Skip to content
OpenAdvisories

Archive

9 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /9 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 7.5
    CVE-2026-34486 Exploited Public exploit Scanner template EPSS 99%

    Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

    Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat org.apache.tomcat:tomcat-tribes Maven
    KEV Aug 4, 2026
  • Critical 9.1
    CVE-2026-29145 Public exploit

    Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled

    CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M7 through 10.1.52, from 9.0…

    Apache Software Foundation Apache Tomcat Apache Tomcat Native thingsboard-tb-node Debian Ubuntu Alpine Wolfi Maven
  • Medium 6.1
    CVE-2026-25854 Public exploit

    Apache Tomcat: Occasionally open redirect

    Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M1 through 10.1.52, from 9.0.0.M23 through 9.0.115, …

    Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2026-24880 Public exploit

    Apache Tomcat: Request smuggling via invalid chunk extension

    Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via invalid chunk extension. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M1 through 10.1.52, from 9.0.0.M1 throug…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
  • Critical 9.1
    CVE-2026-39912 Public exploit

    v2board / Xboard Authentication Token Exposure via loginWithMailLink

    V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP response bodies of the loginWithMailLink endpoint when the login_with_mail_link_enable feature is active. Unauthenticated attackers can POST to the loginWithMailLink end…

    v2board cedar2025 v2board Xboard
  • Low 1.7
    CVE-2026-40072 Public exploit

    web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling

    web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.15.0 and 8.0.0b2, web3.py implements CCIP Read / OffchainLookup (EIP-3668) by performing HTTP requests to URLs supplied by smart contracts in offchain_lookup_pa…

    ethereum web3.py
  • Critical 9.3
    CVE-2026-39987 Exploited Public exploit Scanner template EPSS 100%

    marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

    marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary…

    marimo-team marimo marimo PyPI
    KEV Apr 23, 2026
  • High 8.6
    CVE-2026-39983 Public exploit

    FTP Command Injection via CRLF in basic-ftp

    basic-ftp is an FTP client for Node.js. Prior to 5.2.1, basic-ftp allows FTP command injection via CRLF sequences (\r\n) in file path parameters passed to high-level path APIs such as cd(), remove(), rename(), uploadFrom(), downloadTo(), list(), and removeDir…

    patrickjuchli basic-ftp langfuse-3-worker code-server Debian Ubuntu Wolfi npm
  • Critical 9.1
    CVE-2026-39980 Public exploit

    OpenCTI affected by RCE via notifier template

    OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary JavaScript in t…

    OpenCTI-Platform opencti pycti PyPI
  • High 8.4
    CVE-2026-35204 Public exploit

    Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory

    Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, a specially crafted Helm plugin, when installed or updated, will cause Helm to write the contents of the plugin to an arbitrary filesystem location. To prevent this, validate that the p…

    helm helm kots zarf Wolfi Go
  • High 7.2
    CVE-2026-4112 Public exploit

    Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series applia…

    SonicWall SMA1000 Network devices
  • High 7.5
    CVE-2026-4660 Public exploit

    Go-getter may allow to arbitrary filesystem reads through git operations

    HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect t…

    HashiCorp Tooling zot kubescape Debian Ubuntu Wolfi Go
  • Critical 9.8
    CVE-2026-1830 Public exploit Scanner template

    Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload

    The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1. This is due to insufficient authorization checks on REST API endpoints that expose a sync code and allow arbitrary file uploads. This…

    David F. Carr Quick Playground Web / CMS
  • High 7.8
    CVE-2026-29923 Public exploit

    The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via …