CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- microsoft partner centerMicrosoft Partner Center Elevation of Privilege Vulnerability9.6 Critical
- microsoft purview ediscoveryMicrosoft Purview eDiscovery Elevation of Privilege Vulnerability8.6 High
- microsoft bingMicrosoft Bing Remote Code Execution Vulnerability10.0 Critical
- microsoft 365 copilotMicrosoft 365 Copilot Elevation of Privilege Vulnerability9.3 Critical
- microsoft dynamics 365, dynamics 365 (online) +1 moreMicrosoft Dynamics 365 (online) Spoofing Vulnerability9.3 Critical
- getkirby kirbyKirby's page creation API bypasses the changeStatus permission check via unfiltered isDraft parameter5.3 Medium
- kvcache-ai ktransformersKTransformers Unsafe Deserialization RCE via balance_serve9.3 Critical
- getkirby kirbyKirby has Server-Side Template Injection (SSTI) via double template resolution in option rendering7.6 High
- actualbudget actualActual has Privilege Escalation via 'change-password' Endpoint on OpenID-Migrated Servers8.8 High
- azure go-ntlmsspgo-ntlmssp NTLM challenges can panic on malformed payloads5.3 Medium
- getkirby kirbyKirby has XML injection in its XML creator toolkit6.9 Medium
- sbabic swupdateSWUpdate Integer Underflow in Multipart Upload Parser8.2 High
- radareorg radare2-mcp, radare radare2 mcp server +1 moreradare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass9.3 Critical
- radare radare2radare2 < 6.1.4 Project Notes Path Traversal via Symlink6.9 Medium
- radare radare2radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion6.9 Medium
- spicejet online booking systemMissing authentication for critical function in SpiceJet Online Booking System8.7 High
- spicejet online booking systemAuthorization bypass through User-Controlled key in SpiceJet Online Booking System8.7 High
- hugging face lerobotLeRobot Unsafe Deserialization Remote Code Execution via gRPC9.3 Critical
- joinmastodon mastodonMastodon: Insufficient verification of email addresses8.2 High
- projectcontour contour, red hat externaldns operator +1 moreContour: Lua code injection via Cookie Path Rewrite Policy8.1 High
- open-telemetry opentelemetry-dotnet-contribUnbounded HTTP response body read in OpenTelemetry.Sampler.AWS5.9 Medium
- intrado 911 emergency gatewayPath traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW)9.3 Critical
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 moreArgo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller7.7 High
- tenable nessus, nessus agent, tenable, inc. tenable nessus, tenable nessus agent +2 moreJunction File Manipulation7.4 High
- open-telemetry opentelemetry.api, opentelemetry.extensions.propagators, opentelemetry +1 more +3 moreOpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers5.3 Medium
- opentelemetry, open-telemetry opentelemetry-dotnet, opentelemetry.exporter.opentelemetryprotocol +2 moreOpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling5.3 Medium
- openclawOpenClaw < 2026.4.20 - Improper Authorization in Paired-Device Pairing Actions5.3 Medium
- openclawOpenClaw < 2026.4.20 - Scope Enforcement Bypass in Assistant-Media Route2.3 Low
- opentelemetry, open-telemetry opentelemetry-dotnet +1 moreOpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies5.3 Medium
- google chromeRace in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to...8.3 High
- google chromeOut of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote...9.6 Critical
- google chromeUse after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who...9.6 Critical
- tp-link tl-wr841n firmware, tp-link systems inc. tl-wl841n v13 +1 morePredictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N6.1 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/tls: fix use-after-free in -EBUSY error path of tls_do_encryption9.8 Critical
- tungsten automation capture (formerly kofax capture)Kofax Capture 6.0.0.0 Unauthenticated File Read/Write & SMB Coercion via .NET Remoting9.3 Critical
- pipecatPipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializer9.8 Critical
- withastro astro@astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed5.3 Medium
- czlonkowski n8n-mcpn8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests5.3 Medium
- goshsgoshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS6.5 Medium
- openc3 cosmosOpenC3 COSMOS: Administrative Actions via the Script Runner Tool9.6 Critical
- openc3 cosmosOpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base9.6 Critical
- codesys ethernetipImproper timeout handling in CODESYS EtherNetIP8.7 High
- socialengineSocialEngine <= 7.8.0 Blind SSRF via /core/link/preview6.3 Medium
- socialengineSocialEngine <= 7.8.0 SQL Injection via activity/index/get-memberall9.3 Critical
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreWebkitgtk: authorization bypass through webpage::send-request signal handler4.7 Medium
- funnelforms llc funnelformsproWordPress FunnelFormsPro plugin <= 3.8.1 - Remote Code Execution (RCE) vulnerability9.9 Critical
bare-metalcrates.iobare-metal is deprecatedNo scorerkyvcrates.iorkyv: Panic safety bugs in `InlineVec::clear` and `SerVec::clear` enable arbitrary code execution6.9 Medium- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecan: raw: fix ro->uniq use-after-free in raw_rcv()7.8 High
- linux, linux kernel +1 moreipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()5.5 Medium
- Show moreLoading…