By publication date

Exploited and new serious CVEs: March 2026

349 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 3 of 4

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
49Plan	CVE-2026-22557Proof of concept	A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access fubiquiti inc · unifi network application · CWE-22 Pre-auth Path traversal	Critical10.0	—	28.6%	Mar 19, 2026
37Monitor	CVE-2026-32238Proof of concept	OpenEMR has Remote Code Execution in backup functionalityopen-emr · openemr · CWE-78 RCE Command injection	Critical9.1	—	2.0%	Mar 19, 2026
21Monitor	CVE-2026-27454Proof of concept	Discourse has check revision visibility on posts endpointdiscourse · discourse · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.9%	Mar 19, 2026
34Monitor	CVE-2026-27934Proof of concept	Discourse leaks private topic title and post excerpt via user action API endpointdiscourse · discourse · CWE-201 Pre-auth	High8.7	—	1.2%	Mar 19, 2026
34Monitor	CVE-2026-32013Proof of concept	OpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methodsopenclaw · openclaw · CWE-59	High8.7	—	0.6%	Mar 19, 2026
28Monitor	CVE-2026-32026No exploit	OpenClaw < 2026.2.24 - Arbitrary File Read via Improper Temporary Path Validation in Sandboxopenclaw · openclaw · CWE-22 Path traversal	High7.1	—	0.3%	Mar 19, 2026
39Monitor	CVE-2026-32194Proof of concept	Microsoft Bing Images Remote Code Execution Vulnerabilitymicrosoft · bing images · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.2%	Mar 19, 2026
35Monitor	CVE-2026-4342Proof of concept	ingress-nginx comment-based nginx configuration injectionkubernetes · nginx ingress controller · CWE-20 RCE	High8.8	—	1.4%	Mar 19, 2026
36Monitor	CVE-2026-22732Proof of concept	Under Some Conditions Spring Security HTTP Headers Are not Writtenvmware · spring security · CWE-425 Pre-auth	Critical9.1	—	0.5%	Mar 19, 2026
35Monitor	CVE-2026-29102No exploit	SuiteCRM has Authenticated RCE in Modulessuitecrm · suitecrm · CWE-94 RCE	High8.8	—	0.5%	Mar 19, 2026
28Monitor	CVE-2026-29103No exploit	SuiteCRM Vulnerable to Remote Code Execution via Module Loader Package Scanner Bypasssuitecrm · suitecrm · CWE-94 RCE	High7.2	—	0.5%	Mar 19, 2026
60This week	CVE-2026-32985Weaponized	Xerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code Executionapereo · xerte online toolkits · CWE-306 pre-auth RCE Auth bypass File upload	Critical9.3	—	1.5%	Mar 19, 2026
35Monitor	CVE-2026-4444Proof of concept	Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption vgoogle · chrome · CWE-121 Pre-auth Memory safety	High8.8	—	0.3%	Mar 19, 2026
35Monitor	CVE-2026-4447Proof of concept	Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sangoogle · chrome · CWE-693 pre-auth RCE	High8.8	—	0.3%	Mar 19, 2026
22Monitor	CVE-2026-32941Proof of concept	Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transportsbishopfox · sliver · CWE-770 Denial of service	Medium5.7	—	0.3%	Mar 20, 2026
33Monitor	CVE-2026-32945Proof of concept	PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parserpjsip · pjsip · CWE-122 Pre-auth Memory safety	High8.4	—	0.3%	Mar 20, 2026
96Now	CVE-2026-33017Weaponized	Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpointlangflow · langflow · CWE-94 pre-auth RCE	Critical9.3	KEV	96.1%	Mar 20, 2026
41Plan	CVE-2026-33057Proof of concept	Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-pymesop-dev · mesop · CWE-94 pre-auth RCE Auth bypass	Critical9.8	—	5.2%	Mar 20, 2026
21Monitor	CVE-2026-33067Proof of concept	SiYuan has Stored XSS to RCE via Unsanitized Bazaar Package Metadatab3log · siyuan · CWE-79 RCE XSS	Medium5.3	—	0.5%	Mar 20, 2026
37Monitor	CVE-2026-33075Proof of concept	FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.ymlfastgpt · fastgpt · CWE-494 RCE	Critical9.4	—	0.3%	Mar 20, 2026
39Monitor	CVE-2026-32710Proof of concept	Heap-based Buffer Overflow in MariaDBmariadb · mariadb · CWE-122 RCE Memory safety	Critical9.9	—	0.8%	Mar 20, 2026
31Monitor	CVE-2026-33147Proof of concept	GMT: Stack-based Buffer Overflow in gmt_remote_dataset_idgeneric-mapping-tools · gmt · CWE-121 RCE Memory safety	High7.8	—	0.1%	Mar 20, 2026
31Monitor	CVE-2026-33150Proof of concept	Use After Free in libfuselibfuse project · libfuse · CWE-416 RCE Memory safety	High7.8	—	0.3%	Mar 20, 2026
32Monitor	CVE-2026-33154Proof of concept	dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolverdynaconf · dynaconf · CWE-94 pre-auth RCE SSTI	High8.1	—	0.5%	Mar 20, 2026
