Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2026

342 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 4

  • CVE-2026-26801
    30Monitor

    Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive

    HighCVSS 7.5Proof of conceptEPSS 0%

    pdfmake · pdfmakeMar 10, 2026

  • CVE-2026-27280
    31Monitor

    DNG SDK | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8Proof of conceptEPSS 0%

    adobe · dng software development kitMar 10, 2026

  • CVE-2026-27826
    32Monitor

    MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers

    HighCVSS 8.2Proof of conceptEPSS 1%

    sooperset · mcp atlassianMar 10, 2026

  • CVE-2026-27825
    32Monitor

    MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment

    HighCVSS 8.0Proof of conceptEPSS 1%

    mcp-atlassian · mcp atlassianMar 10, 2026

  • CVE-2026-30951
    30Monitor

    Sequelize v6 Vulnerable to SQL Injection via JSON Column Cast Type

    HighCVSS 7.5Proof of conceptEPSS 0%

    sequelizejs · sequelizeMar 10, 2026

  • CVE-2026-30952
    34Monitor

    liquidjs has a path traversal fallback vulnerability

    HighCVSS 8.7Proof of conceptEPSS 0%

    liquidjs · liquidjsMar 10, 2026

  • CVE-2026-30965
    39Monitor

    Parse Server session token exfiltration via `redirectClassNameForKey` query parameter

    CriticalCVSS 9.9Proof of conceptEPSS 1%

    parseplatform · parse-serverMar 10, 2026

  • CVE-2026-31807
    25Monitor

    SiYuan has a SVG Sanitizer Bypass via `<animate>` Element — Unauthenticated XSS

    MediumCVSS 6.4Proof of conceptEPSS 0%

    b3log · siyuanMar 10, 2026

  • CVE-2026-31809
    25Monitor

    SiYuan has a SVG Sanitizer Bypass via Whitespace in `javascript:` URI — Unauthenticated XSS

    MediumCVSS 6.4Proof of conceptEPSS 0%

    b3log · siyuanMar 10, 2026

  • CVE-2026-30958
    34Monitor

    OneUptime: Path Traversal — Arbitrary File Read (No Auth)

    HighCVSS 8.6Proof of conceptEPSS 1%

    hackerbay · oneuptimeMar 10, 2026

  • CVE-2026-23813
    39Monitor

    Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    hpe · arubaos-cxMar 11, 2026

  • CVE-2026-2413
    31Monitor

    Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path

    HighCVSS 7.5Proof of conceptEPSS 2%

    elemntor · ally – web accessibility & usabilityMar 11, 2026

  • CVE-2026-2631
    39Monitor

    Datalogics Ecommerce Delivery < 2.6.60 - Unauthenticated Privilege Escalation

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    unknown · datalogics ecommerce deliveryMar 11, 2026

  • CVE-2026-31844
    34Monitor

    Authenticated SQL Injection in Koha displayby parameter of suggestion.pl

    HighCVSS 8.7Proof of conceptEPSS 0%

    koha · kohaMar 11, 2026

  • CVE-2026-3805
    30Monitor

    use after free in SMB connection reuse

    HighCVSS 7.5Proof of conceptEPSS 0%

    haxx · curlMar 11, 2026

  • CVE-2025-70330
    13Monitor

    Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files.

    LowCVSS 3.3Proof of conceptEPSS 0%

    Mar 11, 2026

  • CVE-2026-30741
    39Monitor

    A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Si

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    openclaw · openclawMar 11, 2026

  • CVE-2025-67034
    34Monitor

    Lantronix EDS5000, G520, and X300 OS Command Injection

    HighCVSS 8.6No exploitEPSS 0%

    lantronix · eds5032 firmwareMar 11, 2026

  • CVE-2025-67038
    73This week

    Lantronix EDS5000, G520, and X300 OS Command Injection

    CriticalCVSS 9.3KEVWeaponizedEPSS 19%

    lantronix · eds5008 firmwareMar 11, 2026

  • CVE-2026-31852
    39Monitor

    Jellyfin Possible Organization/Secret Compromise from dangerous CI implementation

