Week 10, 2026

2–8 March 2026

New CVEs: 1,482
Critical: 197
High: 704
Newly exploited: 7
Advisories: 440
Malicious pkgs: 182

Newly exploited 7

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2021-22681 KEV Mar 5, 2026 Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communi…
EPSS 64%
Critical 9.8
CVE-2017-7921 KEV Mar 5, 2026 An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build…
EPSS 100%
High 8.8
CVE-2023-43000 KEV Mar 5, 2026 A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.…
Apple · macOS · iOS and iPadOS · Safari

EPSS 4%
High 8.8
CVE-2021-30952 KEV Mar 5, 2026 An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2,…
Apple · macOS · iOS and iPadOS · watchOS

EPSS 7%
High 7.8
CVE-2023-41974 KEV Mar 5, 2026 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be …
Apple · iOS and iPadOS

EPSS 2%
High 8.1
CVE-2026-22719 KEV Mar 3, 2026 VMware Aria Operations command injection vulnerability
VMware · Telco Cloud Platform · VMware Aria Operations · Telco Cloud Infrastructure

EPSS 18%
High 7.8
CVE-2026-21385 KEV Mar 3, 2026 Integer Overflow or Wraparound in Graphics
Qualcomm · Snapdragon

EPSS 1.3%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 10.0
CVE-2026-20079 Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
Cisco · Cisco Secure Firewall Management Center (FMC)

EPSS 89%
Critical 10.0
CVE-2026-20131 Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
Cisco · Cisco Secure Firewall Management Center (FMC)

EPSS 44%
Critical 10.0
CVE-2026-28289 FreeScout 1.8.206 Patch Bypass for CVE-2026-27636 via Zero-Width Space Character Leads to Remote Code Execution
freescout-help-desk · freescout

EPSS 35%
Critical 9.8
CVE-2026-1492 User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
WPEverest · User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

EPSS 29%
Critical 9.8
CVE-2026-27944 Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure
0xJacky · nginx-ui

EPSS 23%
Critical 9.3
CVE-2026-27446 Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation
Apache Software Foundation · Apache ActiveMQ Artemis · Apache Artemis

EPSS 11%
Critical 9.8
CVE-2026-29058 AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php
WWBN · AVideo-Encoder

EPSS 8.9%
Critical 9.1
CVE-2026-29000 pac4j-jwt JwtAuthenticator Authentication Bypass
pac4j · pac4j-jwt

EPSS 6.2%
Critical 9.2
CVE-2026-27971 Qwik affected by unauthenticated RCE via server$ Deserialization
QwikDev · qwik

EPSS 5.5%
Critical 9.8
CVE-2026-3485 D-Link DIR-868L SSDP Service sub_1BF84 os command injection
D-Link · DIR-868L

EPSS 5.3%
Critical 9.8
CVE-2025-70219 Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot.
EPSS 3.9%
Critical 9.3
CVE-2026-25070 XikeStor SKS8310-8X PingTestSet Command Injection
Anhui Seeker Electronic Technology · XikeStor SKS8310-8X

EPSS 3.3%
Critical 9.3
CVE-2026-28774 Authenticated OS Command Injection via Traceroute Utility leads to Root RCE
International Datacasting Corporation (IDC) · SFX Series SuperFlex SatelliteReceiver Web Management Interface

EPSS 2.8%
Critical 9.8
CVE-2026-24107 An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the value of `usbPartitionName`, which is directly used in `doSystemCmd`, may lead…
EPSS 2.5%
Critical 10.0
CVE-2026-24898 OpenEMR has an Unauthenticated MedEx Token Disclosure
openemr · openemr

EPSS 2.4%

All 197 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

High 7.7
CVE-2026-30824 Flowise: Missing Authentication on NVIDIA NIM Endpoints
FlowiseAI · Flowise

EPSS 37%
Medium 4.7
CVE-2026-3662 Wavlink WL-NU516U1 adm.cgi usb_p910 command injection
WAVLINK · WL-NU516U1

EPSS 20%
Medium 4.7
CVE-2026-3661 Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection
WAVLINK · WL-NU516U1

EPSS 20%
High 8.2
CVE-2026-30821 Flowise: Arbitrary File Upload via MIME Spoofing
FlowiseAI · Flowise

EPSS 17%
High 7.7
CVE-2026-30822 Flowise: Mass Assignment in `/api/v1/leads` Endpoint
FlowiseAI · Flowise

EPSS 15%
High 7.2
CVE-2026-3612 Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection
WAVLINK · WL-NU516U1

EPSS 14%
High 8.6
CVE-2026-28287 FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints
FreePBX · security-reporting

EPSS 9.3%
High 8.7
CVE-2026-24848 OpenEMR Arbitrary File Write leading to Remote Code Execution
openemr · openemr

EPSS 7.2%

Advisories

USN-8074-2 linux-azure-fips vulnerabilities 753 CVEs
USN-8074-1 linux-azure vulnerabilities 753 CVEs
openSUSE-SU-2026:10301-1 kernel-devel-longterm-6.18.16-1.1 on GA media 199 CVEs
WID-SEC-2026-0569 Google Android: Mehrere Schwachstellen 115 CVEs
SUSE-SU-2026:0757-1 Security update for govulncheck-vulndb 104 CVEs
RHSA-2026:3516 Red Hat Security Advisory: thunderbird security update 38 CVEs
RHSA-2026:3517 Red Hat Security Advisory: thunderbird security update 38 CVEs
RHSA-2026:3515 Red Hat Security Advisory: thunderbird security update 38 CVEs
RHSA-2026:3497 Red Hat Security Advisory: firefox security update 38 CVEs
RHSA-2026:3496 Red Hat Security Advisory: firefox security update 38 CVEs