31Monitor	CVE-2026-23536Proof of concept	Feast: unauthenticated arbitrary file readred hat · red hat openshift ai (rhoai) · CWE-22 Pre-auth Path traversal	High7.5	—	2.4%	Mar 20, 2026
41Plan	CVE-2026-3584Proof of concept	Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_processwpchill · kali forms — contact form & drag-and-drop builder · CWE-94 pre-auth RCE	Critical9.8	—	7.2%	Mar 20, 2026
36Monitor	CVE-2026-33186Proof of concept	gRPC-Go has an authorization bypass via missing leading slash in :pathgrpc · grpc · CWE-285 Pre-auth Broken access control (IDOR)	Critical9.1	—	1.5%	Mar 20, 2026
31Monitor	CVE-2026-33476Proof of concept	SiYuan has an Unauthenticated Arbitrary File Read via Path Traversalb3log · siyuan · CWE-22 Pre-auth Path traversal	High7.5	—	3.2%	Mar 20, 2026
27Monitor	CVE-2026-33425Proof of concept	Discourse has inferable private group membership or existence via exclude_groups parameterdiscourse · discourse · CWE-203 Pre-auth	Medium6.9	—	0.6%	Mar 20, 2026
25Monitor	CVE-2026-3516Proof of concept	Contact List <= 3.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' Parameteranssilaitila · contact list – online staff directory & address book · CWE-79 XSS	Medium6.4	—	0.2%	Mar 20, 2026
25Monitor	CVE-2026-3333Proof of concept	MinhNhut Link Gateway <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesminhnhut · minhnhut link gateway · CWE-79 XSS	Medium6.4	—	0.2%	Mar 21, 2026
21Monitor	CVE-2026-3335Proof of concept	Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Uploadflightbycanto · canto · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	1.1%	Mar 21, 2026
32Monitor	CVE-2026-3629Proof of concept	Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fieldscarazo · import and export users and customers · CWE-269 Pre-auth	High8.1	—	0.4%	Mar 21, 2026
36Monitor	CVE-2026-4567Proof of concept	Tenda A15 UploadCfg stack-based overflowtenda · a15 firmware · CWE-119 Pre-auth Memory safety	High8.9	—	3.7%	Mar 22, 2026
44Plan	CVE-2026-33478Proof of concept	AVideo Multi-Chain Attack: Unauthenticated Remote Code Execution via Clone Key Disclosure, Database Dump, and Command Injectionwwbn · avideo · CWE-78 pre-auth RCE Auth bypass Command injection	Critical10.0	—	13.2%	Mar 23, 2026
36Monitor	CVE-2026-24516Proof of concept	A command injection vulnerability exists in DigitalOcean Droplet Agent through 1.3.2.CWE-94 RCE Command injection	High8.8	—	2.5%	Mar 23, 2026
34Monitor	CVE-2026-25075Proof of concept	strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflowstrongswan · strongswan · CWE-191 Pre-auth Memory safety	High8.7	—	1.0%	Mar 23, 2026
21Monitor	CVE-2024-46878Proof of concept	A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier.tiki · tiki · CWE-79 RCE XSS	Medium5.4	—	0.2%	Mar 23, 2026
21Monitor	CVE-2024-46879Proof of concept	A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2.tiki · tiki · CWE-79 RCE XSS	Medium5.4	—	0.2%	Mar 23, 2026
24Monitor	CVE-2025-52204Proof of concept	A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameterCWE-79 Pre-auth XSS	Medium6.1	—	0.2%	Mar 23, 2026
38Monitor	CVE-2026-30849Proof of concept	MantisBT SOAP API has an authentication bypass vulnerability on MySQLmantisbt · mantisbt · CWE-305 Pre-auth Auth bypass	Critical9.3	—	1.7%	Mar 23, 2026
32Monitor	CVE-2026-23482Proof of concept	Blinko: Unauthorized Arbitrary File Read - /api/file/tempblinko · blinko · CWE-22 Pre-auth Path traversal	High8.2	—	1.5%	Mar 23, 2026
27Monitor	CVE-2026-23483Proof of concept	Blinko: Unauthorized Arbitrary File Read - /pluginsblinko · blinko · CWE-22 Pre-auth Path traversal	Medium6.9	—	0.7%	Mar 23, 2026
27Monitor	CVE-2026-23486Proof of concept	Blinko: Unauthorized User Information Leakblinko · blinko · CWE-200 Pre-auth Info leak	Medium6.9	—	0.7%	Mar 23, 2026
94Now	CVE-2026-3055Weaponized	Insufficient input validation leading to memory overreadcitrix · netscaler application delivery controller · CWE-125 Pre-auth Memory safety	Critical9.3	KEV	91.4%	Mar 23, 2026
35Monitor	CVE-2026-32913Proof of concept	OpenClaw < 2026.3.7 - Custom Authorization Header Leakage via Cross-Origin Redirectsopenclaw · openclaw · CWE-522 Pre-auth Info leak	High8.8	—	0.3%	Mar 23, 2026
85Now	CVE-2026-33634Weaponized	Trivy ecosystem supply chain briefly compromisedaquasec · setup-trivy · CWE-506	Critical9.4	KEV	59.7%	Mar 23, 2026
39Monitor	CVE-2026-4001Proof of concept	Woocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formulaacowebs · woocommerce custom product addons pro · CWE-95 pre-auth RCE	Critical9.8	—	0.8%	Mar 23, 2026
