Archive

21 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /21 May 2026 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

High 7.5

CVE-2026-22016 Public exploit

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi

Apr 21, 2026
High 7.6

CVE-2026-22011 Public exploit

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported version…

Oracle Oracle Applications DBA

Apr 21, 2026
High 7.5

CVE-2026-22010 Public exploit

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Servi…

Oracle Oracle Financial Services Analytical Applications Infrastructure

Apr 21, 2026
High 7.1

CVE-2026-39973 Public exploit

Apktool: Path Traversal to Arbitrary File Write

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in `brut/androlib/res/decoder/ResFileDecoder.java` allows a maliciously crafted APK to write arbitrary files to the filesystem during stan…

iBotPeaches Apktool apktool org.apktool:apktool-lib Ubuntu Maven

Apr 21, 2026
High 7.4

CVE-2026-39866 Public exploit

Lawnchair vulnerable to Command Injection via unquoted workflow dispatch input in release_update.yml

Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a3921445252849126c6266b2, command injection in release_update.yml workflow dispatch input allows arbitrary code execution. Commit fcba413f55dd47f8a3921445252849126c6266b2 p…

LawnchairLauncher lawnchair

Apr 21, 2026
High 7.2

CVE-2026-37748 Public exploit

Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php …

Apr 21, 2026