CVEs.

Matching CVEs

1. 7.5High

   CVE-2026-24458 ↗ (opens in a new tab)

   Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly handle very long passwords, which allows an attacker to overload the server CPU and memory via executing login attempts with multi-megabyte passwords. Mattermost Advisory ID: MMSA-2026-00587

   MCMattermost Cloud· Mar 16, 2026

2. 8.7High

   CVE-2026-31854 ↗ (opens in a new tab)

   Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow them in order to “assist” the user. When combined with a bypass of the command whitelist mechanism, such indirect prompt injections could result in commands being executed automatically, without the user’s explicit intent, thereby posing a significant security risk. This vulnerability is fixed in 2.0.

   CUCursor· Mar 11, 2026

3. 7.5High

   CVE-2026-1069 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by sending specially crafted GraphQL requests due to uncontrolled recursion under certain circumstances.

   GIGitLab· Mar 11, 2026

4. 7.5High

   CVE-2025-14513 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service condition due to improper input validation when processing specially crafted JSON payloads in the protected branches API.

   GIGitLab· Mar 11, 2026

5. 7.5High

   CVE-2025-13929 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by issuing specially crafted requests to repository archive endpoints under certain conditions.

   GIGitLab· Mar 11, 2026

6. 7.8High

   CVE-2026-30902 ↗ (opens in a new tab)

   Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

   ZOZoom· Mar 11, 2026

7. 7.8High

   CVE-2026-30901 ↗ (opens in a new tab)

   Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.

   ZOZoom· Mar 11, 2026

8. 7.8High

   CVE-2026-30900 ↗ (opens in a new tab)

   Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

   ZOZoom· Mar 11, 2026

9. 7.4High

   CVE-2026-2266 ↗ (opens in a new tab)

   An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based cross-site scripting via task list content. The task list content extraction logic did not properly re-encode browser-decoded text nodes before rendering, allowing user-supplied HTML to be injected into the page. An authenticated attacker could craft malicious task list items in issues or pull requests to execute arbitrary scripts in the context of another user's browser session. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.20 and was fixed in v

   GIGitHub· Mar 10, 2026

10. 8.7High

    CVE-2026-3854 ↗ (opens in a new tab)

    An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly sanitized before being included in internal service headers. Because the internal header format used a delimiter character that could also appear in user input, an attacker could inject additional metadata fields through crafted push option values. This vulnerability was reported via the GitHub Bug Bounty p

    GIGitHub· Mar 10, 2026

11. 8.1High

    CVE-2026-26148 ↗ (opens in a new tab)

    External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.

    MAMicrosoft Azure· Mar 10, 2026

12. 7.8High

    CVE-2026-26141 ↗ (opens in a new tab)

    Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.

    MAMicrosoft Azure· Mar 10, 2026

13. 7.5High

    CVE-2026-26121 ↗ (opens in a new tab)

    Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.

    MAMicrosoft Azure· Mar 10, 2026

14. 8.8High

    CVE-2026-26118 ↗ (opens in a new tab)

    Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Mar 10, 2026

15. 8.8High

    CVE-2026-26114 ↗ (opens in a new tab)

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· Mar 10, 2026

16. 7.8High

    CVE-2026-26113 ↗ (opens in a new tab)

    Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Mar 10, 2026

17. 7.8High

    CVE-2026-26112 ↗ (opens in a new tab)

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Mar 10, 2026

18. 7.8High

    CVE-2026-26110 ↗ (opens in a new tab)

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Mar 10, 2026

19. 7.8High

    CVE-2026-26109 ↗ (opens in a new tab)

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Mar 10, 2026

20. 7.8High

    CVE-2026-26108 ↗ (opens in a new tab)

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Mar 10, 2026

21. 7.8High

    CVE-2026-26107 ↗ (opens in a new tab)

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Mar 10, 2026

22. 8.8High

    CVE-2026-26106 ↗ (opens in a new tab)

    Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· Mar 10, 2026

23. 7.5High

    CVE-2026-23664 ↗ (opens in a new tab)

    Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Mar 10, 2026

24. 7.5High

    CVE-2026-23662 ↗ (opens in a new tab)

    Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Mar 10, 2026

25. 7.5High

    CVE-2026-23661 ↗ (opens in a new tab)

    Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Mar 10, 2026

26. 8.8High

    CVE-2026-29784 ↗ (opens in a new tab)

    Ghost is a Node.js content management system. From version 5.101.6 to 6.19.2, incomplete CSRF protections around /session/verify made it possible to use OTCs in login sessions different from the requesting session. In some scenarios this might have made it easier for phishers to take over a Ghost site. This issue has been patched in version 6.19.3.

    GHGhost(Pro)· Mar 7, 2026

27. 8.8High

    CVE-2026-29089 ↗ (opens in a new tab)

    TimescaleDB is a time-series database for high-performance real-time analytics packaged as a Postgres extension. From version 2.23.0 to 2.25.1, PostgreSQL uses the search_path setting to locate unqualified database objects (tables, functions, operators). If the search_path includes user-writable schemas a malicious user can create functions in that schema that shadow builtin postgres functions and will be called instead of the postgres functions leading to arbitrary code execution during extension upgrade. This issue has been patched in version 2.25.2.

    TITimescale· Mar 6, 2026

28. 7.5High

    CVE-2026-29783 ↗ (opens in a new tab)

    The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns. An attacker who can influence the commands executed by the agent (e.g., via prompt injection through repository files, MCP server responses, or user instructions) can exploit bash parameter transformation operators to execute hidden commands, bypassing the safety assessment that classifies commands as "read-only." This has been patched in version 0.0.423. The vulnerability stems from how the CLI's shell safety assessment evaluate

    GIGitHub· Mar 6, 2026

29. 7.2High

    CVE-2026-28277 ↗ (opens in a new tab)

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify checkpoint data in the backing store (for example, after a database compromise or other privileged write access to the persistence layer), they can potentially supply a crafted payload that triggers unsafe object reconstruction when the checkpoint is loaded. No known patch is public.

    L/LangChain / LangSmith· Mar 5, 2026

30. 8.4High

    CVE-2026-2836 ↗ (opens in a new tab)

    A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction. The issue occurs because the default HTTP cache key implementation generates cache keys using only the URI path, excluding critical factors such as the host header (authority). Operators relying on the default are vulnerable to cache poisoning, and cross-origin responses may be improperly served to users. Impact This vulnerability affects users of Pingora's alpha proxy caching feature who relied on the default CacheKey implementation. An attacker could exploit this for: * Cross-

    CLCloudflare· Mar 5, 2026

31. 8.5High

    CVE-2026-25750 ↗ (opens in a new tab)

    Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The vulnerability affected both LangSmith Cloud and self-hosted deployments. Authenticated LangSmith users who clicked on a specially crafted malicious link would have their bearer token, user ID, and workspace ID transmitted to an attacker-controlled server. With this stolen token, an attacker could impe

    L/LangChain / LangSmith· Mar 4, 2026

32. 7.7High

    CVE-2026-3125 ↗ (opens in a new tab)

    A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/image/ handler.The @opennextjs/cloudflare worker template includes a /cdn-cgi/image/ handler intended for development use only. In production, Cloudflare's edge intercepts /cdn-cgi/image/ requests before they reach the Worker. However, by substituting a backslash for a forward slash (/cdn-cgi\image/ instead of /cdn-cgi/image/), an attacker can bypass edge interception and have the request reach the Worker directly. The JavaScript UR

    CLCloudflare· Mar 4, 2026

33. 7.0High

    CVE-2025-15558 ↗ (opens in a new tab)

    Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that are executed when a victim user opens Docker Desktop or invokes Docker CLI plugin features, and allow privilege-escalation if the docker CLI is executed as a privileged user. This issue affects Docker CLI: through 29.1.5 and Windows binaries acting as a CLI-plugin manager using the github.com/docker/cli/cli-plugins/manage

    DODocker· Mar 4, 2026

34. 8.6High

    CVE-2026-3136 ↗ (opens in a new tab)

    An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed.

