NVD disclosure day

Published threat advisories for March 20, 2026

CVE-2026-29796

Attacker can control EV charging stations and steal data

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A critical flaw in igl's eparking.fi software allows anyone to impersonate electric vehicle charging stations and control them remotely, potentially disrupting operations and corrupting data across the network.

NVD published: March 20, 2026

CVE advisoryKnown Exploit

CVE-2026-33017

Langflow allows attackers to run malicious code on your systems without a password.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

Langflow versions before 1.9.0 allow unauthenticated users to run malicious code on your server by exploiting a public workflow building feature. Update immediately to prevent system compromise.

NVD published: March 20, 2026 • CISA KEV