Skip to content
OpenAdvisories

Archive

9 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /9 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-34486 Exploited Public exploit Scanner template EPSS 99%

    Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

    Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat org.apache.tomcat:tomcat-tribes Maven
    KEV Aug 4, 2026
  • Critical 9.3
    CVE-2026-39987 Exploited Public exploit Scanner template EPSS 100%

    marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

    marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary…

    marimo-team marimo marimo PyPI
    KEV Apr 23, 2026