Week 11, 2026
9–15 March 2026
Newly exploited 7
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
Critical 9.8
CVE-2026-20963 KEV Mar 18, 2026 Microsoft SharePoint Remote Code Execution VulnerabilityEPSS 29%
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition
-
High 8.8
CVE-2026-3910 KEV Mar 13, 2026 Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H…EPSS 2.7%
-
High 8.8
CVE-2026-3909 KEV Mar 13, 2026 Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (…EPSS 2.3%
- Critical 10.0 EPSS 99%
-
Critical 9.8
CVE-2025-26399 KEV Mar 9, 2026 · ransomware SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation VulnerabilityEPSS 91%
-
High 8.6
CVE-2026-1603 KEV Mar 9, 2026 An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.EPSS 88%
-
High 7.5
CVE-2021-22054 KEV Mar 9, 2026 VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SS…EPSS 100%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2026-32746 telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check …EPSS 45%
- Critical 9.8 EPSS 34%
- Critical 9.8 EPSS 21%
- Critical 9.1 EPSS 17%
-
Critical 9.1
CVE-2026-27825 MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachmentEPSS 12%
- Critical 9.8 EPSS 9%
- Critical 10.0 EPSS 6.3%
-
Critical 9.8
CVE-2026-26792 GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version,…EPSS 3.2%
- Critical 9.8 EPSS 2.9%
-
Critical 9.8
CVE-2026-26795 GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function. This vulnera…EPSS 2.9%
-
Critical 9.8
CVE-2026-26791 GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_server function. This …EPSS 2.9%
-
Critical 9.8
CVE-2026-26793 GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function. This vulnerability allows attackers to exe…EPSS 2.6%
-
Critical 9.8
CVE-2025-41709 Command injection in power analyzer via Modbus-TCP and Modbus-RTUEPSS 2.4%
Weidmueller · Janitza · ENERGY METER 750-24 (2540900000) · UMG 96RM-E 230V(5222062)
- Critical 9.8 EPSS 2.2%
- Critical 9.8 EPSS 2.1%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
- High 7.3 EPSS 43%
- High 8.7 EPSS 42%
- Medium 6.3 EPSS 19%
- Medium 4.7 EPSS 17%
-
High 8.2
CVE-2026-27826 MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headersEPSS 14%
-
High 7.8
CVE-2026-24294 Windows SMB Server Elevation of Privilege VulnerabilityEPSS 7.1%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
- High 8.8 EPSS 7%
- High 8.7 EPSS 6.8%
Advisories
- SUSE / openSUSE Security Updates 13513 critical
- Red Hat Security Advisories (RHSA) 13323 critical
- BSI CERT-Bund (WID) 943 critical
- AlmaLinux Security Advisories 37
- Rocky Linux Security Advisories 35
- NCSC-NL (Netherlands) 20
- CISA ICS & IT advisories 206 critical
- Ubuntu Security Notices (USN) 181 critical
- Debian Security (DSA / DLA) 124 critical
- Schneider Electric CPCERT 6
- Siemens ProductCERT 52 critical
- ABB PSIRT 21 critical
- SUSE-SU-2026:20720-1 Security update for the Linux Kernel 129 CVEs
- SUSE-SU-2026:20667-1 Security update for the Linux Kernel 129 CVEs
- DLA-4499-1 linux-6.1 - security update 52 CVEs
- DSA-6163-1 linux - security update 52 CVEs
- openSUSE-SU-2026:10356-1 ruby4.0-rubygem-nokogiri-1.18.9-1.4 on GA media 44 CVEs
- openSUSE-SU-2026:20339-1 Security update for freerdp 44 CVEs
- RHSA-2026:4432 Red Hat Security Advisory: thunderbird security update 38 CVEs
- RHSA-2026:4260 Red Hat Security Advisory: thunderbird security update 38 CVEs
- RHSA-2026:4152 Red Hat Security Advisory: firefox security update 38 CVEs
- RHSA-2026:4022 Red Hat Security Advisory: thunderbird security update 38 CVEs