34Monitor	CVE-2026-22739Proof of concept	Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacksvmware · spring cloud config · CWE-22 Pre-auth SSRF Path traversal	High8.6	—	1.2%	Mar 23, 2026
24Monitor	CVE-2026-33320Proof of concept	Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of servicetomwright · dasel · CWE-674 Denial of service	Medium6.2	—	0.2%	Mar 23, 2026
30Monitor	CVE-2026-4662No exploit	JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parametercrocoblock · jetengine · CWE-89 Pre-auth SQL injection	High7.5	—	0.3%	Mar 24, 2026
43Plan	CVE-2026-33309No exploit	Langflow has an Arbitrary File Write (RCE) via v2 APIlangflow · langflow · CWE-22 RCE Path traversal	Critical9.9	—	13.4%	Mar 24, 2026
37Monitor	CVE-2026-33475Proof of concept	Langflow GitHub Actions Shell Injectionlangflow · langflow · CWE-74 pre-auth RCE	Critical9.1	—	3.1%	Mar 24, 2026
40Plan	CVE-2026-4692Proof of concept	Sandbox escape in the Responsive Design Mode componentmozilla · firefox · CWE-653 Pre-auth	Critical10.0	—	0.5%	Mar 24, 2026
35Monitor	CVE-2026-33310Proof of concept	Intake has a Command Injection via shell() Expansion in Parameter Defaultsintake · intake · CWE-78 pre-auth RCE Command injection	High8.8	—	0.4%	Mar 24, 2026
40Plan	CVE-2026-33497Proof of concept	Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file readinglangflow · langflow · CWE-22 Pre-auth Path traversal	High8.7	—	19.5%	Mar 24, 2026
43Plan	CVE-2026-27654Proof of concept	NGINX ngx_http_dav_module vulnerabilityf5 · nginx plus · CWE-122 Pre-auth Memory safety	High8.8	—	25.9%	Mar 24, 2026
21Monitor	CVE-2026-28755Proof of concept	NGINX ngx_stream_ssl_module vulnerabilityf5 · nginx plus · CWE-863 Broken access control (IDOR)	Medium5.3	—	0.1%	Mar 24, 2026
26Monitor	CVE-2026-30655Proof of concept	SQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows unauthenticated remote attackers to gain unauthesiclivre · esiclivre · CWE-89 Pre-auth SQL injection	Medium6.5	—	0.5%	Mar 24, 2026
42Plan	CVE-2026-33340Proof of concept	LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpointlollms · lollms web ui · CWE-306 Pre-auth Auth bypass SSRF	Critical9.1	—	21.6%	Mar 24, 2026
34Monitor	CVE-2026-33157Proof of concept	Craft CMS: Potential authenticated Remote Code Execution via malicious attached Behaviorcraftcms · craft cms · CWE-470 RCE	High8.6	—	1.1%	Mar 24, 2026
35Monitor	CVE-2026-23921Proof of concept	Blind, read-only SQL injection in Zabbix API via sortfield parameterzabbix · zabbix · CWE-89 RCE SQL injection	High8.7	—	4.0%	Mar 24, 2026
21Monitor	CVE-2026-33331Proof of concept	oRPC: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringifyorpc · orpc · CWE-79 RCE XSS	Medium5.4	—	0.2%	Mar 24, 2026
24Monitor	CVE-2026-20637Proof of concept	A use after free issue was addressed with improved memory management.apple · ipados · CWE-416 Memory safety Denial of service	Medium6.2	—	0.2%	Mar 24, 2026
28Monitor	CVE-2026-20687Proof of concept	A use after free issue was addressed with improved memory management.apple · ipados · CWE-416 Memory safety	High7.1	—	0.3%	Mar 24, 2026
31Monitor	CVE-2026-20698Proof of concept	The issue was addressed with improved memory handling.apple · ipados · CWE-787 Memory safety	High7.8	—	0.3%	Mar 24, 2026
39Monitor	CVE-2026-28858Proof of concept	A buffer overflow was addressed with improved bounds checking.apple · ipados · CWE-120 Pre-auth Memory safety	Critical9.8	—	0.5%	Mar 24, 2026
24Monitor	CVE-2026-28867Proof of concept	This issue was addressed with improved authentication.apple · ipados	Medium6.2	—	0.2%	Mar 24, 2026
31Monitor	CVE-2026-1519No exploit	Excessive NSEC3 iterations cause high CPU load during insecure delegation validationisc · bind · CWE-606 Pre-auth Denial of service	High7.5	—	1.6%	Mar 25, 2026
40Plan	CVE-2026-26830Proof of concept	pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter.pdf-image project · pdf-image · CWE-94 pre-auth RCE Command injection	Critical9.8	—	2.5%	Mar 25, 2026
40Plan	CVE-2026-26831Proof of concept	textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors.dbashford · textract · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.5%	Mar 25, 2026
40Plan	CVE-2026-26832Proof of concept	node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR.zapolnoch · tesseract ocr · CWE-78 pre-auth RCE Command injection	Critical9.8	—	1.7%	Mar 25, 2026
