CVE-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet 2026-02-06 9.8 CVE-2026-21643
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-13 CVE-2025-60710 Microsoft Windows Link Following Vulnerability Microsoft 2025-11-11 7.8 CVE-2025-60710
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Local
ACAttack Complexity Low
PRPrivileges Required Low
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-13 CVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability Microsoft 2023-11-14 7.8 CVE-2023-36424
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Local
ACAttack Complexity Low
PRPrivileges Required Low
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-13 CVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft 2023-02-14 8.8 CVE-2023-21529
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required Low
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-13 CVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability Adobe 2020-08-19 7.8 CVE-2020-9715
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector Local
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-13 CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft 2012-07-10 7.8 CVE-2012-1854
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector Local
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-13 CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti 2026-01-29 9.8 CVE-2026-1340
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-08 CVE-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability Fortinet 2026-04-04 9.8 CVE-2026-35616
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-06 CVE-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability Trueconf 2026-03-30 7.8 CVE-2026-3502
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L
AVAttack Vector Adjacent
ACAttack Complexity Low
PRPrivileges Required High
UIUser Interaction Required
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability Low 2026-04-02 CVE-2026-5281 Google Dawn Use-After-Free Vulnerability Google 2026-04-01 8.8 CVE-2026-5281
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-01 CVE-2026-3055 Citrix NetScaler Out-of-Bounds Read Vulnerability Citrix 2026-03-23 9.3 CVE-2026-3055
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality Low
SISubsequent System Integrity Low
SASubsequent System Availability Low 2026-03-30 CVE-2025-53521 F5 BIG-IP Stack-Based Buffer Overflow Vulnerability F5 2025-10-15 9.3 CVE-2025-53521
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality None
SISubsequent System Integrity None
SASubsequent System Availability None 2026-03-27 CVE-2026-33634 Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasec 2026-03-23 9.4 CVE-2026-33634
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required Low
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality High
SISubsequent System Integrity High
SASubsequent System Availability High 2026-03-26 CVE-2026-33017 Langflow Code Injection Vulnerability Langflow 2026-03-20 9.3 CVE-2026-33017
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality Low
SISubsequent System Integrity Low
SASubsequent System Availability Low 2026-03-25 CVE-2025-54068 Laravel Livewire Code Injection Vulnerability Laravel 2025-07-17 9.2 CVE-2025-54068
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector Network
ACAttack Complexity High
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality None
SISubsequent System Integrity None
SASubsequent System Availability None 2026-03-20 CVE-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability Apple 2025-12-12 5.5 CVE-2025-43520
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AVAttack Vector Local
ACAttack Complexity Low
PRPrivileges Required Low
UIUser Interaction None
SScope Unchanged
CConfidentiality None
IIntegrity None
AAvailability High 2026-03-20 CVE-2025-43510 Apple Multiple Products Improper Locking Vulnerability Apple 2025-12-12 7.8 CVE-2025-43510
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector Local
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-20 CVE-2025-32432 Craft CMS Code Injection Vulnerability Craftcms 2025-04-25 10.0 CVE-2025-32432
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-20 CVE-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability Apple 2025-07-30 8.8 CVE-2025-31277
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-20 CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Cisco 2026-03-04 10.0 CVE-2026-20131
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-19 CVE-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft 2026-01-13 9.8 CVE-2026-20963
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-18 CVE-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Synacor 2026-01-05 6.1 CVE-2025-66376
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Changed
CConfidentiality Low
IIntegrity Low
AAvailability None 2026-03-18 CVE-2025-47813 Wing FTP Server Information Disclosure Vulnerability Wftpserver 2025-07-10 4.3 CVE-2025-47813
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required Low
UIUser Interaction None
SScope Unchanged
CConfidentiality Low
IIntegrity None
AAvailability None 2026-03-16 CVE-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability Google 2026-03-13 8.8 CVE-2026-3910
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-13 CVE-2026-3909 Google Skia Out-of-Bounds Write Vulnerability Google 2026-03-13 8.8 CVE-2026-3909
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-13 CVE-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability N8n 2025-12-19 8.8 CVE-2025-68613
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required Low
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-11 CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability Ivanti 2026-02-10 7.5 CVE-2026-1603
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity None
AAvailability None 2026-03-09 CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Solarwinds 2025-09-23 9.8 CVE-2025-26399
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-09 CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery Vmware 2021-12-17 7.5 CVE-2021-22054
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity None
AAvailability None 2026-03-09 CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability Apple 2025-11-05 8.8 CVE-2023-43000
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-05 CVE-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability Apple 2024-01-10 7.8 CVE-2023-41974
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector Local
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-05 CVE-2021-30952 Apple Multiple Products Integer Overflow or Wraparound Vulnerability Apple 2021-08-24 7.8 CVE-2021-30952
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector Local
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-05 CVE-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability Rockwellautomation 2021-03-03 9.8 CVE-2021-22681
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-05 CVE-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability Hikvision 2017-05-06 9.8 CVE-2017-7921
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-05 CVE-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability Vmware 2026-02-25 8.1 CVE-2026-22719
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity High
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-03 CVE-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Qualcomm 2026-03-02 7.8 CVE-2026-21385
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Local
ACAttack Complexity Low
PRPrivileges Required Low
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-03 CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco 2026-02-25 10.0 CVE-2026-20127
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability High 2026-02-25 CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability Cisco 2022-09-30 7.8 CVE-2022-20775
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Local
ACAttack Complexity Low
PRPrivileges Required Low
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-02-25 CVE-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability Soliton 2026-02-13 8.7 CVE-2026-25108
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required Low
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality None
SISubsequent System Integrity None
SASubsequent System Availability None 2026-02-24 CVE-2025-68461 RoundCube Webmail Cross-site Scripting Vulnerability Roundcube 2025-12-18 6.1 CVE-2025-68461
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction Required
SScope Changed
CConfidentiality Low
IIntegrity Low
AAvailability None 2026-02-20 