Security Digest: March 29, 2026 - 4 Critical Vulnerabilities

Today's security landscape reveals four critical vulnerabilities that require immediate attention. These vulnerabilities pose significant risks, including data leakage and potential service disruption.

· 4 min read

March 29, 2026 - Critical Security Vulnerabilities Alert

Today's security landscape reveals four critical vulnerabilities that require immediate attention. These vulnerabilities pose significant risks, including data leakage and potential service disruption. Immediate patching and mitigation steps are essential to safeguard your systems.

Critical Vulnerabilities

  • CVE-2026-34214: Iceberg REST Catalog Credential Exposure
    • Impact: Credentials can be accessed by unauthorized users, risking data exposure.
    • Affected Systems: Maven io.trino:trino-iceberg
    • Immediate Action: Review and rotate static credentials immediately. Vended credentials are temporary but ensure no unauthorized access occurred.
    • Mitigation: Update to the latest version and avoid using static credentials where possible.
  • CVE-2026-34209: Vulnerability in Tempo Cooperative Close Handler
    • Impact: Allows free channel closure or griefing by submitting a voucher equal to the settled amount.
    • Affected Systems: NPM mppx
    • Immediate Action: Upgrade to version 0.4.11 immediately.
    • Mitigation: No available workarounds, immediate update is required.
  • CVE-2026-34226: Cookie Leakage in Happy-Dom
    • Impact: Exposes cookies from one origin to another, risking cross-origin data leakage.
    • Affected Systems: NPM happy-dom
    • Immediate Action: Review and update applications relying on happy-dom for managing sensitive data.
    • Mitigation: Update to a patched version that correctly handles cookie origins.
  • CVE-2026-32287: Infinite Loop in XPath Logical Query
    • Impact: Triggers 100% CPU usage through malformed queries, causing denial of service.
    • Affected Systems: Go github.com/antchfx/xpath
    • Immediate Action: Audit queries for vulnerable patterns and update to the latest version.
    • Mitigation: Apply patches as soon as they become available.

Previously Alerted

What to Do Now

  1. Prioritize patching all affected systems as identified above.
  2. Conduct a verification of credential exposure and unauthorized access logs.
  3. Implement monitoring for unusual network activity and CPU usage spikes.

Related Resources

  • Refer to vendor advisories for detailed patch instructions.
  • Follow our internal blog for updates on vulnerability management strategies (release upcoming).

Keep reading