CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows Server Update Service (WSUS) Tampering Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRemote Desktop Spoofing Vulnerability7.1 High
- microsoft power apps desktop client, power apps +1 moreMicrosoft Power Apps Desktop Client Spoofing Vulnerability9.0 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability5.7 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Spoofing Vulnerability4.6 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreApplocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability7.0 High
- microsoft github copilot chat, visual studio code copilot chat extension +1 moreGitHub Copilot and Visual Studio Code Information Disclosure Vulnerability5.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- octobercms octoberOctober CMS: Twig Sandbox Bypass via Collection Methods4.9 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Read (CWE-125)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Use After Free (CWE-416)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Write (CWE-787)7.8 High
- adobe acrobat, acrobat 2024, acrobat dc +1 more +3 moreAcrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)8.6 High
- adobe acrobat, acrobat 2024, acrobat dc +1 more +3 moreAcrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)6.3 Medium
- fortinet fortios, fortipam, fortiproxy +4 more +6 moreAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]...5.4 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...5.4 Medium
- fortinet fortinac-fAn URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in...2.2 Low
- fortinet fortisandboxA path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,...9.1 Critical
- fortinet fortianalyzer, fortianalyzer cloud, fortianalyzer-bigdata +2 more +4 moreAn improper neutralization of special elements used in an sql command ('sql injection')...6.5 Medium
- fortinet fortiddos-fA improper neutralization of special elements used in an sql command ('sql injection')...7.9 High
- fortinet fortianalyzer cloud, fortimanager cloud +1 moreA heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4,...7.3 High
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...6.2 Medium
- fortinet forticlientemsA use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4...5.2 Medium
- fortinet fortisandbox, fortisandbox paas, fortisandbox cloud +2 moreAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...4.9 Medium
- fortinet fortiwebA integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb...4.4 Medium
- fortinet fortisandbox, fortisandbox paas, fortisandbox cloud +2 moreA improper neutralization of input during web page generation ('cross-site scripting')...4.3 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR...6.7 Medium
- fortinet fortindr, fortivoice +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR...5.4 Medium
- fortinet fortiwebA relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0...6.2 Medium
- fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 moreA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in...6.2 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR...4.1 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0...6.2 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0...5.4 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0...4.1 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreAn improper neutralization of input during web page generation ('cross-site scripting')...4.4 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7...6.2 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0...4.1 Medium
- fortinet fortisandbox, fortisandbox paas +1 moreA improper neutralization of special elements used in an os command ('os command injection')...9.1 Critical
- fortinet fortisandbox, fortisandbox paas, fortisandbox cloud +2 moreA insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5...2.5 Low
- schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 moreCWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause ...2.4 Low
- schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 moreCWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that...5.3 Medium
- schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 moreCWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause...5.3 Medium
- schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 moreCWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive...5.3 Medium
- schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 moreCWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would...6.9 Medium
- schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 moreCWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log...6.9 Medium
- python software foundation cpythonOut-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target5.3 Medium
- schneider electric powerchute™ serial shutdown, schneider-electric powerchute serial shutdown +1 moreCWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...6.9 Medium
- Show moreLoading…