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    jellyfin · jellyfinMar 11, 2026

  • CVE-2026-31857
    32Monitor

    CraftCMS has an RCE vulnerability via relational conditionals in the control panel

    HighCVSS 8.1Proof of conceptEPSS 0%

    craftcms · craft cmsMar 11, 2026

  • CVE-2026-31858
    34Monitor

    CraftCMS's `ElementSearchController` Affected by Blind SQL Injection

    HighCVSS 8.7No exploitEPSS 0%

    craftcms · craft cmsMar 11, 2026

  • CVE-2019-25485
    27Monitor

    R 3.4.4 Windows x64 Buffer Overflow SEH DEP ASLR Bypass

    MediumCVSS 6.9Proof of conceptEPSS 0%

    r-project · rMar 11, 2026

  • CVE-2026-31900
    34Monitor

    Black's vulnerable version parsing leads to RCE in GitHub Action

    HighCVSS 8.7Proof of conceptEPSS 0%

    python · blackMar 11, 2026

  • CVE-2026-32096
    34Monitor

    Plunk has SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns

    HighCVSS 8.6Proof of conceptEPSS 0%

    useplunk · plunkMar 11, 2026

  • CVE-2025-66956
    39Monitor

    Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute

    CriticalCVSS 9.9Proof of conceptEPSS 0%

    Mar 11, 2026

  • CVE-2026-32127
    35Monitor

    SQL Injection Vulnerability in ajax graphs library (OpenEMR)

    HighCVSS 8.8Proof of conceptEPSS 0%

    open-emr · openemrMar 11, 2026

  • CVE-2026-32128
    25Monitor

    FastGPT Python Sandbox Bypass of File-Write Restriction

    MediumCVSS 6.3Proof of conceptEPSS 0%

    fastgpt · fastgptMar 11, 2026

  • CVE-2026-32136
    39Monitor

    AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    adguard · adguardhomeMar 11, 2026

  • CVE-2026-4040
    19Monitor

    OpenClaw File Existence tools.exec.safeBins information exposure

    MediumCVSS 4.8Proof of conceptEPSS 0%

    openclaw · openclawMar 12, 2026

  • CVE-2026-27940
    31Monitor

    llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix

    HighCVSS 7.8Proof of conceptEPSS 0%

    ggml · llama.cppMar 12, 2026

  • CVE-2026-29066
    24Monitor

    Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI

    MediumCVSS 6.2Proof of conceptEPSS 0%

    ssw · tinacms\/cliMar 12, 2026

  • CVE-2025-66955
    26Monitor

    Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access file

    MediumCVSS 6.5Proof of conceptEPSS 0%

    asseco · liveMar 12, 2026

  • CVE-2026-32230
    21Monitor

    Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page

    MediumCVSS 5.3Proof of conceptEPSS 0%

    uptime.kuma · uptime kumaMar 12, 2026

  • CVE-2026-32247
    32Monitor

    Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

    HighCVSS 8.1Proof of conceptEPSS 0%

    getzep · graphitiMar 12, 2026

  • CVE-2026-3611
    40Plan

    Honeywell IQ4x BMS Controller Missing authentication for critical function

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    honeywell · iq4e firmwareMar 12, 2026

  • CVE-2025-60012
    25Monitor

    Apache Livy: Restrict file access

    MediumCVSS 6.3Proof of conceptEPSS 0%

    apache · livyMar 13, 2026

  • CVE-2025-66249
    25Monitor

    Apache Livy: Unauthorized directory access

    MediumCVSS 6.3Proof of conceptEPSS 0%

    apache · livyMar 13, 2026

  • CVE-2026-1668
    30Monitor

    Input Validation Vulnerability on Multiple Omada Switches

    HighCVSS 7.7Proof of conceptEPSS 1%

    tp-link · omada sg2005p-pd firmwareMar 13, 2026

  • CVE-2026-31899
    30Monitor

    CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification

    HighCVSS 7.5Proof of conceptEPSS 0%

    courtbouillon · cairosvgMar 13, 2026

  • CVE-2026-32445
    10Monitor

    WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerability

    LowCVSS 2.7No exploitEPSS 0%

    elementor · elementor website builderMar 13, 2026

  • CVE-2026-32746
    40Plan

    telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    gnu · inetutilsMar 13, 2026

