Skip to content
OpenAdvisories

Archive

27 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /27 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.3
    CVE-2026-33980 Public exploit

    Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries

    Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and explore Azure Data Explorer (ADX/Kusto) databases through standardized interfaces. Versions up to and including 0.1.1 contain KQL (Ku…

    pab1it0 adx-mcp-server adx-mcp-server PyPI
  • High 8.7
    CVE-2026-33871 Public exploit

    Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

    Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames. The serve…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • High 8.8
    CVE-2026-4961 Public exploit

    Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow

    A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. The manipulation of the argument PPPOEPassword leads to stack-based bu…

    Tenda AC6
  • High 8.8
    CVE-2026-5027 Public exploit Scanner template EPSS 40%

    Langflow - Path Traversal Arbitrary File Write via upload_user_file

    The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path traversal sequences ('../').

    langflow-ai langflow
  • High 8.7
    CVE-2026-25099 Public exploit

    Remote Code Execution via Unrestricted File Upload in Bludit

    Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be executed, leading to Remote Code Execution. This issue was fixed in 3.18.4.

    bludit bludit
  • High 7.7
    CVE-2026-24031 Public exploit

    Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin. This vulnerability allow…

    Open-Xchange OX Dovecot Pro dovecot dovecot Debian Ubuntu Azure Linux Alpine
  • High 7.2
    CVE-2026-33725 Public exploit

    Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import

    Metabase is an open source business intelligence and embedded analytics tool. In Metabase Enterprise prior to versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4, authenticated admins on Metabase Enterprise Edition can achieve Remote Code Executi…

    metabase metabase
  • High 7.6
    CVE-2026-33718 Public exploit

    OpenHands is Vulnerable to Command Injection through its Git Diff Handler

    OpenHands is software for AI-driven development. Starting in version 1.5.0, a Command Injection vulnerability exists in the `get_git_diff()` method at `openhands/runtime/utils/git_handler.py:134`. The `path` parameter from the `/api/conversations/{conversatio…

    OpenHands OpenHands openhands-ai PyPI