    GCGoogle Cloud· Mar 3, 2026

35. 8.6High

    CVE-2026-3342 ↗ (opens in a new tab)

    An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.

    WAWatchGuard· Mar 3, 2026

36. 8.7High

    CVE-2026-3338 ↗ (opens in a new tab)

    Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes. Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.

    AWAmazon Web Services· Mar 2, 2026

37. 8.2High

    CVE-2026-3337 ↗ (opens in a new tab)

    Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVP_aes_128_ccm, EVP_aes_192_ccm, and EVP_aes_256_ccm. Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.

    AWAmazon Web Services· Mar 2, 2026

38. 8.7High

    CVE-2026-3336 ↗ (opens in a new tab)

    Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer. Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.

    AWAmazon Web Services· Mar 2, 2026

39. 7.7High

    CVE-2026-26938 ↗ (opens in a new tab)

    Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery (SSRF) via Code Injection (CAPEC-242). This requires an authenticated user who has the workflowsManagement:executeWorkflow privilege.

    ECElastic Cloud· Feb 26, 2026

40. 7.5High

    CVE-2026-26937 ↗ (opens in a new tab)

    Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)

    ECElastic Cloud· Feb 26, 2026

41. 7.5High

    CVE-2026-26936 ↗ (opens in a new tab)

    Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup (CAPEC-492).

    ECElastic Cloud· Feb 26, 2026

42. 7.5High

    CVE-2026-26935 ↗ (opens in a new tab)

    Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)

    ECElastic Cloud· Feb 26, 2026

43. 7.5High

    CVE-2026-26932 ↗ (opens in a new tab)

    Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker can send a specially crafted packet causing a Go runtime panic that terminates the Packetbeat process. This vulnerability requires the pgsql protocol to be explicitly enabled and configured to monitor traffic on the targeted port.

    ECElastic Cloud· Feb 26, 2026

44. 7.5High

    CVE-2026-1725 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauthenticated user to cause denial of service by sending specially crafted requests to a CI jobs API endpoint.

    GIGitLab· Feb 25, 2026

45. 7.5High

    CVE-2026-1662 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint.

    GIGitLab· Feb 25, 2026

46. 7.5High

    CVE-2026-1388 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint under certain conditions.

    GIGitLab· Feb 25, 2026

47. 7.5High

    CVE-2025-14511 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted files to the container registry event endpoint under certain conditions.

    GIGitLab· Feb 25, 2026

48. 7.4High

    CVE-2026-27795 ↗ (opens in a new tab)

    LangChain is a framework for building LLM-powered applications. Prior to version 1.1.8, a redirect-based Server-Side Request Forgery (SSRF) bypass exists in `RecursiveUrlLoader` in `@langchain/community`. The loader validates the initial URL but allows the underlying fetch to follow redirects automatically, which permits a transition from a safe public URL to an internal or metadata endpoint without revalidation. This is a bypass of the SSRF protections introduced in 1.1.14 (CVE-2026-26019). Users should upgrade to `@langchain/community` 1.1.18, which validates every redirect hop by disabling

    L/LangChain / LangSmith· Feb 25, 2026

49. 8.5High

    CVE-2026-2914 ↗ (opens in a new tab)

    CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

    PAPalo Alto Networks· Feb 25, 2026

50. 8.8High

    CVE-2026-3105 ↗ (opens in a new tab)

    SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities. A vulnerability exists in the query construction for the Contact Activity timeline where the parameter responsible for determining the sort direction was not strictly validated against an allowlist, potentially allowing authenticated users to inject arbitrary SQL commands via the API. MitigationPlease update to 4.4.19, 5.2.10, 6.0.8, 7.0.1 or later. WorkaroundsNone. ReferencesIf you have any questions or comments about this advisory: Email us at security@mautic.org

    ACAcquia· Feb 24, 2026