Week 10, 2026
2 March to 8 March 2026. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 1,420CVEs publishedin the whole week
- 193CriticalCVSS 9.0 and above
- 658HighCVSS 7.0 to 8.9
- 7Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2021-22681
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are…
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers
ExploitedCritical9.8 - CVE-2017-7921
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build…
Hikvision Cameras
ExploitedCritical9.8 - CVE-2023-43000
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS…
Apple · macOS
ExploitedHigh8.8 - CVE-2021-30952
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2,…
Apple · watchOS
ExploitedHigh8.8 - CVE-2023-41974
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be…
Apple · iOS and iPadOS
ExploitedHigh7.8 - CVE-2026-22719
VMware Aria Operations command injection vulnerability
VMware · VMware Aria Operations
ExploitedHigh8.1 - CVE-2026-21385
Integer Overflow or Wraparound in Graphics
Qualcomm, Inc. · Snapdragon
ExploitedHigh7.8
Most severe new CVEsBy CVSS score
- CVE-2026-20079
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
Cisco · Cisco Secure Firewall Management Center (FMC)
ExploitedCritical10.0 - CVE-2026-20131
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
Cisco · Cisco Secure Firewall Management Center (FMC)
ExploitedCritical10.0 - CVE-2026-28289
FreeScout 1.8.206 Patch Bypass for CVE-2026-27636 via Zero-Width Space Character Leads to Remote Code Execution
freescout-help-desk · freescout
Critical10.0 - CVE-2026-24898
OpenEMR has an Unauthenticated MedEx Token Disclosure
openemr · openemr
Critical10.0 - CVE-2026-30861
WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation
Tencent · WeKnora
Critical10.0 - CVE-2026-28775
Unauthenticated RCE via SNMP Default Writable Community String
International Datacasting Corporation (IDC) · SFX2100 Series SuperFlex SatelliteReceiver
Critical10.0 - CVE-2026-23600
A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).
Hewlett Packard Enterprise (HPE) · HPE AutoPass License Server (APLS)
Critical10.0 - CVE-2026-2743
SEPPmail User Web Interface Arbitrary File Write to RCE
SeppMail · SeppMail
Critical10.0 - CVE-2026-0848
Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading
nltk · nltk/nltk
Critical10.0 - CVE-2026-30860
WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool
Tencent · WeKnora
Critical10.0