CVEs.

Latest CVEs

1. 6.8Med

   CVE-2025-33216 ↗ (opens in a new tab)

   NVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an attacker on a VM may cause an incorrect calculation of buffer size by sending crafted configurations. A successful exploit of this vulnerability may lead to crash of the SNAP service, causing denial of service of the storage service to the host.

   NVNVIDIA· Mar 24, 2026

2. 6.8Med

   CVE-2025-33215 ↗ (opens in a new tab)

   NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages. A successful exploit of this vulnerability may lead to a denial of service of the DPA and impact the availability of storage to other VMs.

   NVNVIDIA· Mar 24, 2026

3. 9.4Crit

   CVE-2026-33634 ↗ (opens in a new tab)Known exploited

   Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the supply chain attack that began in late February 2026. Following the initial disclosure on March 1, credential rotation was performed but was not atomic (not all credentials were revoked simultaneously). The attacker could have use a valid token to ex

   TETelnyx· Mar 23, 2026

4. 9.4Crit

   CVE-2026-2298 ↗ (opens in a new tab)

   Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026.

   SASalesforce· Mar 23, 2026

5. 6.3Med

   CVE-2026-28809 ↗ (opens in a new tab)

   XML External Entity (XXE) vulnerability in esaml (and its forks) allows an attacker to cause the system to read local files and incorporate their contents into processed SAML documents, and potentially perform SSRF via crafted SAML messages. esaml parses attacker-controlled SAML messages using xmerl_scan:string/2 before signature verification without disabling XML entity expansion. On Erlang/OTP versions before 27, Xmerl allows entities by default, enabling pre-signature XXE attacks. An attacker can cause the host to read local files (e.g., Kubernetes-mounted secrets) into the SAML document. I

   DRDropbox· Mar 23, 2026

6. 6.1Med

   CVE-2026-31382 ↗ (opens in a new tab)

   The error_description parameter is vulnerable to Reflected XSS. An attacker can bypass the domain's WAF using a Safari-specific onpagereveal payload.

   GAGainsight· Mar 20, 2026

7. 5.3Med

   CVE-2026-31381 ↗ (opens in a new tab)

   An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.

   GAGainsight· Mar 20, 2026

8. 7.7High

   CVE-2026-33068 ↗ (opens in a new tab)

   Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled .claude/settings.json, before determining whether to display the workspace trust confirmation dialog. A malicious repository could set permissions.defaultMode to bypassPermissions in its committed .claude/settings.json, causing the trust dialog to be silently skipped on first open. This allowed a user to be placed into a permissive mode without seeing the trust confirmation prompt, making it easier for an attacker-controlled repository to gain tool exe

   ANAnthropic (Claude)· Mar 20, 2026

9. 9.8Crit

   CVE-2026-32169 ↗ (opens in a new tab)

   Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.

   MAMicrosoft Azure· Mar 19, 2026

10. 7.5High

    CVE-2026-26136 ↗ (opens in a new tab)

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

    M3Microsoft 365· Mar 19, 2026

11. 7.5High

    CVE-2026-23659 ↗ (opens in a new tab)

    Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Mar 19, 2026

12. 9.8Crit

    CVE-2026-23658 ↗ (opens in a new tab)

    Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

    ADAzure DevOps· Mar 19, 2026

13. 6.5Med

    CVE-2026-26940 ↗ (opens in a new tab)

    Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series data properties with an excessively large quantity value.

    ECElastic Cloud· Mar 19, 2026

14. 6.5Med

    CVE-2026-26939 ↗ (opens in a new tab)

    Missing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration (host isolation, process termination, and process suspension) via CAPEC-1 (Accessing Functionality Not Properly Constrained by ACLs). This requires an authenticated attacker with rule management privileges.

    ECElastic Cloud· Mar 19, 2026

15. 5.7Med

    CVE-2026-26933 ↗ (opens in a new tab)

    Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker with the ability to send specially crafted, malformed network packets to a monitored network interface can trigger out-of-bounds read operations, resulting in application crashes or resource exhaustion. This requires the attacker to be positioned on the same network segment as the Packetbeat deployment or to control traffic routed to monitored interfaces.

    ECElastic Cloud· Mar 19, 2026

16. 5.7Med

    CVE-2026-26931 ↗ (opens in a new tab)

    Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).

    ECElastic Cloud· Mar 19, 2026

17. 6.3Med

    CVE-2026-29057 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. Starting in version 9.5.0 and prior to versions 15.5.13 and 16.1.7, when Next.js rewrites proxy traffic to an external backend, a crafted `DELETE`/`OPTIONS` request using `Transfer-Encoding: chunked` could trigger request boundary disagreement between the proxy and backend. This could allow request smuggling through rewritten routes. An attacker could smuggle a second request to unintended backend routes (for example, internal/admin endpoints), bypassing assumptions that only the configured rewrite destination/path is reach

    VEVercel· Mar 18, 2026

18. 6.9Med

    CVE-2026-27980 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. Starting in version 10.0.0 and prior to version 16.1.7, the default Next.js image optimization disk cache (`/_next/image`) did not have a configurable upper bound, allowing unbounded cache growth. An attacker could generate many unique image-optimization variants and exhaust disk space, causing denial of service. This is fixed in version 16.1.7 by adding an LRU-backed disk cache with `images.maximumDiskCacheSize`, including eviction of least-recently-used entries when the limit is exceeded. Setting `maximumDiskCacheSize: 0`

