Week 12, 2026
16 March to 22 March 2026. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- CVEs published
- 1,285
- Critical
- 97
- High
- 455
- Added to KEV
- 9
Critical 97High 455Medium 655Low 76Not scored 2All 1,285 in the list
Added to KEVAttackers use these now; patch them first
- CVE-2025-32432
Craft CMS Allows Remote Code Execution
craftcms · cms
ExploitedCritical10.0 - CVE-2025-54068
Livewire vulnerable to remote command execution during property update hydration
livewire · livewire
ExploitedCritical9.2 - CVE-2025-31277
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS…
Apple · Safari
ExploitedHigh8.8 - CVE-2025-43510
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…
Apple · iOS and iPadOS
ExploitedHigh7.8 - CVE-2025-43520
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…
Apple · iOS and iPadOS
ExploitedMedium5.5 - CVE-2026-20131
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
Cisco · Cisco Secure Firewall Management Center (FMC)
ExploitedCritical10.0 - CVE-2026-20963
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedCritical9.8 - CVE-2025-66376
Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import directives in an…
Zimbra · Collaboration
ExploitedHigh7.2 - CVE-2025-47813
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
wftpserver · Wing FTP Server
ExploitedMedium4.3
Most severe new CVEsBy CVSS score
- CVE-2026-22557
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the…
Ubiquiti Inc · UniFi Network Application
Critical10.0 - CVE-2026-33054
Mesop: Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion
mesop-dev · mesop
Critical10.0 - CVE-2026-32760
File Browser Self Registration Grants Any User Admin Access When Default Permissions Include Admin
filebrowser · filebrowser
Critical10.0 - CVE-2026-32169
Azure Cloud Shell Elevation of Privilege Vulnerability
Microsoft · Azure Cloud Shell
Critical10.0 - CVE-2026-32731
ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction
apostrophecms · import-export
Critical10.0 - CVE-2026-30836
Step CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)
smallstep · certificates
Critical10.0 - CVE-2026-26137
Microsoft Exchange Elevation of Privilege Vulnerability
Microsoft · Microsoft Exchange Online
Critical9.9 - CVE-2026-32938
SiYuan has an Arbitrary File Read in its Desktop Publish Service
siyuan-note · siyuan
Critical9.9 - CVE-2026-3584
Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process
wpchill · Kali Forms — Contact Form & Drag-and-Drop Builder
Critical9.8 - CVE-2026-33057
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
mesop-dev · mesop
Critical9.8