40Plan	CVE-2026-26833Proof of concept	thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because user immahrous · thumbler · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.3%	Mar 25, 2026
22Monitor	CVE-2026-25645Proof of concept	Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility functionpython · requests · CWE-377	Medium5.5	—	0.1%	Mar 25, 2026
32Monitor	CVE-2026-32488Proof of concept	WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerabilitywpeverest · user registration · CWE-266 Pre-auth	High8.1	—	0.3%	Mar 25, 2026
35Monitor	CVE-2026-29187Proof of concept	OpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.phpopen-emr · openemr · CWE-89 RCE SQL injection	High8.8	—	0.4%	Mar 25, 2026
35Monitor	CVE-2026-33910Proof of concept	OpenEMR has a SQL Injection Vulnerability in patient selectionopen-emr · openemr · CWE-89 SQL injection	High8.8	—	0.4%	Mar 25, 2026
35Monitor	CVE-2026-33917Proof of concept	OpenEMR has SQL Injection in CAMOS Formopen-emr · openemr · CWE-89 SQL injection	High8.8	—	0.4%	Mar 25, 2026
35Monitor	CVE-2026-4484Proof of concept	Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administratormasteriyo · masteriyo lms – online course builder for elearning, lms & education · CWE-862 Broken access control (IDOR)	High8.8	—	0.3%	Mar 25, 2026
35Monitor	CVE-2026-2931Proof of concept	Amelia Booking <= 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Changeameliabooking · booking for appointments and events calendar – amelia · CWE-269 Broken access control (IDOR)	High8.8	—	0.4%	Mar 26, 2026
32Monitor	CVE-2026-4840No exploit	Netcore Power 15AX Diagnostic Tool netis.cgi setTools os command injectionnetcore · power 15ax · CWE-77 RCE Command injection	High7.4	—	10.6%	Mar 26, 2026
21Monitor	CVE-2026-1890Proof of concept	LeadConnector < 3.0.22 - Unauthenticated Rest Callunknown · leadconnector · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.6%	Mar 26, 2026
36Monitor	CVE-2026-4747Proof of concept	Remote code execution via RPCSEC_GSS packet validationfreebsd · freebsd · CWE-121 RCE Memory safety	High8.8	—	3.4%	Mar 26, 2026
29Monitor	CVE-2026-4861Proof of concept	Wavlink WL-NU516U1 nas.cgi ftext stack-based overflowwavlink · wl-nu516u1 firmware · CWE-119 Memory safety	High7.4	—	0.8%	Mar 26, 2026
22Monitor	CVE-2026-23398Proof of concept	icmp: fix NULL pointer dereference in icmp_tag_validation()linux · linux kernel · CWE-476 Memory safety Denial of service	Medium5.5	—	0.1%	Mar 26, 2026
36Monitor	CVE-2026-1961Proof of concept	Forman: foreman: remote code execution via command injection in websocket proxyredhat · satellite · CWE-78 pre-auth RCE Command injection	High8.8	—	1.9%	Mar 26, 2026
32Monitor	CVE-2026-33149Proof of concept	Tandoor Recipes Vulnerable to Host Header Injectiontandoor · recipes · CWE-644	High8.1	—	0.3%	Mar 26, 2026
30Monitor	CVE-2026-32286Proof of concept	Denial of service in github.com/jackc/pgproto3/v2jackc · pgproto3 · CWE-129 Pre-auth Denial of service	High7.5	—	0.6%	Mar 26, 2026
17Monitor	CVE-2026-33532Proof of concept	yaml is vulnerable to Stack Overflow via deeply nested YAML collectionseemeli · yaml · CWE-674 Denial of service	Medium4.3	—	0.4%	Mar 26, 2026
30Monitor	CVE-2026-33671Proof of concept	Picomatch has a ReDoS vulnerability via extglob quantifiersjonschlinkert · picomatch · CWE-1333 Pre-auth Denial of service	High7.5	—	0.4%	Mar 26, 2026
19Monitor	CVE-2026-33531Proof of concept	InvenTree has Path Traversal In Report Templatesinventree project · inventree · CWE-89 SQL injection Path traversal	Medium4.9	—	0.3%	Mar 26, 2026
25Monitor	CVE-2026-33697Proof of concept	CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keysultraviolet · cocos ai · CWE-322	Medium6.3	—	0.0%	Mar 26, 2026
26Monitor	CVE-2026-33693Proof of concept	Lemmy's Activitypub-Federation has SSRF via 0.0.0.0 bypass in activitypub-federation-rust v4_is_invalid()lemmynet · lemmy · CWE-918 Pre-auth SSRF	Medium6.5	—	0.3%	Mar 26, 2026
37Monitor	CVE-2026-33701Proof of concept	OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Executionlinuxfoundation · opentelemetry instrumentation for java · CWE-502 pre-auth RCE Deserialization	Critical9.3	—	0.9%	Mar 26, 2026
40Plan	CVE-2026-33718Proof of concept	OpenHands is Vulnerable to Command Injection through its Git Diff Handleropenhands · openhands · CWE-78 RCE Command injection	Critical9.9	—	2.0%	Mar 26, 2026
28Monitor	CVE-2026-33725Proof of concept	Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Importmetabase · metabase · CWE-502 RCE Deserialization	High7.2	—	0.7%	Mar 26, 2026