  • CVE-2026-3891
    60This week

    Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8WeaponizedEPSS 29%

    linknacional · pix for woocommerceMar 13, 2026

  • CVE-2026-3909
    66This week

    Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a c

    HighCVSS 8.8KEVWeaponizedEPSS 2%

    google · chromeMar 13, 2026

  • CVE-2026-3910
    65This week

    Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sand

    HighCVSS 8.8KEVWeaponizedEPSS 1%

    google · chromeMar 13, 2026

  • CVE-2026-4111
    30Monitor

    Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

    HighCVSS 7.5No exploitEPSS 0%

    red hat · red hat enterprise linux 10Mar 13, 2026

  • CVE-2026-21001
    23Monitor

    Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege.

    MediumCVSS 5.9Proof of conceptEPSS 0%

    samsung · galaxy storeMar 16, 2026

  • CVE-2026-21002
    23Monitor

    Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary applic

    MediumCVSS 5.9Proof of conceptEPSS 0%

    samsung · galaxy storeMar 16, 2026

  • CVE-2026-21004
    27Monitor

    Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.

    MediumCVSS 6.9Proof of conceptEPSS 0%

    samsung · smart switchMar 16, 2026

  • CVE-2026-21005
    28Monitor

    Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege

    HighCVSS 7.1Proof of conceptEPSS 0%

    samsung · smart switchMar 16, 2026

  • CVE-2026-2461
    17Monitor

    Missing authorization check allows unauthorized modification of other users' comments on a board

    MediumCVSS 4.3Proof of conceptEPSS 0%

    mattermost · mattermost serverMar 16, 2026

  • CVE-2026-32621
    39Monitor

    Apollo Federation has prototype pollution via incomplete key sanitization

    CriticalCVSS 9.9Proof of conceptEPSS 0%

    @apollo · federation-internalsMar 16, 2026

  • CVE-2026-32635
    34Monitor

    Angular has XSS in i18n attribute bindings

    HighCVSS 8.6Proof of conceptEPSS 0%

    angular · angular cliMar 16, 2026

  • CVE-2026-32707
    24Monitor

    PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop

    MediumCVSS 6.1Proof of conceptEPSS 0%

    dronecode · px4 drone autopilotMar 16, 2026

  • CVE-2026-32772
    18Monitor

    telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.

    MediumCVSS 4.7No exploitEPSS 0%

    gnu · inetutilsMar 16, 2026

  • CVE-2026-3227
    35Monitor

    Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N

    HighCVSS 8.5Proof of conceptEPSS 1%

    tp-link · tl-wr802n firmwareMar 16, 2026

  • CVE-2026-4197
    15Monitor

    D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection

    LowCVSS 2.1No exploitEPSS 24%

    dlink · dnr-202l firmwareMar 16, 2026

  • CVE-2026-4255
    33Monitor

    DLL Injection Privilege Escalation

    HighCVSS 8.4Proof of conceptEPSS 0%

    thermalright · tr-vision homeMar 16, 2026

  • CVE-2026-32583
    21Monitor

    WordPress Modern Events Calendar plugin <= 7.29.0 - Broken Access Control vulnerability

    MediumCVSS 5.3Proof of conceptEPSS 0%

    webnus inc. · modern events calendarMar 16, 2026

  • CVE-2026-23489
    36Monitor

    Fields GLPI plugin vulnerable to RCE in dropdown generation

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    teclib-edition · fieldsMar 16, 2026

  • CVE-2026-4253
    11Monitor

    Tenda AC8 Web UploadCfg route_set_user_policy_rule os command injection

    LowCVSS 2.0Proof of conceptEPSS 8%

    tenda · ac8 firmwareMar 16, 2026

  • CVE-2025-69727
    21Monitor

    An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8.

