Skip to content
OpenAdvisories

Archive

14 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /14 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.2
    CVE-2026-39387 Public exploit

    BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameter

    BoidCMS is an open-source, PHP-based flat-file CMS for building simple websites and blogs, using JSON as its database. Versions prior to 2.1.3 are vulnerable to a critical Local File Inclusion (LFI) attack via the tpl parameter, which can lead to Remote Code …

    BoidCMS BoidCMS
  • High 8.8
    CVE-2026-35196 Public exploit

    Chamilo LMS has OS Command Injection via export_all_certificates action

    Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an OS Command Injection vulnerability exists in the main/inc/ajax/gradebook.ajax.php endpoint within the export_all_certificates action, where the course code retrieved…

    chamilo chamilo-lms
  • High 8.6
    CVE-2026-34160 Public exploit

    Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services

    Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the PENS (Package Exchange Notification Services) plugin endpoint at public/plugin/Pens/pens.php is accessible without authentication and accepts a user-controlled pack…

    chamilo chamilo-lms
  • High 7.2
    CVE-2026-33715 Public exploit

    Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action

    Chamilo LMS is an open-source learning management system. In version 2.0-RC.2, the file public/main/inc/ajax/install.ajax.php is accessible without authentication on fully installed instances because, unlike other AJAX endpoints, it does not include the globa…

    chamilo chamilo-lms
  • High 8.1
    CVE-2026-33827 Public exploit

    Windows TCP/IP Remote Code Execution Vulnerability

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • High 8.0
    CVE-2026-27912 Public exploit

    Windows Kerberos Elevation of Privilege Vulnerability

    Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  • High 8.0
    CVE-2026-33826 Public exploit

    Windows Active Directory Remote Code Execution Vulnerability

    Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  • High 7.8
    CVE-2026-33825 Exploited · Ransomware Public exploit

    Microsoft Defender Elevation of Privilege Vulnerability

    Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

    Microsoft Microsoft Defender Antimalware Platform
    KEV Apr 22, 2026
  • High 7.8
    CVE-2026-26179 Public exploit

    Windows Kernel Elevation of Privilege Vulnerability

    Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

    Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows
  • High 7.4
    CVE-2026-2332 Public exploit

    HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

    In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funky-chunks.html * https://w4ke.info/2025/10/29/funky-chunks-2.htm…

    Eclipse Foundation Eclipse Jetty druid trino Debian Ubuntu Wolfi Maven
  • High 7.2
    CVE-2026-6227 Public exploit

    BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter

    The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the `block_name` parameter of the `/wp-json/backwpup/v1/getblock` REST endpoint in all versions up to, and including, 5.6.6 due to a non-recursive `str_replace()` sanitization of path…

    WP Media BackWPup – WordPress Backup & Restore Plugin Web / CMS