CVEs published in March 2026
299 tracked CVEs from 19 vendors had their first vendor advisory published in March 2026: 85 critical, 93 high, 4 in CISA KEV. Newest first.
342 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-27171Medium
Zlib Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-22610High
Angular Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-23166High
Node.js Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-30897Medium
stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb…
Fortinet · 1 advisory - Added
CVE-2026-25972Medium
improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM…
Fortinet · 1 advisory - Added
CVE-2026-25689Medium
improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor…
Fortinet · 1 advisory - Added
NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0…
Fortinet · 1 advisory - Added
CVE-2026-24640Medium
Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0…
Fortinet · 1 advisory - Added
CVE-2026-24018High
UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2…
Fortinet · 1 advisory - Added
CVE-2026-24017High
Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2…
Fortinet · 1 advisory - Added
FortiManager: improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4…
Fortinet · 1 advisory - Added
CVE-2026-22628Medium
improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may
Fortinet · 1 advisory - Added
CVE-2026-22627High
buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0…
Fortinet · 1 advisory - Added
CVE-2026-22572Medium
FortiManager: authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3…
Fortinet · 1 advisory - Added
CVE-2025-68648Medium
FortiManager: use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0…
Fortinet · 1 advisory - Added
CVE-2025-68482Medium
FortiManager: improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through…
Fortinet · 1 advisory - Added
CVE-2025-66178Medium
improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb…
Fortinet · 1 advisory - Added
cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2…
Fortinet · 1 advisory - Added
CVE-2025-54820High
Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager…
Fortinet · 1 advisory - Added
CVE-2025-54659Medium
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] vulnerability in…
Fortinet · 1 advisory - Added
CVE-2025-53608Medium
FortiSandbox: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in…
Fortinet · 1 advisory - Added
CVE-2025-49784Medium
improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer…
Fortinet · 1 advisory - Added
CVE-2025-48840Medium
authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8…
Fortinet · 1 advisory - Added
CVE-2025-48418Medium
FortiManager: hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7…
Fortinet · 1 advisory - Added
CVE-2026-26130High
Denial of Service via uncontrolled resource allocation
NetApp, Red Hat · 2 advisories - Added
CVE-2026-25836Medium
OS command injection on vmimages update feature
Fortinet · 1 advisory - Added
CVE-2026-3713Critical
Heap-based buffer overflow in pnm2png allows information disclosure and denial of service
NetApp, Red Hat · 2 advisories - Added
Information disclosure via improper handling of configuration values
Apache, Red Hat · 2 advisories - Added
CVE-2026-24281High
Impersonation of servers or clients via reverse DNS spoofing
Apache, Red Hat · 2 advisories - Added
CVE-2026-27142Critical
URLs in meta content attribute actions are not escaped in html/template
NetApp, Red Hat, Splunk, Veeam · 4 advisories - Added
CVE-2026-27139Critical
FileInfo can escape from a Root in golang os module
Red Hat, Splunk · 2 advisories - Added
CVE-2026-25679Critical
Incorrect parsing of IPv6 host literals in net/url
NetApp, Red Hat, Splunk, Veeam · 6 advisories - Added
CVE-2026-27137Critical
Incorrect enforcement of email constraints in crypto/x509
NetApp, Red Hat, Splunk · 3 advisories - Added
CVE-2026-29063Critical
Arbitrary code execution via Prototype Pollution
Red Hat, Splunk · 2 advisories - Added
CVE-2026-22723Medium
Inappropriate user token revocation
VMware · 1 advisory - Added
Security bypass due to differential URI parsing
NetApp, Red Hat · 2 advisories - Added
CVE-2026-22988Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-69534Critical
denial of service via malformed HTML-like sequences
NetApp, Red Hat · 2 advisories - Added
CVE-2025-37731Medium
Elasticsearch Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-12781Medium
Python Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-0847Critical
Arbitrary file read via path traversal vulnerability
NetApp, Red Hat · 2 advisories - Added
CVE-2025-15558High
Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Docker, Red Hat · 2 advisories - Added
CVE-2026-20149Medium
Cisco Webex Services Cross-Site Scripting Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20131CriticalCISA KEV
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20106High
Cisco · 1 advisory - Added
CVE-2026-20105High
Cisco · 1 advisory - Added
CVE-2026-20103High
Cisco · 1 advisory - Added
CVE-2026-20102Medium
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20101High
Cisco · 1 advisory - Added
CVE-2026-20100High
Cisco · 1 advisory - Added
CVE-2026-20082High
Cisco Secure Firewall Adaptive Security Appliance Software TCP Flood Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20079CriticalCISA KEV
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20073Medium
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control List Bypass Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20070Medium
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20069Medium
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggling Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20068Medium
Cisco · 1 advisory - Added
CVE-2026-20067Medium
Cisco · 1 advisory - Added
CVE-2026-20066Medium
Cisco · 1 advisory - Added
CVE-2026-20065Medium
Cisco · 1 advisory - Added
CVE-2026-20064Medium
Cisco · 1 advisory - Added
CVE-2026-20063Medium
Cisco · 1 advisory - Added
CVE-2026-20062High
Cisco Secure Firewall Adaptive Security Appliance Software Multiple Context Mode SCP Unauthorized File Access Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20058Medium
Cisco · 1 advisory - Added
CVE-2026-20057Medium
Cisco · 1 advisory - Added
CVE-2026-20054Medium
Cisco · 1 advisory - Added
CVE-2026-20053Medium
Cisco · 1 advisory - Added
CVE-2026-20052Medium
Cisco Secure Firewall Threat Defense Software Snort 3 SSL Memory Management Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20050Medium
Cisco Secure Firewall Threat Defense Software SSL Decryption Policy Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20049High
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IPsec Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20044Medium
Cisco Secure Firewall Management Center Software Command Injection Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20039High
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Server Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20031Medium
ClamAV Cascading Style Sheets Image Parsing Error Handling Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20025Medium
Cisco · 1 advisory - Added
CVE-2026-20024Medium
Cisco · 1 advisory - Added
CVE-2026-20023Medium
Cisco · 1 advisory - Added
CVE-2026-20022Medium
Cisco · 1 advisory - Added
CVE-2026-20021Medium
Cisco · 1 advisory - Added
CVE-2026-20020Medium
Cisco · 1 advisory - Added
CVE-2026-20018Medium
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software Path Traversal Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20017Medium
Cisco · 1 advisory - Added
CVE-2026-20016Medium
Cisco · 1 advisory - Added
CVE-2026-20015High
Cisco · 1 advisory - Added
CVE-2026-20014High
Cisco · 1 advisory - Added
CVE-2026-20013High
Cisco · 1 advisory - Added
CVE-2026-20009Medium
Cisco Secure Firewall Adaptive Security Appliance Software SSH Partial Private Key Authentication Bypass Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20008Medium
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20007Medium
Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20006Medium
Cisco Secure Firewall Threat Defense Software TLS with Snort 3 Detection Engine Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20005Medium
Cisco · 1 advisory - Added
CVE-2026-20003High
Cisco · 1 advisory - Added
CVE-2026-20002High
Cisco · 1 advisory - Added
CVE-2026-20001High
Cisco · 1 advisory - Added
CVE-2026-27446Critical
org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication
Apache, Red Hat · 2 advisories - Added
CVE-2026-23231High
Privilege escalation or denial of service via use-after-free in nf_tables_addchain
NetApp, Red Hat · 2 advisories - Added
CVE-2026-25673Critical
Denial of Service via slow URL normalization on Windows
Red Hat, Splunk · 2 advisories - Added
CVE-2026-3344Medium
WatchGuard Firebox System Integrity Check Bypass
WatchGuard · 1 advisory - Added
CVE-2026-3343Medium
WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI
WatchGuard · 1 advisory - Added
CVE-2025-59060Unrated
Apache Ranger: Hostname verification bypass in NiFiRegistryClient
Apache · 1 advisory - Added
CVE-2026-23865Critical
Information disclosure or denial of service via specially crafted font files
NetApp, Red Hat · 2 advisories