Skip to content
OpenAdvisories

Archive

11 April 2026

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.6
    CVE-2026-34621 Exploited Public exploit

    Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

    Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the curre…

    KEV Apr 13, 2026
  • Critical 9.8
    CVE-2026-5059 Public exploit

    aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

    aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The s…

  • High 7.8
    CVE-2026-5054 Public exploit

    NoMachine External Control of File Path Local Privilege Escalation Vulnerability

    NoMachine External Control of File Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code…

  • High 7.1
    CVE-2026-5053 Public exploit

    NoMachine External Control of File Path Arbitrary File Deletion Vulnerability

    NoMachine External Control of File Path Arbitrary File Deletion Vulnerability. This vulnerability allows local attackers to delete arbitrary files on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code…