    MediumCVSS 5.3Proof of conceptEPSS 0%

    Mar 16, 2026

  • CVE-2025-68971
    26Monitor

    In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment (e.g., to be as

    MediumCVSS 6.5Proof of conceptEPSS 0%

    Mar 16, 2026

  • CVE-2026-32263
    34Monitor

    Craft CMS vulnerable to behavior injection RCE via EntryTypesController

    HighCVSS 8.6No exploitEPSS 0%

    craftcms · craft cmsMar 16, 2026

  • CVE-2026-32264
    34Monitor

    Craft CMS vulnerable to behavior injection RCE ElementIndexesController and FieldsController

    HighCVSS 8.6No exploitEPSS 0%

    craftcms · craft cmsMar 16, 2026

  • CVE-2025-50881
    35Monitor

    The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution.

    HighCVSS 8.8Proof of conceptEPSS 0%

    Mar 16, 2026

  • CVE-2026-3888
    40Plan

    Local Privilege Escalation in snapd

    HighCVSS 7.8WeaponizedEPSS 0%

    canonical · ubuntu linuxMar 17, 2026

  • CVE-2026-25769
    36Monitor

    Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    wazuh · wazuhMar 17, 2026

  • CVE-2026-20643
    21Monitor

    A cross-origin issue in the Navigation API was addressed with improved input validation.

    MediumCVSS 5.4Proof of conceptEPSS 0%

    apple · ipadosMar 17, 2026

  • CVE-2026-21994
    39Monitor

    Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component:

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    oracle · okitMar 17, 2026

  • CVE-2026-27978
    21Monitor

    Next.js: null origin can bypass Server Actions CSRF checks

    MediumCVSS 5.3Proof of conceptEPSS 0%

    vercel · next.jsMar 17, 2026

  • CVE-2026-29057
    25Monitor

    Next.js: HTTP request smuggling in rewrites

    MediumCVSS 6.3Proof of conceptEPSS 0%

    vercel · next.jsMar 17, 2026

  • CVE-2026-31891
    26Monitor

    Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()

    MediumCVSS 6.5Proof of conceptEPSS 0%

    agentejo · cockpitMar 18, 2026

  • CVE-2026-32596
    35Monitor

    Glances exposes the REST API without authentication

    HighCVSS 8.7Proof of conceptEPSS 1%

    nicolargo · glancesMar 18, 2026

  • CVE-2026-32606
    30Monitor

    IncusOS has a LUKS encryption bypass due to insufficient TPM policy

    HighCVSS 7.6Proof of conceptEPSS 0%

    lxc · incus-osMar 18, 2026

  • CVE-2026-22730
    35Monitor

    CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter

    HighCVSS 8.8Proof of conceptEPSS 0%

    vmware · spring aiMar 18, 2026

  • CVE-2026-2991
    29Monitor

    KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token

    HighCVSS 7.3Proof of conceptEPSS 0%

    iqonicdesign · kivicare – clinic & patient management system (ehr)Mar 18, 2026

  • CVE-2026-30345
    30Monitor

    A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitrary files outside the

    HighCVSS 7.5Proof of conceptEPSS 0%

    Mar 18, 2026

  • CVE-2026-30695
    24Monitor

    A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, includ

    MediumCVSS 6.1Proof of conceptEPSS 0%

    Mar 18, 2026

  • CVE-2026-30048
    21Monitor

    A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4.

