CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- helios textpadTextpad 8.1.2 Denial of Service via Run Command6.9 Medium
- thinkphpThinkPHP 5.0.23 Remote Code Execution via invokefunction9.3 Critical
- icewarp, icewarp client +1 moreICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection5.1 Medium
- lizardsystems lanspyLanSpy 2.0.1.159 Local Buffer Overflow via Scan Field8.6 High
- ezbsystems ultraisoUltraISO 9.7.1.3519 Buffer Overflow via Output FileName6.9 Medium
- angryip angry ip scannerAngry IP Scanner 3.5.3 Denial of Service via Preferences Buffer Overflow6.9 Medium
- lizardsystems lanspyLanSpy 2.0.1.159 Local Buffer Overflow8.6 High
- angryip angry ip scanner for linux, angry ip scanner +1 moreAngry IP Scanner for Linux 3.5.3 Denial of Service6.9 Medium
- entersrl iperius backupIperius Backup 5.8.1 Local Buffer Overflow SEH8.6 High
- magix music editor, music editor deluxe +1 moreMAGIX Music Editor 3.1 Buffer Overflow via SEH8.6 High
- lizardsystems terminal services managerTerminal Services Manager 3.1 Buffer Overflow SEH8.6 High
phpunit/phpunitPackagistPHPUnit: Argument injection via newline in PHP INI values forwarded to child processes7.8 Highengramxnpmengram: HTTP server CORS wildcard + auth-off-by-default enables CSRF graph exfiltration and persistent indirect prompt injection8.6 High- openremoteOpenRemote has Improper Access Control via updateUserRealmRoles function7.0 High
- actix actix-httpactix-http before 3.12.1 HTTP Request Smuggling via CL.TE6.3 Medium
- python-poetry poetry, red hat ansible automation platform 2, ansible automation platform 2.6 +3 more +5 morePoetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.40.6 Low
@saltcorn/datanpm@saltcorn/data: Tenant user role is used for tenant creation role check8.7 High- jkroepke openvpn-auth-oauth2openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access10.0 Critical
- powerdns authoritativeInsufficient validation of HTTPS and SVCB records6.5 Medium
- powerdns authoritativePossible file descriptor exhaustion in forward-dnsupdate5.9 Medium
- powerdns authoritativeLDAP DN injection5.3 Medium
- powerdns authoritativeIncomplete domain name sanitization during7.4 High
- linux, linux kernel +1 morecxl/port: Fix use after free of parent_port in cxl_detach_ep()7.8 High
- linux, linux kernel +1 morecxl/region: Fix leakage in __construct_region()5.5 Medium
- linux, linux kernel +1 moreperf: Make sure to use pmu_ctx->pmu for groups7.8 High
- linux, linux kernel +1 moredriver core: platform: use generic driver_override infrastructure7.8 High
- linux, linux kernel +1 morebpf: Fix exception exit lock checking for subprogs5.5 Medium
- linux, linux kernel +1 morebpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN7.8 High
- linux, linux kernel +1 moreHID: asus: avoid memory leak in asus_report_fixup()5.5 Medium
- linux, linux kernel +1 morenvme-pci: ensure we're polling a polled queue4.7 Medium
- linux, linux kernel +1 moreHID: magicmouse: avoid memory leak in magicmouse_report_fixup()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremodule: Fix kernel panic when a symbol st_shndx is out of bounds5.5 Medium
- linux, linux kernel +1 moreHID: apple: avoid memory leak in apple_report_fixup()5.5 Medium
- linux, linux kernel +1 morebtrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreesp: fix skb leak with espintcp and async crypto5.5 Medium
- linux, linux kernel +1 morexfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly5.5 Medium
- linux, linux kernel +1 morexfrm: prevent policy_hthresh.work from racing with netns teardown7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreaf_key: validate families in pfkey_send_migrate()5.5 Medium
- linux, linux kernel +1 moreerofs: set fileio bio failed in short read case5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req8.1 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()5.5 Medium
- linux, linux kernel +1 moreBluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete7.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb5.5 Medium
- linux, linux kernel +1 morenfc: nci: fix circular locking dependency in nci_close_device5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: openvswitch: Avoid releasing netdev before teardown completes7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer7.8 High
- linux, linux kernel +1 morenet: bcmasp: fix double free of WoL irq7.8 High
- linux, linux kernel +1 moreiavf: fix out-of-bounds writes in iavf_get_ethtool_stats()7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: fix fanout UAF in packet_release() via NETDEV_UP race7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreudp: Fix wildcard bind conflict check when using hash25.5 Medium
- Show moreLoading…