Skip to content
OpenAdvisories

Archive

23 March 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-33634 Exploited Public exploit EPSS 60%

    Trivy ecosystem supply chain briefly compromised

    Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in…

    KEV Mar 26, 2026
  • Critical 9.3
    CVE-2026-3055 Exploited Public exploit Scanner template EPSS 91%

    Insufficient input validation leading to memory overread

    Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

    KEV Mar 30, 2026