26Monitor	CVE-2026-3098Proof of concept	Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAllnextendweb · smart slider 3 · CWE-862 Broken access control (IDOR)	Medium6.5	—	0.4%	Mar 27, 2026
39Monitor	CVE-2026-22738Proof of concept	SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Executionvmware · spring ai · CWE-917 pre-auth RCE	Critical9.8	—	1.1%	Mar 27, 2026
35Monitor	CVE-2026-25099Proof of concept	Remote Code Execution via Unrestricted File Upload in Bluditbludit · bludit · CWE-434 RCE File upload	High8.7	—	1.9%	Mar 27, 2026
32Monitor	CVE-2026-24031Proof of concept	Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.dovecot · dovecot · CWE-89 Pre-auth Auth bypass SQL injection	High8.2	—	0.4%	Mar 27, 2026

CVE-2026-22557
49Plan
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access f
CriticalCVSS 10.0Proof of conceptEPSS 28%
- Pre-auth
- Path traversal
ubiquiti inc · unifi network applicationMar 19, 2026
CVE-2026-32238
37Monitor
OpenEMR has Remote Code Execution in backup functionality
CriticalCVSS 9.1Proof of conceptEPSS 2%
- RCE
- Command injection
open-emr · openemrMar 19, 2026
CVE-2026-27454
21Monitor
Discourse has check revision visibility on posts endpoint
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
discourse · discourseMar 19, 2026
CVE-2026-27934
34Monitor
Discourse leaks private topic title and post excerpt via user action API endpoint
HighCVSS 8.7Proof of conceptEPSS 1%
- Pre-auth
discourse · discourseMar 19, 2026
CVE-2026-32013
34Monitor
OpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods
HighCVSS 8.7Proof of conceptEPSS 0%
openclaw · openclawMar 19, 2026
CVE-2026-32026
28Monitor
OpenClaw < 2026.2.24 - Arbitrary File Read via Improper Temporary Path Validation in Sandbox
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
openclaw · openclawMar 19, 2026
CVE-2026-32194
39Monitor
Microsoft Bing Images Remote Code Execution Vulnerability
CriticalCVSS 9.8Proof of conceptEPSS 1%
- pre-auth RCE
- Command injection
microsoft · bing imagesMar 19, 2026
CVE-2026-4342
35Monitor
ingress-nginx comment-based nginx configuration injection
HighCVSS 8.8Proof of conceptEPSS 1%
- RCE
kubernetes · nginx ingress controllerMar 19, 2026
CVE-2026-22732
36Monitor
Under Some Conditions Spring Security HTTP Headers Are not Written
CriticalCVSS 9.1Proof of conceptEPSS 0%
- Pre-auth
vmware · spring securityMar 19, 2026
CVE-2026-29102
35Monitor
SuiteCRM has Authenticated RCE in Modules
HighCVSS 8.8No exploitEPSS 0%
- RCE
suitecrm · suitecrmMar 19, 2026
CVE-2026-29103
28Monitor
SuiteCRM Vulnerable to Remote Code Execution via Module Loader Package Scanner Bypass
HighCVSS 7.2No exploitEPSS 0%
- RCE
suitecrm · suitecrmMar 19, 2026
CVE-2026-32985
60This week
Xerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code Execution
CriticalCVSS 9.3WeaponizedEPSS 1%
- pre-auth RCE
- Auth bypass
- File upload
apereo · xerte online toolkitsMar 19, 2026
CVE-2026-4444
35Monitor
Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption v
HighCVSS 8.8Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
google · chromeMar 19, 2026
CVE-2026-4447
35Monitor
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a san
HighCVSS 8.8Proof of conceptEPSS 0%
- pre-auth RCE
google · chromeMar 19, 2026
CVE-2026-32941
22Monitor
Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports
MediumCVSS 5.7Proof of conceptEPSS 0%
- Denial of service
bishopfox · sliverMar 20, 2026
CVE-2026-32945
33Monitor
PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser
HighCVSS 8.4Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
pjsip · pjsipMar 20, 2026
CVE-2026-33017
96Now
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
CriticalCVSS 9.3KEVWeaponizedEPSS 96%
- pre-auth RCE
langflow · langflowMar 20, 2026
CVE-2026-33057
41Plan
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
CriticalCVSS 9.8Proof of conceptEPSS 5%
- pre-auth RCE
- Auth bypass
mesop-dev · mesopMar 20, 2026
CVE-2026-33067
21Monitor
SiYuan has Stored XSS to RCE via Unsanitized Bazaar Package Metadata
MediumCVSS 5.3Proof of conceptEPSS 0%
- RCE
- XSS
b3log · siyuanMar 20, 2026
CVE-2026-33075
37Monitor
FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml
CriticalCVSS 9.4Proof of conceptEPSS 0%
- RCE
fastgpt · fastgptMar 20, 2026
CVE-2026-32710
39Monitor
Heap-based Buffer Overflow in MariaDB
CriticalCVSS 9.9Proof of conceptEPSS 0%
- RCE
- Memory safety
mariadb · mariadbMar 20, 2026
