CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- linux, linux kernel +1 morewifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom7.5 High
- linux, linux kernel +1 morewifi: mac80211: Fix static_branch_dec() underflow for aql_disable.5.5 Medium
- linux, linux kernel +1 morepmdomain: bcm: bcm2835-power: Increase ASB control timeout5.5 Medium
- linux, linux kernel +1 morei2c: cp2615: fix serial string NULL-deref at probe5.5 Medium
- linux, linux kernel +1 morewifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down7.8 High
- linux, linux kernel +1 moredrm/xe: Fix missing runtime PM reference in ccs_mode_store5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: bonding: fix NULL deref in bond_debug_rlb_hash_show5.5 Medium
- linux, linux kernel +1 moreNFC: nxp-nci: allow GPIOs to sleep5.5 Medium
- linux, linux kernel +1 morefirmware: arm_scmi: Fix NULL dereference on notify error path5.5 Medium
- linux, linux kernel +1 morecrash_dump: don't log dm-crypt key bytes in read_key_from_user_keying5.5 Medium
- linux, linux kernel +1 morex86/platform/uv: Handle deconfigured sockets5.5 Medium
- linux, linux kernel +1 moretracing: Fix trace_marker copy link list updates7.8 High
- linux, linux kernel +1 moredrm/i915/gt: Check set_default_submission() before deferencing5.5 Medium
- linux, linux kernel +1 moresmb: smbdirect: introduce smbdirect_socket.recv_io.credits.available7.5 High
- linux, linux kernel +1 moresmb: server: make use of smbdirect_socket.recv_io.credits.available7.5 High
- linux, linux kernel +1 moresmb: server: make use of smbdirect_socket.send_io.bcredits5.5 Medium
- linux, linux kernel +1 moresmb: server: let send_done handle a completion without IB_SEND_SIGNALED9.8 Critical
- linux, linux kernel +1 moresmb: client: make use of smbdirect_socket.recv_io.credits.available4.7 Medium
- ericsson codecheckerAuthentication bypass for certain API calls9.3 Critical
- microsoft azure iot centralAzure IoT Central Elevation of Privilege Vulnerability9.9 Critical
- apache airflowApache Airflow: Dags endpoint might provide access to otherwise inaccessible entities4.3 Medium
- apache airflowApache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users4.3 Medium
dieselcrates.ioUnsound transmute while debug/display printing batch Insert statements in Diesel's SQLite backendNo scoredieselcrates.ioUnsound access to padding bytes while serializing date/time values using the Mysql backendNo scoredieselcrates.ioDiesel: Possible unaligned data access for implementations of `SqliteAggregate`6.3 Mediumdieselcrates.ioDiesel: Command injection in Diesel's implementation of `COPY FROM`/`COPY TO`6.9 Mediumdieselcrates.ioDiesel's SQLite backend has possible UTF-8 corruption8.7 High- eugeny russh, warpgate project warpgate +1 moreRussh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth7.5 High
- c&f adaptivegrcStored XSS in AdaptiveGRC2.4 Low
- perforce helix core server (p4d)Insecure Default Configuration in P4 Server8.8 High
- apache dolphinschedulerApache DolphinScheduler: Users are able to use tenants that are not defined on the platform during workflow execution.8.1 High
- apache dolphinschedulerApache DolphinScheduler: Deserialization of untrusted data in RPC6.3 Medium
- apache activemq, activemq broker, apache software foundation activemq all +8 more +10 moreApache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jolokia8.8 High
- apache activemq, activemq web +1 moreApache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues6.5 Medium
- apache activemq, activemq broker, apache software foundation activemq all +8 more +10 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URI8.8 High
- eclipse foundation kuksa - databrokerA client holding only a read JWT scope can still register itself as a signal provider through the...8.5 High
- grafana tempo, enterprise traces (get), red hat logging subsystem for red hat openshift +13 more +15 moreTempo query limit results in unbounded memory allocation7.5 High
- iterasITERAS <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4 Medium
- liaison site proberLiaison Site Prober <= 1.2.1 - Missing Authorization to Unauthenticated Information Exposure in '/logs' REST API Endpoint5.3 Medium
- taqnixTaqnix <= 1.0.3 - Cross-Site Request Forgery to Account Deletion via 'taqnix_delete_my_account' AJAX Action4.3 Medium
- hubspotdev hubspot all-in-one marketing – forms, popups, live chatHubSpot All-In-One Marketing - Forms, Popups, Live Chat <= 11.3.32 - Missing Authorization to Authenticated (Contributor+) Installed Plugin Disclosure4.3 Medium
- deltaww as320t, as320t firmware +1 moreNo checking of the length of the buffer with the directory name in AS320T9.8 Critical
- deltaww as320t, as320t firmware +1 moreDenial of service via the undocumented subfunction in AS320T9.8 Critical
- deltaww as320t, as320t firmware +1 moreNo checking of the length of the buffer with the file name in AS320T9.8 Critical
- deltaww as320t, as320t firmware +1 moreIncorrect calculation of buffer size on the stack in AS320T9.8 Critical
- codepeople booking calendar contact formBooking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover5.3 Medium
- wproyal royal addons for elementor – addons and templates kit for elementorRoyal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field6.4 Medium
- mhmrajib wp books gallery – build stunning book showcases & libraries in minutesWP Books Gallery <= 4.8.0 - Missing Authorization to Unauthenticated Settings Update via 'permalink_structure' Parameter5.3 Medium
- addonsorg drag and drop file upload for contact form 7Drag and Drop File Upload for Contact Form 7 <= 1.1.3 - Unauthenticated Arbitrary File Upload via sanitize_file_name Bypass8.1 High
- d-link dwm-222wD-Link｜DWM-222W USB Wi-Fi Adapter - Brute-Force Protection Bypass8.7 High
- Show moreLoading…