CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- openclawOpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media Upload6.3 Medium
- openclawOpenClaw < 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment Variables5.4 Medium
- openclawOpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events6.3 Medium
- openclawOpenClaw < 2026.4.20 - Environment Variable Namespace Collision via Workspace dotenv8.5 High
- openclawOpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actions2.3 Low
- openclawOpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mapping6.3 Medium
- gitpython-developers gitpythonGitPython: Command injection via Git options bypass8.8 High
- gitpython-developers gitpythonGitPython: Unsafe option check validates multi_options before shlex.split transforms it8.1 High
- enchant97 note-markNote Mark: Unauthenticated read of notes and assets in soft-deleted public books5.3 Medium
- enchant97 note-markNote Mark: OIDC-registered users authenticated by submitting password "null"9.4 Critical
- ciliumCillium exposes sensitive information included in the cilium-bugtool debug archive7.9 High
- czlonkowski n8n-mcpn8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode4.3 Medium
- netfoundry zrokzrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write8.7 High
- dadrus heimdallHeimdall: Authorization bypass via path normalization mismatch7.8 High
- dadrus heimdallHeimdall: Case-sensitive host matching may lead to policy bypass7.8 High
- dadrus heimdallHeimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretation7.8 High
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +5 more +7 moreLiteLLM: Authenticated command execution via MCP stdio test endpoints8.7 High
- klik socialmediawebsiteKLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection6.9 Medium
- datacom dm4100Datacom DM4100 Ethernet Configuration cross site scripting4.8 Medium
- datacom dm4100Datacom DM4100 VLAN Page cross site scripting4.8 Medium
- bivocom tr321BIVOCOM TR321 Wireless Setting cross site scripting4.8 Medium
- bdcom p3310dBDCOM P3310D New RMON Statistics cross site scripting4.8 Medium
- bdcom p3310dBDCOM P3310D New RMON History cross site scripting4.8 Medium
- bdcom p3310dBDCOM P3310D rmon event Tab cross site scripting4.8 Medium
- bdcom p3310dBDCOM P3310D New User index.asp cross site scripting4.8 Medium
- No product listedEnvoy Query Parameter header_mutation.cc params.add injection5.3 Medium
- go-kratos kratosgo-kratos http.DefaultServeMux Fallback server.go NewServer confused deputy6.9 Medium
- linksys mr9600, mr9600 firmware +1 moreLinksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection8.6 High
- colinhacks zodcolinhacks Zod CUID Data Type regexes.ts sql injection5.3 Medium
- projeto-siga sigaprojeto-siga novo cross site scripting5.1 Medium
- tenda f453, f453 firmware +1 moreTenda F453 Telnet Service telnet TendaTelnet command injection5.3 Medium
- tenda hg10, hg10 firmware +1 moreTenda HG10 Boa Service formRouting formRoute buffer overflow8.7 High
- sipeed picoclawPicoClaw Web Launcher Management Plane restart command injection6.9 Medium
- automattic mongooseCesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification6.3 Medium
- automattic mongooseCesanta Mongoose TCP Option net_builtin.c handle_opt infinite loop6.9 Medium
- astrbotdevs astrbotAstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template engine5.1 Medium
- No product listedpagekit download server-side request forgery5.1 Medium
- star7th showdocstar7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection5.3 Medium
- ihatecreatingusernames2 airahub2IhateCreatingUserNames2 AiraHub2 Endpoint AiraHub.py sync_agents server-side request forgery5.3 Medium
- divyanshu-hash gitpilot-mcpDivyanshu-hash GitPilot-MCP main.py repo_path command injection6.9 Medium
- devlikeapro wahadevlikeapro WAHA API Request media.controller.ts server-side request forgery5.3 Medium
- No product listedJiZhiCMS addcache.html htmlspecialchars_decode sql injection5.1 Medium
- vanna-ai vannavanna-ai vanna Legacy Flask API improper authorization6.9 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 Critical
- linux, linux kernel +1 morenet: sched: act_csum: validate nested VLAN headers5.5 Medium
- linux, linux kernel +1 morebatman-adv: avoid OGM aggregation when skb tailroom is insufficient7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebridge: br_nd_send: linearize skb before parsing ND options9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: xt_multiport: validate range encoding in checkentry5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ipv6: flowlabel: defer exclusive option free until RCU teardown7.8 High
- linux, linux kernel +1 moreopenvswitch: validate MPLS set/set_masked payload length7.1 High
- Show moreLoading…