CVE-2026-33147
31Monitor
GMT: Stack-based Buffer Overflow in gmt_remote_dataset_id
HighCVSS 7.8Proof of conceptEPSS 0%
- RCE
- Memory safety
generic-mapping-tools · gmtMar 20, 2026
CVE-2026-33150
31Monitor
Use After Free in libfuse
HighCVSS 7.8Proof of conceptEPSS 0%
- RCE
- Memory safety
libfuse project · libfuseMar 20, 2026
CVE-2026-33154
32Monitor
dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver
HighCVSS 8.1Proof of conceptEPSS 0%
- pre-auth RCE
- SSTI
dynaconf · dynaconfMar 20, 2026
CVE-2026-23536
31Monitor
Feast: unauthenticated arbitrary file read
HighCVSS 7.5Proof of conceptEPSS 2%
- Pre-auth
- Path traversal
red hat · red hat openshift ai (rhoai)Mar 20, 2026
CVE-2026-3584
41Plan
Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process
CriticalCVSS 9.8Proof of conceptEPSS 7%
- pre-auth RCE
wpchill · kali forms — contact form & drag-and-drop builderMar 20, 2026
CVE-2026-33186
36Monitor
gRPC-Go has an authorization bypass via missing leading slash in :path
CriticalCVSS 9.1Proof of conceptEPSS 1%
- Pre-auth
- Broken access control (IDOR)
grpc · grpcMar 20, 2026
CVE-2026-33476
31Monitor
SiYuan has an Unauthenticated Arbitrary File Read via Path Traversal
HighCVSS 7.5Proof of conceptEPSS 3%
- Pre-auth
- Path traversal
b3log · siyuanMar 20, 2026
CVE-2026-33425
27Monitor
Discourse has inferable private group membership or existence via exclude_groups parameter
MediumCVSS 6.9Proof of conceptEPSS 0%
- Pre-auth
discourse · discourseMar 20, 2026
CVE-2026-3516
25Monitor
Contact List <= 3.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' Parameter
MediumCVSS 6.4Proof of conceptEPSS 0%
- XSS
anssilaitila · contact list – online staff directory & address bookMar 20, 2026
CVE-2026-3333
25Monitor
MinhNhut Link Gateway <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
MediumCVSS 6.4Proof of conceptEPSS 0%
- XSS
minhnhut · minhnhut link gatewayMar 21, 2026
CVE-2026-3335
21Monitor
Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload
MediumCVSS 5.3Proof of conceptEPSS 1%
- Pre-auth
- Broken access control (IDOR)
flightbycanto · cantoMar 21, 2026
CVE-2026-3629
32Monitor
Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields
HighCVSS 8.1Proof of conceptEPSS 0%
- Pre-auth
carazo · import and export users and customersMar 21, 2026
CVE-2026-4567
36Monitor
Tenda A15 UploadCfg stack-based overflow
HighCVSS 8.9Proof of conceptEPSS 3%
- Pre-auth
- Memory safety
tenda · a15 firmwareMar 22, 2026
CVE-2026-33478
44Plan
AVideo Multi-Chain Attack: Unauthenticated Remote Code Execution via Clone Key Disclosure, Database Dump, and Command Injection
CriticalCVSS 10.0Proof of conceptEPSS 13%
- pre-auth RCE
- Auth bypass
- Command injection
wwbn · avideoMar 23, 2026
CVE-2026-24516
36Monitor
A command injection vulnerability exists in DigitalOcean Droplet Agent through 1.3.2.
HighCVSS 8.8Proof of conceptEPSS 2%
- RCE
- Command injection
Mar 23, 2026
CVE-2026-25075
34Monitor
strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow
HighCVSS 8.7Proof of conceptEPSS 1%
- Pre-auth
- Memory safety
strongswan · strongswanMar 23, 2026
CVE-2024-46878
21Monitor
A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier.
MediumCVSS 5.4Proof of conceptEPSS 0%
- RCE
- XSS
tiki · tikiMar 23, 2026
CVE-2024-46879
21Monitor
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2.
MediumCVSS 5.4Proof of conceptEPSS 0%
- RCE
- XSS
tiki · tikiMar 23, 2026
CVE-2025-52204
24Monitor
A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
Mar 23, 2026
CVE-2026-30849
38Monitor
MantisBT SOAP API has an authentication bypass vulnerability on MySQL
CriticalCVSS 9.3Proof of conceptEPSS 1%
- Pre-auth
- Auth bypass
mantisbt · mantisbtMar 23, 2026
CVE-2026-23482
32Monitor
Blinko: Unauthorized Arbitrary File Read - /api/file/temp
HighCVSS 8.2Proof of conceptEPSS 1%
- Pre-auth
- Path traversal
blinko · blinkoMar 23, 2026
CVE-2026-23483
27Monitor
Blinko: Unauthorized Arbitrary File Read - /plugins
MediumCVSS 6.9Proof of conceptEPSS 0%
- Pre-auth
- Path traversal
blinko · blinkoMar 23, 2026
CVE-2026-23486
27Monitor
Blinko: Unauthorized User Information Leak
MediumCVSS 6.9Proof of conceptEPSS 0%
- Pre-auth
- Info leak
blinko · blinkoMar 23, 2026
CVE-2026-3055
94Now
Insufficient input validation leading to memory overread
CriticalCVSS 9.3KEVWeaponizedEPSS 91%
- Pre-auth
- Memory safety
citrix · netscaler application delivery controllerMar 23, 2026
CVE-2026-32913
35Monitor
