Skip to content
Noroxi

Patch Tuesday

March 2026

On the second Tuesday of each month Microsoft, Adobe, SAP, Siemens and Schneider Electric publish in bulk; Oracle on the third Tuesday of January, April, July and October. Records published that day, from our own database, sorted by action score: KEV and mature exploits first.

How it is computed: CNA stamp + publication date (two-day window, UTC). No claim of a one-to-one match with the vendor bulletin; out-of-band updates land on other days.

186 records · 0 KEV

Affecting your stack

This month's records that match the products and versions in your stack.

Sign in to see the ones matching your stack; records and notifications are free. →

Microsoft · March 10

78 · 0 KEV · 1 critical
  • CVE-2026-26105
    37Monitor

    Microsoft SharePoint Server Spoofing Vulnerability

    CriticalCVSS 9.3No exploitEPSS 1%

    microsoft · sharepoint serverMar 10, 2026

  • CVE-2026-21262
    36Monitor

    SQL Server Elevation of Privilege Vulnerability

    HighCVSS 8.8No exploitEPSS 2%

    microsoft · sql server 2016Mar 10, 2026

  • CVE-2026-26114
    36Monitor

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 3%

    microsoft · sharepoint serverMar 10, 2026

  • CVE-2026-20967
    35Monitor

    System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    microsoft · system center operations managerMar 10, 2026

  • CVE-2026-23654
    35Monitor

    GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    microsoft · zero-shot-scfoundationMar 10, 2026

  • CVE-2026-23669
    35Monitor

    RPC Runtime Library Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    microsoft · windows 10 1607Mar 10, 2026

  • CVE-2026-24283
    35Monitor

    Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    microsoft · windows 11 24h2Mar 10, 2026

  • CVE-2026-25177
    35Monitor

    Active Directory Domain Services Elevation of Privilege Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 1%

    microsoft · windows 10 1607Mar 10, 2026

  • CVE-2026-25188
    35Monitor

    Windows Telephony Service Elevation of Privilege Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    microsoft · windows 10 1607Mar 10, 2026

  • CVE-2026-26106
    35Monitor

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    microsoft · sharepoint serverMar 10, 2026

  • CVE-2026-26115
    35Monitor

    SQL Server Elevation of Privilege Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    microsoft · sql server 2016Mar 10, 2026

  • CVE-2026-26116
    35Monitor

    SQL Server Elevation of Privilege Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    microsoft · sql server 2016Mar 10, 2026

+66 moreAll records of the vendor

Adobe · March 10

80 · 0 KEV · 0 critical
  • CVE-2026-21290
    34Monitor

    Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

    HighCVSS 8.7No exploitEPSS 0%

    adobe · commerce b2bMar 10, 2026

  • CVE-2026-21333
    34Monitor

    Illustrator | Untrusted Search Path (CWE-426)

    HighCVSS 8.6No exploitEPSS 0%

    adobe · illustratorMar 10, 2026

  • CVE-2026-21284
    32Monitor

    Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

    HighCVSS 8.1No exploitEPSS 0%

    adobe · commerce b2bMar 10, 2026

  • CVE-2026-21311
    32Monitor

    Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

    HighCVSS 8.0No exploitEPSS 0%

    adobe · commerceMar 10, 2026

  • CVE-2026-21361
    32Monitor

    Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

    HighCVSS 8.1No exploitEPSS 0%

    adobe · commerceMar 10, 2026

  • CVE-2026-21362
    31Monitor

    Illustrator | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · illustratorMar 10, 2026

  • CVE-2026-27220
    31Monitor

    Acrobat Reader | Use After Free (CWE-416)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · acrobat dcMar 10, 2026

  • CVE-2026-27267
    31Monitor

    Illustrator | Stack-based Buffer Overflow (CWE-121)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · illustratorMar 10, 2026

  • CVE-2026-27269
    31Monitor

    Premiere Pro | Out-of-bounds Read (CWE-125)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · premiere proMar 10, 2026

  • CVE-2026-27271
    31Monitor

    Illustrator | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · illustratorMar 10, 2026

  • CVE-2026-27272
    31Monitor

    Illustrator | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · illustratorMar 10, 2026

  • CVE-2026-27273
    31Monitor

    Substance3D - Stager | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d stagerMar 10, 2026

+68 moreAll records of the vendor

SAP · March 10

13 · 0 KEV · 1 critical
  • CVE-2026-27685
    36Monitor

    Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration

    CriticalCVSS 9.1No exploitEPSS 1%

    sap_se · sap netweaver enterprise portal administrationMar 10, 2026

  • CVE-2026-27689
    30Monitor

    Denial of service (DOS) in SAP Supply Chain Management

    HighCVSS 7.7No exploitEPSS 1%

    sap_se · sap supply chain managementMar 10, 2026

  • CVE-2026-24309
    25Monitor

    Missing Authorization check in SAP NetWeaver Application Server for ABAP

    MediumCVSS 6.4No exploitEPSS 0%

    sap · netweaver application server abapMar 10, 2026

  • CVE-2026-24316
    25Monitor

    Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP

    MediumCVSS 6.4No exploitEPSS 0%

    sap · netweaver application server abapMar 10, 2026

  • CVE-2026-27684
    25Monitor

    SQL Injection Vulnerability in SAP NetWeaver (Feedback Notification)

