Tag: 2026-03-23

2 Attack Reports | 199 Vulnerabilities

Attack reports

Pro-Iranian Nasir Security is Targeting The Energy Sector in the Middle East

A new cybercriminal group, Nasir Security, believed to be associated with Iran, is targeting energy organizations in the Middle East. They focus on attacking supply chain vendors involved in engineering, safety, and construction. The group emerged in October 2025 and has claimed attacks on various …
supply chain
disinformation
business email compromise
spear phishing
middle east
energy sector
2026-03-23
pro-iranian
Published: March 23, 2026
Downloadable IOCs: 0

GhostClaw expands beyond npm: GitHub repositories and AI workflows deliver macOS infostealer

The GhostClaw malware campaign has expanded its distribution methods beyond npm packages to include GitHub repositories and AI-assisted development workflows. The attackers impersonate legitimate tools and utilize multi-stage payloads to steal credentials and retrieve additional malicious code. The…
credential-theft
macos
github
supply-chain-attack
2026-03-23
ghostclaw
ghostloader
Published: March 23, 2026
Downloadable IOCs: 16
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-4606

10.0
    Gv
  • Edge Recording Manager
Published: March 23, 2026

CVE-2026-3587

10.0
    *
  • *
Published: March 23, 2026

CVE-2026-33478

10.0
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-32968

9.8
    *
  • Com Mb24sysapi
Published: March 23, 2026

CVE-2026-33352

9.8
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-4601

9.4
    Jsrsasign Project
  • Jsrsasign
Published: March 23, 2026

CVE-2026-4404

9.4
    Goharbor
  • Harbor
Published: March 23, 2026

CVE-2026-33716

9.4
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-2298

9.4
    Salesforce
  • Marketing Cloud Engagement
Published: March 23, 2026

CVE-2026-33634

9.4
    Aquasecurity
  • Trivy
  • Trivy-Action
  • Setup-Trivy
Published: March 23, 2026

CVE-2026-4599

9.3
    Jsrsasign Project
  • Jsrsasign
Published: March 23, 2026

CVE-2025-41007

9.3
    Cuantis
  • Cuantis
Published: March 23, 2026

CVE-2025-41008

9.3
    Sinturno
  • Sinturno
Published: March 23, 2026

CVE-2026-33502

9.3
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-30849

9.3
    Mantisbt
  • Mantis Bug Tracker
Published: March 23, 2026

CVE-2026-3055

9.3
    Citrix
  • Netscaler Adc
  • Netscaler Gateway
Published: March 23, 2026

CVE-2025-60949

9.3
    Census
  • Census Csweb
Published: March 23, 2026

CVE-2026-4681

9.3
    Ptc
  • Windchill
  • Flexplm
Published: March 23, 2026

CVE-2026-4600

9.1
    Jsrsasign Project
  • Jsrsasign
Published: March 23, 2026

CVE-2026-33351

9.1
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-0898

9.0
    Pega
  • Browser Extension
  • Robot Studio
Published: March 23, 2026

CVE-2026-4567

8.9
    Tenda
  • A15
Published: March 23, 2026

CVE-2026-4585

8.9
    Tiandy
  • Easy7 Integrated Management Platform
Published: March 23, 2026

CVE-2026-33479

8.8
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-24516

8.8
    Digitalocean
  • Droplet Agent
Published: March 23, 2026

CVE-2026-33507

8.8
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33647

8.8
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33648

8.8
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33717

8.8
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-32276

8.8
    Opensource-Workshop
  • Connect-Cms
Published: March 23, 2026

CVE-2026-32913

8.8
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-1958

8.7
    Klinika
  • Klinika Xp
  • Klinika Xp Insertino
Published: March 23, 2026

CVE-2026-31848

8.7
    Nexxt Solutions
  • Nebula 300+
Published: March 23, 2026

CVE-2026-25075

8.7
    Strongswan
  • Strongswan
Published: March 23, 2026

CVE-2025-60946

8.7
    Census
  • Csweb
Published: March 23, 2026

CVE-2025-60947

8.7
    Census
  • Csweb
Published: March 23, 2026

CVE-2026-32277

8.7
    Opensource-Workshop
  • Connect-Cms
Published: March 23, 2026

CVE-2026-33480

8.6
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2025-15517

8.6
    Tp-Link
  • Archer Nx200