OpenClaw < 2026.3.7 - Custom Authorization Header Leakage via Cross-Origin Redirects
HighCVSS 8.8Proof of conceptEPSS 0%
- Pre-auth
- Info leak
openclaw · openclawMar 23, 2026
CVE-2026-33634
85Now
Trivy ecosystem supply chain briefly compromised
CriticalCVSS 9.4KEVWeaponizedEPSS 59%
aquasec · setup-trivyMar 23, 2026
CVE-2026-4001
39Monitor
Woocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
acowebs · woocommerce custom product addons proMar 23, 2026
CVE-2026-22739
34Monitor
Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks
HighCVSS 8.6Proof of conceptEPSS 1%
- Pre-auth
- SSRF
- Path traversal
vmware · spring cloud configMar 23, 2026
CVE-2026-33320
24Monitor
Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service
MediumCVSS 6.2Proof of conceptEPSS 0%
- Denial of service
tomwright · daselMar 23, 2026
CVE-2026-4662
30Monitor
JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
crocoblock · jetengineMar 24, 2026
CVE-2026-33309
43Plan
Langflow has an Arbitrary File Write (RCE) via v2 API
CriticalCVSS 9.9No exploitEPSS 13%
- RCE
- Path traversal
langflow · langflowMar 24, 2026
CVE-2026-33475
37Monitor
Langflow GitHub Actions Shell Injection
CriticalCVSS 9.1Proof of conceptEPSS 3%
- pre-auth RCE
langflow · langflowMar 24, 2026
CVE-2026-4692
40Plan
Sandbox escape in the Responsive Design Mode component
CriticalCVSS 10.0Proof of conceptEPSS 0%
- Pre-auth
mozilla · firefoxMar 24, 2026
CVE-2026-33310
35Monitor
Intake has a Command Injection via shell() Expansion in Parameter Defaults
HighCVSS 8.8Proof of conceptEPSS 0%
- pre-auth RCE
- Command injection
intake · intakeMar 24, 2026
CVE-2026-33497
40Plan
Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
HighCVSS 8.7Proof of conceptEPSS 19%
- Pre-auth
- Path traversal
langflow · langflowMar 24, 2026
CVE-2026-27654
43Plan
NGINX ngx_http_dav_module vulnerability
HighCVSS 8.8Proof of conceptEPSS 25%
- Pre-auth
- Memory safety
f5 · nginx plusMar 24, 2026
CVE-2026-28755
21Monitor
NGINX ngx_stream_ssl_module vulnerability
MediumCVSS 5.3Proof of conceptEPSS 0%
- Broken access control (IDOR)
f5 · nginx plusMar 24, 2026
CVE-2026-30655
26Monitor
SQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows unauthenticated remote attackers to gain unauth
MediumCVSS 6.5Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
esiclivre · esiclivreMar 24, 2026
CVE-2026-33340
42Plan
LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint
CriticalCVSS 9.1Proof of conceptEPSS 21%
- Pre-auth
- Auth bypass
- SSRF
lollms · lollms web uiMar 24, 2026
CVE-2026-33157
34Monitor
Craft CMS: Potential authenticated Remote Code Execution via malicious attached Behavior
HighCVSS 8.6Proof of conceptEPSS 1%
- RCE
craftcms · craft cmsMar 24, 2026
CVE-2026-23921
35Monitor
Blind, read-only SQL injection in Zabbix API via sortfield parameter
HighCVSS 8.7Proof of conceptEPSS 4%
- RCE
- SQL injection
zabbix · zabbixMar 24, 2026
CVE-2026-33331
21Monitor
oRPC: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify
MediumCVSS 5.4Proof of conceptEPSS 0%
- RCE
- XSS
orpc · orpcMar 24, 2026
CVE-2026-20637
24Monitor
A use after free issue was addressed with improved memory management.
MediumCVSS 6.2Proof of conceptEPSS 0%
- Memory safety
- Denial of service
apple · ipadosMar 24, 2026
CVE-2026-20687
28Monitor
A use after free issue was addressed with improved memory management.
HighCVSS 7.1Proof of conceptEPSS 0%
- Memory safety
apple · ipadosMar 24, 2026
CVE-2026-20698
31Monitor
The issue was addressed with improved memory handling.
HighCVSS 7.8Proof of conceptEPSS 0%
- Memory safety
apple · ipadosMar 24, 2026
CVE-2026-28858
39Monitor
A buffer overflow was addressed with improved bounds checking.
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
apple · ipadosMar 24, 2026
CVE-2026-28867
24Monitor
This issue was addressed with improved authentication.
MediumCVSS 6.2Proof of conceptEPSS 0%
apple · ipadosMar 24, 2026
CVE-2026-1519
31Monitor
Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
isc · bindMar 25, 2026
CVE-2026-26830
40Plan
pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter.
CriticalCVSS 9.8Proof of conceptEPSS 2%
- pre-auth RCE
- Command injection
pdf-image project · pdf-imageMar 25, 2026
CVE-2026-26831
40Plan
textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors.
CriticalCVSS 9.8Proof of conceptEPSS 2%
- pre-auth RCE
- Command injection
dbashford · textractMar 25, 2026
CVE-2026-26832
40Plan
node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR.
