CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- zenmapNmap 7.70 Denial of Service via XML Entity Expansion6.9 Medium
- maxprog icashiCash 7.6.5 Denial of Service via Connect to Server6.8 Medium
- infiltration-systems infiltrator network security scannerInfiltrator Network Security Scanner 4.6 Denial of Service6.8 Medium
- convertimagetotext jina ocr image to textjiNa OCR Image to Text 1.0 Denial of Service via PNG6.9 Medium
- picajet fxPicaJet FX 2.6.5 Denial of Service via Registration Fields6.9 Medium
- br-software pixgpsPixGPS 1.1.8 Buffer Overflow Denial of Service6.9 Medium
- picajet roboimportRoboImport 1.2.0.72 Denial of Service via Registration Fields6.8 Medium
- faleemi plusFaleemi Plus 1.0.2 Denial of Service via Buffer Overflow6.9 Medium
- infrarecorderInfraRecorder 0.53 Denial of Service via txt File Import6.9 Medium
- acutesystems crossfontCrossFont 7.5 Denial of Service via License Key Field6.9 Medium
- acutesystems transmacTransMac 12.2 Denial of Service via License Key Field6.9 Medium
- faleemi desktop softwareFaleemi Desktop Software 1.8.2 Local Buffer Overflow SEH8.6 High
- No product listedGreenCMS index.php pluginAddLocal unrestricted upload5.3 Medium
- 666ghj mirofish666ghj MiroFish REST API Endpoint __init__.py create_app missing authentication6.9 Medium
- 666ghj mirofish666ghj MiroFish Werkzeug Debugger PIN console information disclosure6.3 Medium
- tufantunc ssh-mcptufantunc ssh-mcp index.ts shell.write command injection8.5 High
- tufantunc ssh-mcptufantunc ssh-mcp Command Line index.ts insufficiently protected credentials4.8 Medium
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setVpnPassCfg os command injection9.3 Critical
- tenda i9, i9 firmware +1 moreTenda i9 HTTP R7WebsSecurityHandlerfunction path traversal6.9 Medium
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 httpd WrlclientSet fromWrlclientSet stack-based overflow8.7 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 httpd WrlExtraSet stack-based overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 SafeClientFilter fromSafeClientFilter buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 SafeEmailFilter buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 SafeMacFilter fromSafeMacFilter buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 RouteStatic fromRouteStatic buffer overflow8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 addressNat fromaddressNat buffer overflow8.7 High
- codeastro online job portalCodeAstro Online Job Portal All Jobs delete-jobs.php sql injection5.1 Medium
- d-link dsl-2740r, dlink dsl-2740r firmware +1 moreD-Link DSL-2740R Wireless Setup Section cross site scripting4.8 Medium
- d-link dgs-3420, dlink dgs-3420-28tc firmware +1 moreD-Link DGS-3420 System Information Settings cross site scripting6.8 Medium
- No product listedTypecho Ping Back Service Endpoint Service.php sendPingHandle server-side request forgery6.9 Medium
- rawchen simsrawchen sims deleteFileServlet Endpoint DeleteFileServlet.java path traversal5.3 Medium
- bytedance coze-studio, coze studio +1 moreByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection5.3 Medium
- smythos sreSmythOS sre HTTP Header AgentRuntime.class.ts AgentRuntime improper authentication6.9 Medium
- smythos sreSmythOS sre Connector Service utils.ts information disclosure5.1 Medium
- ollamaOllama Tensor Model Transfer transfer.go digestToPath path traversal6.3 Medium
- tenda f456, f456 firmware +1 moreTenda F456 P2pListFilter fromP2pListFilter buffer overflow8.7 High
- datavane datavinesDatavane Datavines JWT Token TokenManager.java hard-coded key6.3 Medium
- maxsite cmsMaxSite CMS ushki Plugin cross site scripting4.8 Medium
- technitium dnsserverTechnitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server...7.2 High
- maxsite cmsMaxSite CMS Guestbook Plugin cross site scripting4.8 Medium
- hickory project dnsHickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data...4.0 Medium
- maxsite cmsMaxSite CMS down_count Plugin cross site scripting4.8 Medium
- maxsite cmsMaxSite CMS mail_send Plugin cross site scripting4.8 Medium
- maxsite cmsMaxSite CMS Redirect Plugin cross site scripting4.8 Medium
- maxsite cmsMaxSite CMS Antispam Plugin plugin_antispam cross site scripting4.8 Medium
thrift-javaOSS-FuzzSecurity exception in org.apache.thrift.protocol.TProtocolUtil.skipNo score- openclawOpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access6.0 Medium
- openclawOpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Tools2.3 Low
- openclawOpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenv4.1 Medium
- openclawOpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creation2.3 Low
- Show moreLoading…