    VEVercel· Mar 18, 2026

19. 6.9Med

    CVE-2026-27979 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, a request containing the `next-resume: 1` header (corresponding with a PPR resume request) would buffer request bodies without consistently enforcing `maxPostponedStateSize` in certain setups. The previous mitigation protected minimal-mode deployments, but equivalent non-minimal deployments remained vulnerable to the same unbounded postponed resume-body buffering behavior. In applications using the App Router with Partial Prerendering capability enabled (via `experimen

    VEVercel· Mar 18, 2026

20. 5.3Med

    CVE-2026-27978 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, `origin: null` was treated as a "missing" origin during Server Action CSRF validation. As a result, requests from opaque contexts (such as sandboxed iframes) could bypass origin verification instead of being validated as cross-origin requests. An attacker could induce a victim browser to submit Server Actions from a sandboxed context, potentially executing state-changing actions with victim credentials (CSRF). This is fixed in version 16.1.7 by treating `'null'` as an

    VEVercel· Mar 18, 2026

21. 2.3Low

    CVE-2026-27977 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, in `next dev`, cross-site protection for internal websocket endpoints could treat `Origin: null` as a bypass case even if `allowedDevOrigins` is configured, allowing privacy-sensitive/opaque contexts (for example sandboxed documents) to connect unexpectedly. If a dev server is reachable from attacker-controlled content, an attacker may be able to connect to the HMR websocket channel and interact with dev websocket traffic. This affects development mode only. Apps witho

    VEVercel· Mar 18, 2026

22. 5.7Med

    CVE-2026-26004 ↗ (opens in a new tab)

    Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.

    SESentry· Mar 18, 2026

23. 2.0Low

    CVE-2026-4359 ↗ (opens in a new tab)

    A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.

    MAMongoDB Atlas· Mar 17, 2026

24. 6.1Med

    CVE-2026-4358 ↗ (opens in a new tab)

    A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.

    MAMongoDB Atlas· Mar 17, 2026

25. 8.7High

    CVE-2026-32981 ↗ (opens in a new tab)

    A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.

    ANAnyscale· Mar 17, 2026

26. 7.1High

    CVE-2026-22882 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

27. 7.1High

    CVE-2026-20726 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

28. 7.1High

    CVE-2025-66633 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

29. 7.1High

    CVE-2025-66617 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

30. 7.1High

    CVE-2025-66503 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

31. 7.8High

    CVE-2025-66342 ↗ (opens in a new tab)

    A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution.

    CACanva· Mar 17, 2026

32. 7.1High

    CVE-2025-66042 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

33. 7.1High

    CVE-2025-66000 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

34. 7.1High

    CVE-2025-65119 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

35. 7.1High

    CVE-2025-64776 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

36. 7.1High

    CVE-2025-64735 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

37. 7.1High

    CVE-2025-64733 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

38. 7.8High

    CVE-2025-64301 ↗ (opens in a new tab)

    An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out‑of‑bounds write, potentially leading to code execution.

    CACanva· Mar 17, 2026

39. 7.1High

    CVE-2025-62500 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

40. 7.1High

    CVE-2025-62403 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

41. 7.1High

    CVE-2025-61979 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

42. 7.1High

    CVE-2025-61952 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

43. 7.1High

    CVE-2025-58427 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

44. 7.1High

    CVE-2025-47873 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

    CACanva· Mar 17, 2026

45. 8.7High

    CVE-2026-4148 ↗ (opens in a new tab)

    A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.

    MAMongoDB Atlas· Mar 17, 2026

46. 7.1High

    CVE-2026-4147 ↗ (opens in a new tab)

    An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.

    MAMongoDB Atlas· Mar 17, 2026

47. 8.6High

    CVE-2026-2454 ↗ (opens in a new tab)

    Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to handle incorrectly reported array lengths which allows malicious user to cause OOM errors and crash the server via sending corrupted msgpack frames within websocket messages to calls plugin. Mattermost Advisory ID: MMSA-2025-00537

    MCMattermost Cloud· Mar 16, 2026

48. 3.8Low

    CVE-2026-26230 ↗ (opens in a new tab)

    Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to demote members to guest role. Mattermost Advisory ID: MMSA-2025-00531

    MCMattermost Cloud· Mar 16, 2026

49. 4.3Med

    CVE-2026-1629 ↗ (opens in a new tab)

    Mattermost versions 10.11.x <= 10.11.10 Fail to invalidate cached permalink preview data when a user loses channel access which allows the user to continue viewing private channel content via previously cached permalink previews until cache reset or relogin.. Mattermost Advisory ID: MMSA-2026-00580

    MCMattermost Cloud· Mar 16, 2026

50. 4.3Med

    CVE-2026-26304 ↗ (opens in a new tab)

    Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2 fail to verify run_create permission for empty playbookId, which allows team members to create unauthorized runs via the playbook run API. Mattermost Advisory ID: MMSA-2025-00542

    MCMattermost Cloud· Mar 16, 2026