CVEs published March 16 to March 22, 2026
1,286 CVEs were published Mar 16 to Mar 22, 2026, 96 of them critical. CISA added 9 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,286
- Critical
- 96
- Added to CISA KEV
- 9
- Busiest day
- Fri, Mar 20 (304)
- Quietest day
- Sun, Mar 22 (80)
- March 16, 2026191 CVEs · 12 critical
- March 17, 2026113 CVEs · 10 critical
- March 18, 2026191 CVEs · 15 critical
- March 19, 2026245 CVEs · 30 critical
- March 20, 2026304 CVEs · 27 critical
- March 21, 2026162 CVEs · 1 critical
- March 22, 202680 CVEs · 1 critical
Added to CISA KEV 9
- CVE-2025-47813loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UIwftpserver Wing FTP Server
- CVE-2025-66376Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import dZimbra Collaboration
- CVE-2026-20963Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-20131Cisco Secure Firewall Management Center Software Remote Code Execution VulnerabilityCisco Secure Firewall Management Center
- CVE-2025-31277The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-32432Craft CMS Allows Remote Code Executioncraftcms cms · craftcms/cms
- CVE-2025-43510A memory corruption issue was addressed with improved lock state checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43520A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-54068Livewire vulnerable to remote command execution during property update hydrationlivewire · livewire/livewire