Skip to content
OpenAdvisories

Archive

4 March 2026

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-2835 Public exploit

    HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing

    An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests. The issue occurs due to improperly allowing HTTP/1.0 request bodies to be close-delimited and incorrect handling of multiple Tran…

  • Critical 9.1
    CVE-2026-29000 Public exploit

    pac4j-jwt JwtAuthenticator Authentication Bypass

    pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public ke…

  • Critical 10.0
    CVE-2026-20131 Exploited · Ransomware Public exploit EPSS 44%

    Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to ins…

    KEV Mar 19, 2026
  • Critical 10.0
    CVE-2026-20079 Exploited Public exploit Scanner template EPSS 89%

    Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

    A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying oper…

    KEV Sep 9, 2026
  • Critical 9.8
    CVE-2025-66678 Public exploit

    An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allo…