CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: convert inline data to extents when truncate exceeds inline size7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreext4: replace BUG_ON with proper error handling in ext4_read_inline_folio5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: publish jinode after initialization8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreext4: validate p_idx bounds in ext4_ext_correct_indexes7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: avoid infinite loops caused by residual data9.4 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: reject mount if bigalloc with s_first_data_block != 07.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: fix use-after-free in update_super_work when racing with umount7.8 High
- linux, linux kernel +1 moremm/damon/core: avoid use of half-online-committed context5.5 Medium
- linux, linux kernel +1 moreksmbd: fix use-after-free and NULL deref in smb_grant_oplock()9.8 Critical
- linux, linux kernel +1 moredmaengine: idxd: Fix crash when the event log is disabled5.5 Medium
- linux, linux kernel +1 moredmaengine: idxd: Fix possible invalid memory access after FLR7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredmaengine: idxd: Fix memory leak when a wq is reset5.5 Medium
- linux, linux kernel +1 moredmaengine: idxd: Fix leaking event log memory5.5 Medium
- linux, linux kernel +1 moredmaengine: xilinx: xdma: Fix regmap init error handling5.5 Medium
- linux, linux kernel +1 morenetfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators5.5 Medium
- linux, linux kernel +1 morenetfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry5.5 Medium
- linux, linux kernel +1 moredmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()9.8 Critical
- linux, linux kernel +1 morenetfs: Fix read abandonment during retry8.8 High
- linux, linux kernel +1 morebtrfs: fix leak of kobject name for sub-group space_info5.5 Medium
- powerdns dnsdistDenial of service via crafted DNSCrypt query7.5 High
- powerdns dnsdistOutgoing DoH excessive memory allocation5.3 Medium
- powerdns dnsdistDoQ/DoH3 excessive memory allocation5.3 Medium
- powerdns dnsdistPRSD detection denial of service3.7 Low
- powerdns dnsdistTCP backend stream ID overflow3.1 Low
- powerdns dnsdistOut-of-bounds read in cache inspection via Lua4.8 Medium
- powerdns dnsdistOut-of-bounds read in service discovery3.1 Low
- ubuntu libefiboot, red hat enterprise linux 10, enterprise linux 7 +4 more +6 moreEfivar: efivar: denial of service due to stack overflow in device path node parsing5.5 Medium
- powerdns dnsdistOff-by-one access when processing crafted UDP responses6.5 Medium
- powerdns dnsdistResource exhaustion via DoQ/DoH3 connections5.3 Medium
- gnu emacs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEmacs: emacs: memory corruption vulnerability when processing svg css6.1 Medium
- fullstepInsecure direct object reference (IDOR) vulnerability in Fullstep7.6 High
- fullstepInadequate access control vulnerability in Fullstep8.7 High
- augmenttCVE-2026-63569.6 Critical
- augmenttCVE-2026-63556.5 Medium
- packagekit, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 morePackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root8.8 High
- redhat instructlab, red hat enterprise linux ai (rhel ai) 3, redhat enterprise linux ai +2 moreInstructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=true`8.8 High
- pcvisit remote host modulLocal Privilege Escalation in pcvisit service client8.5 High
- red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33, build of apache camel 4.18.1 for spring boot 3.5.14 +3 more +5 moreCamel-infinispan: camel-infinispan: remote code execution via unsafe deserialization7.5 High
- redhat instructlab, red hat enterprise linux ai (rhel ai) 3, redhat enterprise linux ai +2 moreInstructlab: instructlab: path traversal allows arbitrary directory creation and file write7.1 High
libcrux-sha3crates.ioIncorrect Output of Incremental Portable SHAKE API on Multiple Squeeze Calls8.2 Highhickory-recursorcrates.ioRecord cache accepts AUTHORITY section NS from sibling zone via parent-pool zone-context elevationNo score- rustls webpkirustls-webpki before 0.103.13 Panic via empty BIT STRING8.7 High
strongswanDebianUpdated strongswan packages fix security vulnerabilitiesNo scorestrongswanDebianUpdated strongswan packages fix security vulnerabilitiesNo scorestrongswanDebianUpdated strongswan packages fix security vulnerabilitiesNo scorestrongswanDebianUpdated strongswan packages fix security vulnerabilitiesNo scorestrongswanDebianUpdated strongswan packages fix security vulnerabilitiesNo scorestrongswanDebianUpdated strongswan packages fix security vulnerabilitiesNo scorestrongswanDebianUpdated strongswan packages fix security vulnerabilitiesNo scorepackagekitUbuntupackagekit vulnerabilityNo score- Show moreLoading…