  • Archer Nx210
  • Archer Nx500
  • Archer Nx600
Published: March 23, 2026

CVE-2026-33513

8.6
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33719

8.6
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33517

8.6
    Mantis
  • Mantis Bug Tracker
Published: March 23, 2026

CVE-2026-33548

8.6
    Mantis
  • Mantis Bug Tracker
Published: March 23, 2026

CVE-2026-23882

8.6
    Blinko
  • Blinko
Published: March 23, 2026

CVE-2026-4611

8.6
    Totolink
  • X6000r
Published: March 23, 2026

CVE-2026-31847

8.5
    Nexxt Solutions
  • Nebula 300+
Published: March 23, 2026

CVE-2025-15518

8.5
    Tplink
  • Archer Nx200
  • Archer Nx210
  • Archer Nx500
  • Archer Nx600
Published: March 23, 2026

CVE-2025-15519

8.5
    Tp-Link
  • Archer Nx200
  • Archer Nx210
  • Archer Nx500
  • Archer Nx600
Published: March 23, 2026

CVE-2025-15605

8.5
    Tp-Link
  • Archer Nx200
  • Archer Nx210
  • Archer Nx500
  • Archer Nx600
Published: March 23, 2026

CVE-2026-23482

8.2
    Blinko
  • Blinko
Published: March 23, 2026

CVE-2026-32278

8.2
    Opensource-Workshop
  • Connect-Cms
Published: March 23, 2026

CVE-2026-33482

8.1
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33649

8.1
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33651

8.1
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-32300

8.1
    Opensource-Workshop
  • Connect-Cms
Published: March 23, 2026

CVE-2026-23554

7.8
    Intel
  • Ept
    Xen
Published: March 23, 2026

CVE-2026-4598

7.7
    Jsrsasign Project
  • Jsrsasign
Published: March 23, 2026

CVE-2026-4602

7.7
    Jsrsasign Project
  • Jsrsasign
Published: March 23, 2026

CVE-2026-31851

7.7
    Nexxt Solutions
  • Nebula 300+
Published: March 23, 2026

CVE-2026-4368

7.7
    Citrix
  • Netscaler Adc
  • Netscaler Gateway
Published: March 23, 2026

CVE-2026-33046

7.7
    Cern
  • Indico
Published: March 23, 2026

CVE-2026-33354

7.6
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33650

7.6
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-2580

7.5
    Wordpress
  • Wp Maps Store Locator
Published: March 23, 2026

CVE-2026-32969

7.5
    *
  • *
Published: March 23, 2026

CVE-2026-4645

7.5
    Antchfx
  • Xpath
Published: March 23, 2026

CVE-2026-33483

7.5
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33485

7.5
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-26828

7.5
    Owntone
  • Owntone Server
Published: March 23, 2026

CVE-2026-26829

7.5
    Owntone
  • Owntone-Server
Published: March 23, 2026

CVE-2026-26209

7.5
    Cbor2
  • Cbor2
Published: March 23, 2026

CVE-2026-33512

7.5
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-32299

7.5
    Opensource-Workshop
  • Connect-Cms
Published: March 23, 2026

CVE-2026-4306

7.5
    Wordpress
  • Wp Job Portal
Published: March 23, 2026

CVE-2026-4565

7.4
    Tenda
  • Ac21
Published: March 23, 2026

CVE-2026-4566

7.4
    Belkin
  • F9k1122
Published: March 23, 2026

CVE-2026-33488

7.4
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2025-10679

7.3
    Wordpress
  • Reviewx
Published: March 23, 2026

CVE-2026-33492

7.3
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-31849

7.2
    Nexxt Solutions
  • Nebula 300+
Published: March 23, 2026

CVE-2026-33681

7.2
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-23555

7.1
    Xen
  • Xenstored
Published: March 23, 2026

CVE-2026-31846

7.1
    Nexxt Solutions
  • Nebula 300+
Published: March 23, 2026

CVE-2026-33493

7.1
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2025-15606

7.1
    Tp-Link
  • Td-W8961n
Published: March 23, 2026

CVE-2026-33723

7.1
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-4562

6.9
    Maccms
  • Timming Api Endpoint
Published: March 23, 2026

CVE-2026-4579

6.9
    Code-Projects
  • Simple Laundry System
Published: March 23, 2026

CVE-2026-4580

6.9
    Code-Projects
  • Simple Laundry System
Published: March 23, 2026

CVE-2026-4581

6.9
    Code-Projects
  • Simple Laundry System
Published: March 23, 2026

CVE-2019-25620

6.9
    Pixarra
  • Tree Studio
Published: March 23, 2026

CVE-2019-25621

6.9
    Pixarra
