Skip to content
OpenAdvisories

Archive

April 2026

Vulnerabilities first published in this month (UTC), newest first.

← March 2026 2026 / April May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-41940 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    WebPros cPanel and WHM Authentication Bypass via Login Flow

    cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

    WebPros cPanel WP Squared WHM
    KEV Apr 30, 2026
  • Critical 10.0
    CVE-2026-41679 Exploited Public exploit Scanner template EPSS 32%

    Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass

    Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authen…

    paperclipai @paperclipai/server paperclip @paperclipai/server npm
  • Critical 9.1
    CVE-2026-40477 Exploited Public exploit

    Improper restriction of the scope of accessible objects in Thymeleaf expressions

    Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE and prior contain a security bypass vulnerability in the expression execution mechanisms. Although the library provides mechanisms to prevent expressio…

    thymeleaf thymeleaf org.thymeleaf:thymeleaf-spring6 org.thymeleaf:thymeleaf-spring5 Maven
  • Critical 9.8
    CVE-2026-33824 Exploited Public exploit EPSS 77%

    Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

    Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 18, 2026
  • Critical 9.1
    CVE-2026-39808 Exploited Public exploit Scanner template EPSS 93%

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …

    Fortinet FortiSandbox FortiSandbox PaaS Network devices
    KEV Jul 16, 2026
  • Critical 9.3
    CVE-2026-39987 Exploited Public exploit Scanner template EPSS 100%

    marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

    marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary…

    marimo-team marimo marimo PyPI
    KEV Apr 23, 2026
  • Critical 9.1
    CVE-2026-35616 Exploited Public exploit Scanner template EPSS 94%

    A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated att…

    Fortinet FortiClientEMS Network devices
    KEV Apr 6, 2026