    MediumCVSS 6.4No exploitEPSS 0%

    sap_se · sap netweaver (feedback notification)Mar 10, 2026

  • CVE-2026-0489
    24Monitor

    DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service)

    MediumCVSS 6.1No exploitEPSS 0%

    sap_se · sap business one (job service)Mar 10, 2026

  • CVE-2026-27686
    23Monitor

    Missing Authorization check in SAP Business Warehouse (Service API)

    MediumCVSS 5.9No exploitEPSS 0%

    sap_se · sap business warehouse (service api)Mar 10, 2026

  • CVE-2026-27687
    23Monitor

    Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal

    MediumCVSS 5.8No exploitEPSS 0%

    sap_se · sap s/4hana hcm portugal and sap erp hcm portugalMar 10, 2026

  • CVE-2026-24311
    22Monitor

    Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0

    MediumCVSS 5.6No exploitEPSS 0%

    sap_se · sap customer checkout 2.0Mar 10, 2026

  • CVE-2026-24313
    20Monitor

    Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)

    MediumCVSS 5.0No exploitEPSS 0%

    sap_se · sap solution tools plug-in (st-pi)Mar 10, 2026

  • CVE-2026-24317
    20Monitor

    DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT

    MediumCVSS 5.0No exploitEPSS 0%

    sap_se · sap gui for windows with active guixtMar 10, 2026

  • CVE-2026-27688
    20Monitor

    Missing Authorization check in SAP NetWeaver Application Server for ABAP

    MediumCVSS 5.0No exploitEPSS 0%

    sap · netweaver application server abapMar 10, 2026

+1 moreAll records of the vendor

Siemens · March 10

9 · 0 KEV · 1 critical
  • CVE-2025-40943
    37Monitor

    Affected devices do not properly sanitize contents of trace files.

    CriticalCVSS 9.4No exploitEPSS 0%

    siemens · simatic drive controller cpu 1504d tfMar 10, 2026

  • CVE-2026-25573
    34Monitor

    A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).

    HighCVSS 8.6No exploitEPSS 1%

    siemens · sicam siapp sdkMar 10, 2026

  • CVE-2026-25569
    30Monitor

    A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).

    HighCVSS 7.5No exploitEPSS 0%

    siemens · sicam siapp sdkMar 10, 2026

  • CVE-2026-25570
    30Monitor

    A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).

    HighCVSS 7.5No exploitEPSS 0%

    siemens · sicam siapp sdkMar 10, 2026

  • CVE-2026-25571
    23Monitor

    A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).

    MediumCVSS 5.9No exploitEPSS 0%

    siemens · sicam siapp sdkMar 10, 2026

  • CVE-2026-25572
    23Monitor

    A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).

    MediumCVSS 5.9No exploitEPSS 0%

    siemens · sicam siapp sdkMar 10, 2026

  • CVE-2026-25605
    23Monitor

    A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).

    MediumCVSS 5.9No exploitEPSS 0%

    siemens · sicam siapp sdkMar 10, 2026

  • CVE-2026-27661
    21Monitor

    A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).

    MediumCVSS 5.3No exploitEPSS 0%

    siemens · sinec security monitorMar 10, 2026

  • CVE-2025-27769
    9Monitor

    A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC 40 kW EV Charging S

    LowCVSS 2.4No exploitEPSS 0%

    siemens · heliox flex 180 kw ev charging stationMar 10, 2026

All records of the vendor

Schneider Electric · March 10

6 · 0 KEV · 0 critical
  • CVE-2025-11739
    34Monitor

    CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges whe

    HighCVSS 8.5No exploitEPSS 0%

    schneider-electric · ecostruxure power monitoring expertMar 10, 2026

  • CVE-2025-13957
    30Monitor

    CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Pro

    HighCVSS 7.5No exploitEPSS 1%

    schneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert)Mar 10, 2026

  • CVE-2026-1286
    28Monitor

    CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote c

    HighCVSS 7.0No exploitEPSS 0%

    schneider-electric · ecostruxure foxboro dcs control softwareMar 10, 2026

  • CVE-2026-2273
    28Monitor

    CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on th

    HighCVSS 7.2No exploitEPSS 0%

    schneider-electric · ecostruxure automation expertMar 10, 2026

  • CVE-2025-13901
    27Monitor

    CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol whe

    MediumCVSS 6.9No exploitEPSS 0%

    schneider-electric · modicon m241 firmwareMar 10, 2026

  • CVE-2025-13902
    20Monitor

    CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition

    MediumCVSS 5.1No exploitEPSS 0%

    schneider-electric · modicon m258 firmwareMar 10, 2026

All records of the vendor