md): XenForo Template Method Call Restriction Bypass (CVSS 8.7, XenForo)
- [CVE-2025-71280](https://cve.now/CVE-2025-71280.md): XenForo Local Account Page Caching Information Disclosure (CVSS 6.9, XenForo)
- [CVE-2025-71279](https://cve.now/CVE-2025-71279.md): XenForo Passkey Security Bypass (CVSS 9.3, XenForo)
- [CVE-2025-71278](https://cve.now/CVE-2025-71278.md): XenForo OAuth2 Unauthorized Scope Request (CVSS 8.7, XenForo)
- [CVE-2024-58342](https://cve.now/CVE-2024-58342.md): XenForo Open Redirect via getDynamicRedirect (CVSS 5.3, XenForo)
- [CVE-2025-13855](https://cve.now/CVE-2025-13855.md): IBM Storage Protect Server is affected by a vulnerability that could allow authenticated users to access administrative metadata through the JSON-RPC endpoint . (CVSS 7.6, IBM Storage Protect Server)
- [CVE-2024-40489](https://cve.now/CVE-2024-40489.md): There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute (CVSS 9.8)
- [CVE-2024-43028](https://cve.now/CVE-2024-43028.md): A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code (CVSS 9.8)
- [CVE-2025-66442](https://cve.now/CVE-2025-66442.md): In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's sele (CVSS 5.1)
- [CVE-2025-67805](https://cve.now/CVE-2025-67805.md): A non-default configuration in Sage DPW 2025\_06\_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor featur (CVSS 5.9)
- [CVE-2025-67806](https://cve.now/CVE-2025-67806.md): The login mechanism of Sage DPW 2021\_06\_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing ac (CVSS 3.7)
- [CVE-2025-67807](https://cve.now/CVE-2025-67807.md): The login mechanism of Sage DPW 2025\_06\_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing ac (CVSS 4.7)
- [CVE-2026-25833](https://cve.now/CVE-2026-25833.md): Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509\_inet\_pton\_ipv6() function (CVSS 7.5)
- [CVE-2026-25834](https://cve.now/CVE-2026-25834.md): Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade. (CVSS 6.5)
- [CVE-2026-25835](https://cve.now/CVE-2026-25835.md): Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG). (CVSS 7.7)
- [CVE-2026-29598](https://cve.now/CVE-2026-29598.md): Multiple stored cross-site scripting (XSS) vulnerabilities in the submit\_add\_user.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allow a (CVSS 5.4)
- [CVE-2026-30273](https://cve.now/CVE-2026-30273.md): pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base.\_execute\_sql\_query component. (CVSS 7.3)
- [CVE-2026-30287](https://cve.now/CVE-2026-30287.md): An arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4.5 allows attackers to overwrite critical i (CVSS 8.4)
- [CVE-2026-30289](https://cve.now/CVE-2026-30289.md): An arbitrary file overwrite vulnerability in Tinybeans Private Family Album App v5.9.5-prod allows attackers to overwrite critical internal (CVSS 8.4)
- [CVE-2026-30291](https://cve.now/CVE-2026-30291.md): An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical interna (CVSS 8.4)
- [CVE-2026-30292](https://cve.now/CVE-2026-30292.md): An arbitrary file overwrite vulnerability in Docudepot PDF Reader: PDF Viewer APP v1.0.34 allows attackers to overwrite critical internal fi (CVSS 8.4)
- [CVE-2026-30522](https://cve.now/CVE-2026-30522.md): A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. (CVSS 6.5)
- [CVE-2026-30523](https://cve.now/CVE-2026-30523.md): A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. (CVSS 6.5)
- [CVE-2026-30526](https://cve.now/CVE-2026-30526.md): A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0. (CVSS 6.1)
- [CVE-2026-30573](https://cve.now/CVE-2026-30573.md): A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. (CVSS 7.5)
- [CVE-2026-30643](https://cve.now/CVE-2026-30643.md): An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload. (CVSS 9.8)
- [CVE-2026-31027](https://cve.now/CVE-2026-31027.md): TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste\_modules/app.so. (CVSS 9.8)
- [CVE-2026-34871](https://cve.now/CVE-2026-34871.md): An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. (CVSS 6.7)
- [CVE-2026-34872](https://cve.now/CVE-2026-34872.md): An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. (CVSS 9.1)
- [CVE-2026-34873](https://cve.now/CVE-2026-34873.md): An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. (CVSS 9.1)
- [CVE-2026-34874](https://cve.now/CVE-2026-34874.md): An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. (CVSS 7.5)
- [CVE-2026-34875](https://cve.now/CVE-2026-34875.md): An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-04-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.