CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- bluditBludit CMS Reflected XSS via Search Plugin5.1 Medium
- coturnCoturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)7.5 High
bagisto/bagistoPackagistBagisto Downloadable Link copy server-side request forgery5.3 Medium- dayuanjiang next ai draw.io, next-ai-draw-io +1 moreNext AI Draw.io: Unbounded HTTP Body — Denial of Service6.2 Medium
- craigjbass clearancekitClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement8.2 High
- craigjbass clearancekitClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist8.4 High
- freescout-help-desk freescoutFreeScout's Mailbox OAuth disconnect uses a state-changing GET and is CSRFable5.4 Medium
- freescout-help-desk freescoutFreeScout has Zip Slip path traversal in module installation that allows arbitrary file write leading to RCE9.1 Critical
- freescout-help-desk freescoutFreeScout's client-controlled attachment IDs allow deletion of existing conversation attachments7.1 High
- blueprintue blueprintue-self-hosted-editionblueprintUE: Authenticated Password Change Does Not Verify Current Password8.1 High
- blueprintue blueprintue-self-hosted-editionblueprintUE: Active Sessions Are Not Invalidated After Password Change or Reset6.5 Medium
- blueprintue blueprintue-self-hosted-editionblueprintUE: Login Endpoint Has No Rate Limiting, Lockout, or Brute-Force Protection7.5 High
- freescout-help-desk freescoutFreeScout's signature only mailbox permission allows unauthorized mailbox chat setting changes7.1 High
- blueprintue blueprintue-self-hosted-editionblueprintUE: Password Reset Tokens Have No Expiry Window7.4 High
- freescout-help-desk freescoutFreeScout has assigned-only visibility bypass via save_draft that allows hidden conversation draft injection7.1 High
- ransomlookRansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure6.9 Medium
- freescout-help-desk freescoutFreeScout has assigned-only visibility bypass that allows editing hidden customer-authored threads7.1 High
- freescout-help-desk freescoutFreeScout allows non-folder conversation queries to disclose assigned-only hidden conversations4.3 Medium
- atlassian bamboo, bamboo data center +1 moreThis Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0...9.4 Critical
- ultradag, opnsense core +1 moreUltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt8.8 High
- freescout-help-desk freescoutFreeScout's cross-user undo reply allows mailbox peers to recall another agent's outbound reply5.9 Medium
- freescout-help-desk freescoutFreeScout: Improper Authorization in Phone Conversation Creation Enables Cross-Mailbox Hidden Customer Modification7.1 High
- freescout-help-desk freescoutFreeScout's Customer AJAX Create Modifies Hidden Existing Customer4.3 Medium
- freescout-help-desk freescoutFreeScout has Customer Edit Cross-Mailbox Email Takeover7.6 High
- crowdstrike logscale self-hostedCrowdStrike LogScale Unauthenticated Path Traversal9.8 Critical
- freescout-help-desk freescoutFreeScout's Missing Authorization in load_customer_info Allows Any Authenticated User to Access Full Customer PII5.7 Medium
- freescout-help-desk freescoutFreeScout's Mass Assignment in Mailbox Connection Settings Enables Silent Email Exfiltration9.0 Critical
- arcadia technology, llc crafty controllerAuthorization Bypass Through User-Controlled Key in Crafty Controller9.0 Critical
- websystems webtotumWebSystems WebTOTUM Calendar cross site scripting5.1 Medium
- bacnetstack bacnet stack, bacnet-stack +1 moreBACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`3.7 Low
- linuxfoundation tekton pipelines, tektoncd pipeline +1 moreTekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL7.7 High
- twentyhq twentyTwenty: Stored XSS via BlockNote FileBlock5.7 Medium
- octobercms octoberOctober: Editor Sub-Permission Bypass for Asset and Blueprint File Operations3.3 Low
- nvidia cuda-qNVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could...8.2 High
- nvidia kai schedulerNVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints...7.7 High
- octobercms octoberOctober: Reflected XSS via DataTable Form Widget3.1 Low
- nvidia kai schedulerNVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper...4.3 Medium
- octobercms octoberOctober: Safe Mode Bypass via Twig Database Write Operations6.6 Medium
- octobercms octoberOctober: Safe Mode Bypass via CSS Preprocessor Compilers4.9 Medium
- seeyon internet software a8+ collaborative management software, a8-v5 collaborative management software +1 moreSeeyon Office Anywhere (OA) A8 Unauthenticated Arbitrary File Write via htmlofficeservlet9.3 Critical
- freescout-help-desk freescoutFreeScout Vulnerable to XSS via Mailbox Signature Due to Incomplete HTML Sanitization8.5 High
- freescout-help-desk freescoutFreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature Variables5.8 Medium
- linuxfoundation tekton pipelines, tektoncd pipeline +1 moreTekton Pipelines: VerificationPolicy regex pattern bypass via substring matching6.5 Medium
- freescout-help-desk freescoutFreeScout vulnerable to SSRF via IMAP/SMTP Connection Test Endpoints4.1 Medium
- freescoutFreeScout has Stored XSS / CSS Injection via linkify() — Unescaped URL in Anchor href6.1 Medium
- atrodo net::dropbear, net\ +1 moreNet::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt10.0 Critical
- nwclark storableStorable versions before 3.05 for Perl has a stack overflow10.0 Critical
- php point of sale point of sale, phppointofsale php point of sale +1 moreHTML injection in PHP Point Of Sale5.1 Medium
- freescoutFreeScout has Authentication Bypass and Information Disclosure in SystemController via /system/cron8.9 High
- zeon global tech academy proSQL injection in Zeon Academy Pro by Zeon Global Tech9.3 Critical
- Show moreLoading…