  • Pixel Studio
Published: March 23, 2026

CVE-2019-25622

6.9
    Pixarra
  • Paint Studio
Published: March 23, 2026

CVE-2019-25623

6.9
    Pixarra
  • Luminance Studio
Published: March 23, 2026

CVE-2019-25624

6.9
    Pixarra
  • Liquid Studio
Published: March 23, 2026

CVE-2019-25625

6.9
    Pixarra
  • Blob Studio
Published: March 23, 2026

CVE-2026-32845

6.9
    Cgltf
  • Cgltf
Published: March 23, 2026

CVE-2026-4594

6.9
    Erupt
  • Erupt
Published: March 23, 2026

CVE-2026-23483

6.9
    Blinko
  • Blinko
Published: March 23, 2026

CVE-2026-23485

6.9
    Blinko
  • Blinko
Published: March 23, 2026

CVE-2026-23486

6.9
    Blinko
  • Blinko
Published: March 23, 2026

CVE-2026-23488

6.9
    Blinko
  • Blinko
Published: March 23, 2026

CVE-2026-4612

6.9
    Itsourcecode
  • Free Hotel Reservation System
Published: March 23, 2026

CVE-2026-31850

6.8
    Nexxt Solutions
  • Nebula 300+
Published: March 23, 2026

CVE-2026-32279

6.8
    Opensource-Workshop
  • Connect-Cms
Published: March 23, 2026

CVE-2025-10736

6.5
    Reviewx
  • Reviewx
Published: March 23, 2026

CVE-2026-30886

6.5
    Ai
  • Ai Asset Management System
Published: March 23, 2026

CVE-2026-2412

6.5
    Wordpress
  • Quiz And Survey Master
Published: March 23, 2026

CVE-2025-6229

6.4
    Wordpress
  • Sina Extension For Elementor
Published: March 23, 2026

CVE-2026-28809

6.3
    Esaml
  • Esaml
    Arekianth
    Handnot2
    Dropbox
Published: March 23, 2026

CVE-2026-4587

6.3
    Hybridauth
  • Hybridauth
Published: March 23, 2026

CVE-2026-4588

6.3
    Kalcaddle
  • Kodbox
Published: March 23, 2026

CVE-2026-4592

6.3
    Kalcaddle
  • Kodbox
Published: March 23, 2026

CVE-2026-30006

6.2
    Xnsoft
  • Nconvert
Published: March 23, 2026

CVE-2026-30007

6.2
    Xnsoft
  • Nconvert
Published: March 23, 2026

CVE-2026-3635

6.1
    Fastify
  • Fastify
Published: March 23, 2026

CVE-2026-4647

6.1
    Gnu
  • Binutils
    Redhat
Published: March 23, 2026

CVE-2024-51226

6.1
    Phpgurukul
  • Vehicle Record Management System
Published: March 23, 2026

CVE-2026-33499

6.1
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2025-52204

6.1
    Znuny
  • Itsm
Published: March 23, 2026

CVE-2026-23487

6.0
    Blinko
  • Blinko
Published: March 23, 2026

CVE-2026-27646

5.8
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-27131

5.5
    Craftcms
  • Sprig Plugin
Published: March 23, 2026

CVE-2026-29111

5.5
    Systemd
  • Systemd
Published: March 23, 2026

CVE-2026-33500

5.4
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33683

5.4
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2024-46878

5.4
    Tiki
  • Tiki
Published: March 23, 2026

CVE-2024-46879

5.4
    Tiki
  • Tiki
Published: March 23, 2026

CVE-2026-4563

5.3
    Maccms
  • Maccms
Published: March 23, 2026

CVE-2026-4568

5.3
    Sourcecodester
  • Sales And Inventory System
Published: March 23, 2026

CVE-2026-4569

5.3
    Sourcecodester
  • Sales And Inventory System
Published: March 23, 2026

CVE-2026-4570

5.3
    Sourcecodester
  • Sales And Inventory System
Published: March 23, 2026

CVE-2026-4571

5.3
    Sourcecodester
  • Sales And Inventory System
Published: March 23, 2026

CVE-2026-4572

5.3
    Sourcecodester
  • Sales And Inventory System
Published: March 23, 2026

CVE-2025-10731

5.3
    Reviewx
  • Woocommerce Product Reviews
Published: March 23, 2026

CVE-2025-10734

5.3
    Reviewx
  • Woocommerce Product Reviews
Published: March 23, 2026

CVE-2026-1969

5.3
    Wordpress
  • Trx Addons
Published: March 23, 2026

CVE-2026-4573

5.3
    Sourcecodester
  • Simple E-Learning System
Published: March 23, 2026

CVE-2026-4574

5.3
    Sourcecodester
  • Simple E-Learning System
Published: March 23, 2026

CVE-2025-13997

5.3
    King Addons
  • Elementor
Published: March 23, 2026

CVE-2026-4586

5.3
    Codephilia
  • Chat2db
Published: March 23, 2026

CVE-2026-4589

5.3
    Kalcaddle
  • Kodbox
Published: March 23, 2026

CVE-2026-33501

5.3
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-4593

5.3
    Erupt
  • Erupt
Published: March 23, 2026

CVE-2026-33685

5.3
