Skip to content
OpenAdvisories

Archive

18 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /18 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-32743 Public exploit

    PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling

    PX4 is an open-source autopilot stack for drones and unmanned vehicles. Versions 1.17.0-rc2 and below are vulnerable to Stack-based Buffer Overflow through the MavlinkLogHandler, and are triggered via MAVLink log request. The LogEntry.filepath buffer is 60 by…

    PX4 PX4-Autopilot
  • High 8.6
    CVE-2026-32255 Public exploit Scanner template EPSS 27%

    Kan is Vulnerable to Unauthenticated SSRF via Attachment Download Endpoint

    Kan is an open-source project management tool. In versions 0.5.4 and below, the /api/download/attatchment endpoint has no authentication and no URL validation. The Attachment Download endpoint accepts a user-supplied URL query parameter and passes it directly…

    kanbn kan
  • Critical 10.0
    CVE-2026-32731 Public exploit

    ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction

    ApostropheCMS is an open-source content management framework. Prior to version 3.5.3 of `@apostrophecms/import-export`, The `extract()` function in `gzip.js` constructs file-write paths using `fs.createWriteStream(path.join(exportPath, header.name))`. `path.j…

    apostrophecms import-export @apostrophecms/import-export npm
  • Low 3.6
    CVE-2026-32722 Public exploit

    Memray-generated HTML reports vulnerable to Stored XSS via unescaped command-line metadata

    Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inser…

    bloomberg memray memray python-memray Debian Ubuntu PyPI
  • High 8.8
    CVE-2026-32321 Public exploit

    ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration

    ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 within the `actions/ajax.php` endpoint. Due to insufficient input sanitization of the `userid` parame…

    MacWarrior clipbucket-v5
  • High 7.3
    CVE-2026-2991 Public exploit

    KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token

    The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.1.2. This is due to the `patientSocialLogin()` function not verifying the social provider access token …

    Iqonic Design KiviCare – Clinic & Patient Management System (EHR) Web / CMS
  • High 8.8
    CVE-2026-22730 Public exploit

    CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter

    A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands. The vulnerability exists due to missing input sanitization.

    VMware Spring AI org.springframework.ai:spring-ai-mariadb-store Maven
  • High 7.7
    CVE-2026-32606 Public exploit

    IncusOS has a LUKS encryption bypass due to insufficient TPM policy

    IncusOS is an immutable OS image dedicated to running Incus. Prior to 202603142010, the default configuration of systemd-cryptenroll as used by IncusOS through mkosi allows for an attacker with physical access to the machine to access the encrypted data witho…

    lxc incus-os github.com/lxc/incus-os/incus-osd Go
  • High 7.7
    CVE-2026-31891 Public exploit

    Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()

    Cockpit is a headless content management system. Any Cockpit CMS instance running version 2.13.4 or earlier with API access enabled is potentially affected by a a SQL Injection vulnerability in the MongoLite Aggregation Optimizer. Any deployment where the `/a…

    cockpit-hq cockpit cockpit-hq/cockpit cockpit Ubuntu Packagist
  • Medium 6.3
    CVE-2026-29057 Public exploit

    Next.js: HTTP request smuggling in rewrites

    Next.js is a React framework for building full-stack web applications. Starting in version 9.5.0 and prior to versions 15.5.13 and 16.1.7, when Next.js rewrites proxy traffic to an external backend, a crafted `DELETE`/`OPTIONS` request using `Transfer-Encodin…

    vercel next.js langfuse-3 jitsucom-jitsu-console Wolfi npm
  • High 7.5
    CVE-2026-30345 Public exploit

    A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitr…

  • Medium 5.4
    CVE-2026-30048 Public exploit

    NotChatbot WebChat has a stored cross-site scripting (XSS) vulnerability

    A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary …

    @developer.notchatbot/webchat npm
  • Medium 6.1
    CVE-2026-30695 Public exploit

    A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access co…