    MediumCVSS 5.4Proof of conceptEPSS 0%

    Mar 18, 2026

  • CVE-2026-31962
    35Monitor

    HTSlib CRAM reader has heap buffer overflow due to improper validation of input

    HighCVSS 8.8No exploitEPSS 0%

    htslib · htslibMar 18, 2026

  • CVE-2026-31967
    27Monitor

    HTSlib CRAM reader has out-of-bounds read due to improper validation of input

    MediumCVSS 6.9No exploitEPSS 0%

    htslib · htslibMar 18, 2026

  • CVE-2026-32321
    35Monitor

    ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration

    HighCVSS 8.8Proof of conceptEPSS 0%

    oxygenz · clipbucketMar 18, 2026

  • CVE-2026-32722
    24Monitor

    Memray-generated HTML reports vulnerable to Stored XSS via unescaped command-line metadata

    MediumCVSS 6.1Proof of conceptEPSS 0%

    bloomberg · memrayMar 18, 2026

  • CVE-2026-32731
    39Monitor

    ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction

    CriticalCVSS 9.9Proof of conceptEPSS 0%

    apostrophecms · import-exportMar 18, 2026

  • CVE-2026-32255
    35Monitor

    Kan is Vulnerable to Unauthenticated SSRF via Attachment Download Endpoint

    HighCVSS 8.6Proof of conceptEPSS 1%

    kan · kanMar 18, 2026

  • CVE-2026-32743
    26Monitor

    PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling

    MediumCVSS 6.5Proof of conceptEPSS 0%

    dronecode · px4 drone autopilotMar 18, 2026

  • CVE-2026-29608
    21Monitor

    OpenClaw 2026.3.1 < 2026.3.2 - Approval Integrity Bypass via system.run argv Rewriting

    MediumCVSS 5.4No exploitEPSS 0%

    openclaw · openclawMar 18, 2026

  • CVE-2026-27540
    36Monitor

    WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.0Proof of conceptEPSS 1%

    rymera web co pty ltd. · woocommerce wholesale lead captureMar 19, 2026

  • CVE-2026-27542
    40Plan

    WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    rymera web co pty ltd. · woocommerce wholesale lead captureMar 19, 2026

  • CVE-2025-71257
    40Plan

    BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass

    MediumCVSS 6.9Proof of conceptEPSS 44%

    bmc · footprintsMar 19, 2026

  • CVE-2025-71258
    26Monitor

    BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWeb

    MediumCVSS 5.3Proof of conceptEPSS 17%

    bmc · footprintsMar 19, 2026

  • CVE-2025-71259
    25Monitor

    BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS

    MediumCVSS 5.3Proof of conceptEPSS 12%

    bmc · footprintsMar 19, 2026

  • CVE-2025-71260
    44Plan

    BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE

    HighCVSS 8.7Proof of conceptEPSS 34%

    bmc · footprintsMar 19, 2026

  • CVE-2025-69720
    31Monitor

    The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

    HighCVSS 7.8Proof of conceptEPSS 0%

    invisible-island · ncursesMar 19, 2026

  • CVE-2026-22557
    48Plan

    A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access f

    CriticalCVSS 10.0Proof of conceptEPSS 28%

    ubiquiti inc · unifi network applicationMar 19, 2026

  • CVE-2026-32238
    37Monitor

    OpenEMR has Remote Code Execution in backup functionality

    CriticalCVSS 9.1Proof of conceptEPSS 2%

    open-emr · openemrMar 19, 2026

  • CVE-2026-27454
    21Monitor

    Discourse has check revision visibility on posts endpoint

    MediumCVSS 5.3Proof of conceptEPSS 0%

    discourse · discourseMar 19, 2026

  • CVE-2026-27934
    34Monitor

    Discourse leaks private topic title and post excerpt via user action API endpoint

    HighCVSS 8.7Proof of conceptEPSS 1%

    discourse · discourseMar 19, 2026

  • CVE-2026-32013
    34Monitor

    OpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods

    HighCVSS 8.7Proof of conceptEPSS 0%

    openclaw · openclawMar 19, 2026