CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
openexrOSS-FuzzHeap-buffer-overflow in DwaCompressor_uncompressNo score- jupyter nbconvertnbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames6.5 Medium
- signalk signal k server, signalk-server +1 moreSignal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths7.5 High
wasmtimeOSS-FuzzUNKNOWN READ in <wasmtime::runtime::func::Func>::call_unchecked_raw::<No scoreskcmsOSS-FuzzHeap-buffer-overflow in skcms_private::baseline::clutNo scorepopplerOSS-FuzzUNKNOWN READ in XRef::parseEntryNo score- kde kleopatraKDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a...6.9 Medium
- lxmllxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files7.5 High
- tuxera ntfs-3gCVE-2026-40706 affecting package ntfs-3g for versions less than 2022.10.3-38.4 High
- microsoft asp.net core, asp.net core 10.0, visual studio 2026 version 18.5 +4 more +6 moreASP.NET Core Elevation of Privilege Vulnerability9.1 Critical
- openbaoOpenBao's Token Store Allows Cross-Namespace Renewal, Revocation2.0 Low
- openbaoOpenBao allows SQL Injection in PostgreSQL database secrets engine4.6 Medium
- openbaoOpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)3.1 Low
- openbaoOpenBao's Certificate Authentication Allows Token Renewal With Different Certificate2.0 Low
- tenda w30e firmwareTenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the...9.8 Critical
- tenda w30e firmwareTenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the...7.3 High
- sanjay1313 visitor management systemVisitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php...7.2 High
- dolibarr erp\/crmDolibarr user with permission to edit PHP content can bypass filtering to restrict dangerous PHP functions8.8 High
- dolibarr erp\/crmDolibarr Allows Code Injection through its Website Module8.8 High
- dovestones ad self updateDovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF)....6.3 Medium
- dovestones ad phonebookDovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS)...6.1 Medium
- textpatternTextpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management...6.5 Medium
- No product listedXiangShan (open-source high-performance RISC-V processor) commit...5.3 Medium
- gitlawb openclaudeOpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path Traversal8.4 High
- nicolargo glancesGlances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values6.3 Medium
- nicolargo glancesGlances IP Plugin has SSRF via public_api that leads to credential leakage7.3 High
- nicolargo glancesGlances Vulnerable to Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS7.7 High
- difyDify has IDOR in deleting someone else's chat conversation5.3 Medium
- wpdatatables – wordpress data table, dynamic tables & table charts pluginwpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 6.5.0.4 - Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data Import4.7 Medium
- hkuds openharnessHKUDS OpenHarness Session Key Collision Privilege Escalation5.3 Medium
- wolfsshPotential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize2.3 Low
- netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 moreStorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are...2.3 Low
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morescanf %mc off-by-one heap buffer overflow9.8 Critical
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morePotential buffer under-read in ungetwc7.5 High
- internlm lmdeployLMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading7.5 High
- webzunft image source control lite – show image credits and captionsImage Source Control Lite – Show Image Credits and Captions <= 3.9.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'Image Source' Field6.4 Medium
- roxy-wiRoxy-WI has Pre-Authentication LDAP Injection that Leads to Authentication Bypass7.7 High
- roxy-wiRoxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version Viewer5.7 Medium
- 0xjacky nginx-ui, nginxui nginx ui +1 moreNginx-UI vulnerable to Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints5.5 Medium
- 0xjacky nginx-ui, nginxui nginx ui +1 moreNginx-UI: Disabled users retain full API access through previously issued bearer tokens8.6 High
- linuxfoundation spinnakerSpinnaker vulnerable to RCE via expression parsing due to unrestricted context handling10.0 Critical
- linuxfoundation spinnakerSpinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths10.0 Critical
- vvveb cmsVvveb CMS 1.0.8.2 Remote Code Execution via Media Upload8.7 High
- flowsintCommand Injection and Docker container escape allows root on host machine9.3 Critical
- wpeverest everest forms – contact form, payment form, quiz, survey & custom form builderEverest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter8.1 High
- emqx nanomqNanoMQ has Heap Buffer Overflow in URI Parameter Parsing7.7 High
- aws encryption sdk for pythonKey commitment policy bypass via shared key cache in AWS Encryption SDK for Python5.7 Medium
- vvveb cmsVvveb CMS < v1.0.8.2 Remote Code Execution via Media Management9.2 Critical
- tomdever wpforo forumwpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path8.1 High
toropenSUSESecurity update for torNo score- Show moreLoading…