Skip to content
OpenAdvisories

Archive

16 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /16 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

96 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-20989

    Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attac…

    Samsung Mobile Samsung Mobile Devices
  • Medium 6.8
    CVE-2026-20988

    Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker…

    Samsung Mobile Samsung Mobile Devices
  • Medium 6.3
    CVE-2026-4210

    D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection

    A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 2026…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4209

    D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection

    A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-327L Network devices
  • Medium 6.3
    CVE-2026-4207

    D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection

    A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4206

    D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4205

    D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection

    A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 4.3
    CVE-2017-20221

    Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution

    Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting missing request validation. Attackers can craft malicious web pages th…

    Telesquare SDT-CS3B1
  • Medium 6.3
    CVE-2026-4204

    D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection

    A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affe…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2026-4203

    D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection

    A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. I…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 5.3
    CVE-2026-4199

    bazinga012 mcp_code_executor index.ts installDependencies command injection

    A vulnerability was identified in bazinga012 mcp_code_executor up to 0.3.0. Affected by this issue is the function installDependencies of the file src/index.ts. Such manipulation leads to command injection. The attack can only be performed from a local enviro…

    bazinga012 mcp_code_executor
  • Medium 5.4
    CVE-2025-69693

    Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). The quantization parameter (qp) v…

    ffmpeg Debian
  • Medium 5.3
    CVE-2025-69727 Public exploit

    An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8. The affected components …

  • Medium 6.5
    CVE-2025-68971 Public exploit

    In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attac…

  • Medium 6.1
    CVE-2025-57543

    Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitr…

  • Medium 5.4
    CVE-2025-65734

    An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11,…