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33688

5.3
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-33690

5.3
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-23480

5.3
    Blinko
  • Blinko
Published: March 23, 2026

CVE-2026-23481

5.3
    Blinko
  • Blinko
Published: March 23, 2026

CVE-2026-23484

5.3
    Blinko
  • Blinko
Published: March 23, 2026

CVE-2026-4597

5.3
    Genersoft
  • Wvp-Gb28181-Pro
Published: March 23, 2026

CVE-2026-4564

5.1
    Yangzongzhuan
  • Ruoyi
Published: March 23, 2026

CVE-2026-4603

5.1
    Jsrsasign Project
  • Jsrsasign
Published: March 23, 2026

CVE-2026-33297

5.1
    Wwbn
  • Avideo
Published: March 23, 2026

CVE-2026-4591

5.1
    Kalcaddle
  • Kodbox
Published: March 23, 2026

CVE-2026-32850

5.1
    Mailenable
  • Mailenable
Published: March 23, 2026

CVE-2026-32851

5.1
    Mailenable
  • Mailenable
Published: March 23, 2026

CVE-2026-32852

5.1
    Mailenable
  • Mailenable
Published: March 23, 2026

CVE-2026-4596

5.1
    Projectworlds
  • Lawyer Management System
Published: March 23, 2026

CVE-2025-60948

5.1
    Census
  • Csweb
Published: March 23, 2026

CVE-2026-1940

5.1
    Gstreamer
  • Gstreamer
Published: March 23, 2026

CVE-2026-32879

4.9
    New Api
  • New Api
Published: March 23, 2026

CVE-2026-4575

4.8
    Code-Projects
  • Exam Form Submission
Published: March 23, 2026

CVE-2026-4576

4.8
    Code-Projects
  • Exam Form Submission
Published: March 23, 2026

CVE-2026-4577

4.8
    Code-Projects
  • Exam Form Submission
Published: March 23, 2026

CVE-2026-4578

4.8
    Code-Projects
  • Exam Form Submission
Published: March 23, 2026

CVE-2024-51222

4.8
    Phpgurukul
  • Vehicle Record Management System
Published: March 23, 2026

CVE-2024-51223

4.8
    Phpgurukul
  • Vehicle Record Management System
Published: March 23, 2026

CVE-2024-51224

4.8
    Phpgurukul
  • Vehicle Record Management System
Published: March 23, 2026

CVE-2024-51225

4.8
    Phpgurukul
  • Vehicle Record Management System
Published: March 23, 2026

CVE-2026-4595

4.8
    Code-Projects
  • Exam Form Submission
Published: March 23, 2026

CVE-2026-4628

4.3
    Redhat
  • Keycloak
Published: March 23, 2026

CVE-2026-3225

4.3
    Wordpress
  • Learnpress
Published: March 23, 2026

CVE-2026-4066

4.3
    Wordpress
  • Smart Custom Fields
Published: March 23, 2026

CVE-2026-4633

3.7
    Keycloak
  • Keycloak
Published: March 23, 2026

CVE-2026-4582

2.3
    Shenzhen Hcc Technology
  • Mpos M6 Plus
Published: March 23, 2026

CVE-2026-4583

2.3
    Shenzhen Hcc Technology
  • Mpos M6 Plus
Published: March 23, 2026

CVE-2026-4584

2.3
    Shenzhen Hcc Technology
  • Mpos M6 Plus
Published: March 23, 2026

CVE-2026-4590

2.3
    Kalcaddle
  • Kodbox
Published: March 23, 2026

CVE-2026-33168

2.3
    Rails
  • Action View
Published: March 23, 2026

CVE-2026-27183

2.1
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-33167

1.3
    Ruby
  • Action Pack
  • Rails
Published: March 23, 2026

CVE-2026-22173

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-28455

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-28483

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32012

None
    Openclaw
  • Openclaw
    Nextcloud
Published: March 23, 2026

CVE-2026-32047

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32066

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32900

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32901

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32902

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32903

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32904

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32907

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32908

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32909

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32910

None
    Openclaw
  • Openclaw
Published: March 23, 2026

CVE-2026-32911

None
    Synology
  • Openclaw
Published: March 23, 2026

CVE-2026-32912

None
    Openclaw
  • Openclaw
Published: March 23, 2026
Click here to see more Vulnerabilities