CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- linux, linux kernel +1 moreopenvswitch: defer tunnel netdev_put to RCU release7.8 High
- linux, linux kernel +1 morecrypto: af_alg - limit RX SG extraction by receive buffer budget5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: only handle RESPONSE during service challenge7.5 High
- linux, linux kernel +1 morenet/sched: sch_netem: fix out-of-bounds access in packet corruption7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreaf_unix: read UNIX_DIAG_VFS data under unix_state_lock7.8 High
- simple-git project simple-git, red hat enterprise linux 8, enterprise linux 9 +3 more +5 moresimple-git is vulnerable to Remote Code Execution9.2 Critical
matioOSS-FuzzUse-of-uninitialized-value in Mat_PrintNumberNo scorelibicalOSS-FuzzUse-of-uninitialized-value in vcardtime_from_stringNo scorelibxaacOSS-FuzzHeap-buffer-overflow in ixheaace_processNo score- nullsoft scriptable install systemNSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp...7.8 High
- electermelecterm has Command Injection Vulnerability via runLinux function9.8 Critical
- weblate wlcwlc: print_html outputs API data without HTML escaping, enabling stored XSS5.1 Medium
github.com/supply-chain-tools/gitverifyGogitverify has improper tag signature verification5.3 Medium@excalidraw/excalidrawnpm,@excalidraw/mermaid-to-excalidrawnpm +1 moreExcalidraw vulnerable to XSS via Mermaid sequence diagram labels (KaTeX rendering)No score- cyberpanelCyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints8.8 High
- cyberpanelCyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard5.3 Medium
- traefikTraefik: BasicAuth middleware: timing side-channel vulnerability6.3 Medium
- traefikTraefik Kubernetes CRD allows unauthorized cross-namespace middleware binding4.8 Medium
- deskflowDeskflow: Local privilege escalation via unauthenticated IPC7.8 High
- deskflowDeskflow: clipboard deserialization global-buffer-overflow7.4 High
- amazon tough, tuftool +1 moreMultiple Path Traversal Variants in awslabs/tough7.1 High
- bacnet-stack, bacnetstack bacnet stack +1 moreBACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser8.7 High
- amazon tough, tuftool +1 moreMissing Delegated Metadata Validation in awslabs/tough7.1 High
- bacnet-stack, bacnetstack bacnet stack +1 moreBACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder8.7 High
- bacnet-stack, bacnetstack bacnet stack +1 moreBACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser8.7 High
- amazon tough, tuftool +1 moreSignature Threshold Bypass in awslabs/tough Delegated Roles7.0 High
- google gemini-cli, run-gemini-cli, google cloud gemini cli +1 more +3 moreUnauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows10.0 Critical
- espressif arduino-esp32Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption8.8 High
- siyuan-note siyuanSiYuan Desktop Notification XSS Leads to Electron RCE8.8 High
- rargames 4gaboards4ga Boards: Import Path Traversal Leads to Arbitrary File Read7.6 High
- rargames 4gaboards4ga Boards: User Enumeration via Timing Side-Channel in Authentication Endpoint5.3 Medium
- katacontainers kata containers, kata-containers, katacontainers confidential containers +3 more +5 moreKata Containers: CopyFile Policy Subversion via Symlinks8.2 High
- teluu pjsip, pjsip pjproject +1 morePJSIP: Asymmetric ptime integer overflow in Media Stream8.1 High
- teluu pjsip, pjsip pjproject +1 morePJSIP: SIP Multipart CID URI Length Underflow6.7 Medium
- skim-rs skimSkim: Arbitrary code execution via pull_request_target fork checkout in pr.yml7.4 High
- nds-association zserioZserio: Integer Overflow in BitStreamReader on 32-bit platforms7.5 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()7.5 High
- axiosAxios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion5.4 Medium
- axios, red hat cryostat 4, gatekeeper 3 +61 more +63 moreAxios: unbounded recursion in toFormData causes DoS via deeply nested request data6.9 Medium
- axiosAxios: HTTP adapter streamed responses bypass maxContentLength5.3 Medium
- axiosAxios: HTTP adapter streamed uploads bypass maxBodyLength when maxRedirects: 05.3 Medium
- axiosAxios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream5.3 Medium
- axiosAxios: no_proxy bypass via IP alias allows SSRF6.8 Medium
- axios, red hat cryostat 4, gatekeeper 3 +57 more +59 moreAxios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy4.8 Medium
- axios, red hat cryostat 4, gatekeeper 3 +56 more +58 moreAxios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.07.2 High
- axios, red hat cryostat 4, gatekeeper 3 +59 more +61 moreAxios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`6.5 Medium
- axiosAxios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams3.7 Low
- axiosAxios: Header Injection via Prototype Pollution7.4 High
- axios, red hat cryostat 4, gatekeeper 3 +57 more +59 moreAxios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking7.4 High
- Show moreLoading…