CriticalCVSS 9.8Proof of conceptEPSS 1%
- pre-auth RCE
- Command injection
zapolnoch · tesseract ocrMar 25, 2026
CVE-2026-26833
40Plan
thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because user i
CriticalCVSS 9.8Proof of conceptEPSS 2%
- pre-auth RCE
- Command injection
mmahrous · thumblerMar 25, 2026
CVE-2026-25645
22Monitor
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
MediumCVSS 5.5Proof of conceptEPSS 0%
python · requestsMar 25, 2026
CVE-2026-32488
32Monitor
WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability
HighCVSS 8.1Proof of conceptEPSS 0%
- Pre-auth
wpeverest · user registrationMar 25, 2026
CVE-2026-29187
35Monitor
OpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.php
HighCVSS 8.8Proof of conceptEPSS 0%
- RCE
- SQL injection
open-emr · openemrMar 25, 2026
CVE-2026-33910
35Monitor
OpenEMR has a SQL Injection Vulnerability in patient selection
HighCVSS 8.8Proof of conceptEPSS 0%
- SQL injection
open-emr · openemrMar 25, 2026
CVE-2026-33917
35Monitor
OpenEMR has SQL Injection in CAMOS Form
HighCVSS 8.8Proof of conceptEPSS 0%
- SQL injection
open-emr · openemrMar 25, 2026
CVE-2026-4484
35Monitor
Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator
HighCVSS 8.8Proof of conceptEPSS 0%
- Broken access control (IDOR)
masteriyo · masteriyo lms – online course builder for elearning, lms & educationMar 25, 2026
CVE-2026-2931
35Monitor
Amelia Booking <= 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change
HighCVSS 8.8Proof of conceptEPSS 0%
- Broken access control (IDOR)
ameliabooking · booking for appointments and events calendar – ameliaMar 26, 2026
CVE-2026-4840
32Monitor
Netcore Power 15AX Diagnostic Tool netis.cgi setTools os command injection
HighCVSS 7.4No exploitEPSS 10%
- RCE
- Command injection
netcore · power 15axMar 26, 2026
CVE-2026-1890
21Monitor
LeadConnector < 3.0.22 - Unauthenticated Rest Call
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · leadconnectorMar 26, 2026
CVE-2026-4747
36Monitor
Remote code execution via RPCSEC_GSS packet validation
HighCVSS 8.8Proof of conceptEPSS 3%
- RCE
- Memory safety
freebsd · freebsdMar 26, 2026
CVE-2026-4861
29Monitor
Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow
HighCVSS 7.4Proof of conceptEPSS 0%
- Memory safety
wavlink · wl-nu516u1 firmwareMar 26, 2026
CVE-2026-23398
22Monitor
icmp: fix NULL pointer dereference in icmp_tag_validation()
MediumCVSS 5.5Proof of conceptEPSS 0%
- Memory safety
- Denial of service
linux · linux kernelMar 26, 2026
CVE-2026-1961
36Monitor
Forman: foreman: remote code execution via command injection in websocket proxy
HighCVSS 8.8Proof of conceptEPSS 1%
- pre-auth RCE
- Command injection
redhat · satelliteMar 26, 2026
CVE-2026-33149
32Monitor
Tandoor Recipes Vulnerable to Host Header Injection
HighCVSS 8.1Proof of conceptEPSS 0%
tandoor · recipesMar 26, 2026
CVE-2026-32286
30Monitor
Denial of service in github.com/jackc/pgproto3/v2
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
jackc · pgproto3Mar 26, 2026
CVE-2026-33532
17Monitor
yaml is vulnerable to Stack Overflow via deeply nested YAML collections
MediumCVSS 4.3Proof of conceptEPSS 0%
- Denial of service
eemeli · yamlMar 26, 2026
CVE-2026-33671
30Monitor
Picomatch has a ReDoS vulnerability via extglob quantifiers
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
jonschlinkert · picomatchMar 26, 2026
CVE-2026-33531
19Monitor
InvenTree has Path Traversal In Report Templates
MediumCVSS 4.9Proof of conceptEPSS 0%
- SQL injection
- Path traversal
inventree project · inventreeMar 26, 2026
CVE-2026-33697
25Monitor
CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys
MediumCVSS 6.3Proof of conceptEPSS 0%
ultraviolet · cocos aiMar 26, 2026
CVE-2026-33693
26Monitor
Lemmy's Activitypub-Federation has SSRF via 0.0.0.0 bypass in activitypub-federation-rust v4_is_invalid()
MediumCVSS 6.5Proof of conceptEPSS 0%
- Pre-auth
- SSRF
lemmynet · lemmyMar 26, 2026
CVE-2026-33701
37Monitor
OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution
CriticalCVSS 9.3Proof of conceptEPSS 0%
- pre-auth RCE
- Deserialization
linuxfoundation · opentelemetry instrumentation for javaMar 26, 2026
CVE-2026-33718
40Plan
OpenHands is Vulnerable to Command Injection through its Git Diff Handler
CriticalCVSS 9.9Proof of conceptEPSS 2%
- RCE
- Command injection
openhands · openhandsMar 26, 2026
CVE-2026-33725
28Monitor
Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import
HighCVSS 7.2Proof of conceptEPSS 0%
- RCE
- Deserialization
metabase · metabaseMar 26, 2026
CVE-2026-3098
26Monitor
Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll
MediumCVSS 6.5Proof of conceptEPSS 0%
- Broken access control (IDOR)
nextendweb · smart slider 3Mar 27, 2026
CVE-2026-22738
39Monitor
SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
CriticalCVSS 9.8Proof of conceptEPSS 1%
- pre-auth RCE
vmware · spring aiMar 27, 2026
CVE-2026-25099
35Monitor
Remote Code Execution via Unrestricted File Upload in Bludit
HighCVSS 8.7Proof of conceptEPSS 1%
- RCE
- File upload
bludit · bluditMar 27, 2026
CVE-2026-24031
32Monitor
Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.
HighCVSS 8.2Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
- SQL injection
dovecot · dovecotMar 27, 2026