Skip to content
OpenAdvisories

Archive

March 2026

Vulnerabilities first published in this month (UTC), newest first.

← February 2026 2026 / March April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.8
    CVE-2026-3502 Exploited Public exploit

    TrueConf Client Update Integrity Verification Bypass

    TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, t…

    TrueConf TrueConf Client
    KEV Apr 2, 2026
  • Critical 9.4
    CVE-2026-33634 Exploited Public exploit EPSS 60%

    Trivy ecosystem supply chain briefly compromised

    Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in…

    BerriAI Aqua Security team-telnyx litellm Go GitHub Actions
    KEV Mar 26, 2026
  • Critical 9.3
    CVE-2026-3055 Exploited Public exploit Scanner template EPSS 91%

    Insufficient input validation leading to memory overread

    Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

    NetScaler ADC Gateway
    KEV Mar 30, 2026
  • Critical 9.3
    CVE-2026-33017 Exploited Public exploit Scanner template EPSS 96%

    Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

    Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data paramete…

    langflow-ai langflow langflow PyPI
    KEV Mar 25, 2026
  • High 8.8
    CVE-2026-3910 Exploited Public exploit

    Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitra…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV Mar 13, 2026
  • High 8.8
    CVE-2026-3909 Exploited Public exploit

    Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds …

    Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi
    KEV Mar 13, 2026
  • Critical 9.8
    CVE-2025-67038 Exploited Public exploit EPSS 21%

    Lantronix EDS5000, G520, and X300 OS Command Injection

    An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to injec…

    LANTRONIX G520 Series EDS5000 series X300 series
    KEV Jun 23, 2026
  • Critical 10.0
    CVE-2026-20131 Exploited · Ransomware Public exploit EPSS 44%

    Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to ins…

    Cisco Cisco Secure Firewall Management Center (FMC) Network devices
    KEV Mar 19, 2026
  • Critical 10.0
    CVE-2026-20079 Exploited Public exploit Scanner template EPSS 89%

    Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

    A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying oper…

    Cisco Cisco Secure Firewall Management Center (FMC) Network devices
    KEV Sep 9, 2026
  • High 7.8
    CVE-2026-21385 Exploited Public exploit

    Integer Overflow or Wraparound in Graphics

    Memory corruption while using alignments for memory allocation.

    Qualcomm Snapdragon
    KEV Mar 3, 2026