TL;DR CISA added 100 actively exploited vulnerabilities to its KEV catalog in Q3 2026, up 33.3% from 75 in Q2. Nearly half rated critical, and Microsoft led all vendors with 12 entries. A quarter of the flaws with a known publish date came under attack within a week. Daily CyberSecurity's Q3 2026 CVE report covers every entry CISA added to the…

🛡 <b>CVE-2025-70244</b> <b>CVSS:</b> 7.5 — <b>High</b> <b>Status:</b> Analyzed <b>Source:</b> cve@mitre.org Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanSetup. 🔗 <b>References</b> • <a href="https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70244">https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70244</a> • <a href="https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513">https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513</a> • <a href="https://www.dlink.com/en/security-bulletin/">https://www.dlink.com/en/security-bulletin/</a> 📅 Mar 10, 2026

🛡 <b>CVE-2025-70223</b> <b>CVSS:</b> 9.8 — <b>Critical</b> <b>Status:</b> Analyzed <b>Source:</b> cve@mitre.org Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAdvNetwork. 🔗 <b>References</b> • <a href="https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70223">https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70223</a> • <a href="https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513">https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513</a> • <a href="https://www.dlink.com/en/security-bulletin/">https://www.dlink.com/en/security-bulletin/</a> 📅 Mar 4, 2026

🛡 <b>CVE-2026-3016</b> <b>CVSS:</b> 8.8 — <b>High</b> <b>Status:</b> Analyzed <b>Source:</b> cna@vuldb.com A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the file /goform/formP2PLimitConfig. The manipulation of the argument except leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. 🔗 <b>References</b> • <a href="https://github.com/xhsy0314/CVEReport/blob/main/UTT-2/README.md">https://github.com/xhsy0314/CVEReport/blob/main/UTT-2/README.md</a> • <a href="https://github.com/xhsy0314/CVEReport/blob/main/UTT-2/README.md#poc">https://github.com/xhsy0314/CVEReport/blob/main/UTT-2/README.md#poc</a> • <a href="https://vuldb.com/?ctiid.347376">https://vuldb.com/?ctiid.347376</a> • <a href="https://vuldb.com/?id.347376">https://vuldb.com/?id.347376</a> • <a href="https://vuldb.com/?submit.756249">https://vuldb.com/?submit.756249</a> 📅 Feb 23, 2026

🛡 <b>CVE-2026-3015</b> <b>CVSS:</b> 8.8 — <b>High</b> <b>Status:</b> Analyzed <b>Source:</b> cna@vuldb.com A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/formPolicyRouteConf. Executing a manipulation of the argument GroupName can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. 🔗 <b>References</b> • <a href="https://github.com/xhsy0314/CVEReport/blob/main/UTT-1/README.md">https://github.com/xhsy0314/CVEReport/blob/main/UTT-1/README.md</a> • <a href="https://github.com/xhsy0314/CVEReport/blob/main/UTT-1/README.md#poc">https://github.com/xhsy0314/CVEReport/blob/main/UTT-1/README.md#poc</a> • <a href="https://vuldb.com/?ctiid.347375">https://vuldb.com/?ctiid.347375</a> • <a href="https://vuldb.com/?id.347375">https://vuldb.com/?id.347375</a> • <a href="https://vuldb.com/?submit.756248">https://vuldb.com/?submit.756248</a> 📅 Feb 23, 2026