VulnSea

Daily digest

Thursday 5 March 2026

A busier-than-usual day with 19 new CVEs (recent average about 14). Severity skewed high: 4 critical and 8 high, 63% of the total. One arrived with exploitation evidence or public exploit code already attached. CISA added one CVE to the Known Exploited Vulnerabilities catalog.

19
New CVEs
4
Critical
1
KEV additions
0
Records changed

Added to CISA KEV

Confirmed exploitation in the wild — federal remediation deadlines attach to these.

New this day, ranked by depth score

The 12 that matter most of the 19 published.

CVE-2026-30789Critical· 9.8
6mo ago

Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Client login,…

Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Client login,…

▾ MidnightEPSS 0.33%via NVD
CVE-2026-30783Critical· 9.8
6mo ago

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config management modules) allows Privilege Abuse. This vulnerability is associated …

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config management modules) allows Privilege Abuse. This vulnerability is associated …

▾ MidnightEPSS 0.46%via NVD
CVE-2026-28474Critical· 9.8
6mo ago

OpenClaw's Nextcloud Talk plugin versions prior to 2026.2.6 accept equality matching on the mutable actor.name display name field for allowlist validation, allowing attackers to bypass DM and room allowlists

OpenClaw's Nextcloud Talk plugin versions prior to 2026.2.6 accept equality matching on the mutable actor.name display name field for allowlist validation, allowing attackers to bypass DM and room allowlists. An attacker can change their…

▾ Midnightopenclaw · openclawEPSS 0.84%via NVD
CVE-2026-24457Critical· 9.1
6mo ago

An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server

An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In s…

▾ Midnighteclipse · openmqEPSS 0.62%via NVD
CVE-2026-30792High· 8.1
6mo ago

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) allows Application API Message Manipulation via Man-in-t…

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) allows Application API Message Manipulation via Man-in-t…

▾ TwilightEPSS 0.29%via NVD
CVE-2026-3009High· 8.1
6mo ago

A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an Identity Provider (IdP) even after it has been disabled by an administrator

A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an Identity Provider (IdP) even after it has been disabled by an administrator. An attacker who knows the IdP alias can…

▾ Twilightredhat · build_of_keycloakEPSS 0.47%via NVD
CVE-2026-29780Medium· 5.5PoC
6mo ago

eml_parser: Path Traversal in Official Example Script Leads to Arbitrary File Write

eml_parser: Path Traversal in Official Example Script Leads to Arbitrary File Write

▾ Twilighteml-parser · eml-parserEPSS 0.18%via OSV
GHSA-5r2p-pjr8-7fh7High
6mo ago

SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality

SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality

▾ Twilightsagemaker · sagemakervia OSV
CVE-2026-30796High· 7.5
6mo ago

Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Address book sync, Heartbeat sync loop modules…

Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Address book sync, Heartbeat sync loop modules…

▾ TwilightEPSS 0.49%via NVD
CVE-2026-25048High
6mo ago

xgrammar vulnerable to DoS via multi-layer nesting

xgrammar vulnerable to DoS via multi-layer nesting

▾ Twilightxgrammar · xgrammarEPSS 0.71%via OSV
CVE-2026-1605High· 7.5
6mo ago

In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding response is not compressed. This hap…

In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding response is not compressed. This hap…

▾ Twilighteclipse · jettyEPSS 0.67%via NVD
CVE-2025-69534High· 7.5
6mo ago

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception,…

▾ Twilightpython-markdown · markdownEPSS 0.57%via NVD

Most-affected vendors

By CVEs published in the period.