Skip to content
OpenAdvisories

Archive

April 2026

Vulnerabilities first published in this month (UTC), newest first.

← March 2026 2026 / April May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-41940 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    WebPros cPanel and WHM Authentication Bypass via Login Flow

    cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

    WebPros cPanel WP Squared WHM
    KEV Apr 30, 2026
  • Critical 10.0
    CVE-2026-41679 Exploited Public exploit Scanner template EPSS 32%

    Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass

    Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authen…

    paperclipai @paperclipai/server paperclip @paperclipai/server npm
  • High 7.8
    CVE-2026-31431 Exploited Public exploit EPSS 98%

    crypto: algif_aead - Revert to operating out-of-place

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux Alpine
    KEV May 1, 2026
  • Critical 9.1
    CVE-2026-40477 Exploited Public exploit

    Improper restriction of the scope of accessible objects in Thymeleaf expressions

    Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE and prior contain a security bypass vulnerability in the expression execution mechanisms. Although the library provides mechanisms to prevent expressio…

    thymeleaf thymeleaf org.thymeleaf:thymeleaf-spring6 org.thymeleaf:thymeleaf-spring5 Maven
  • Critical 9.8
    CVE-2026-33824 Exploited Public exploit EPSS 77%

    Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

    Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 18, 2026
  • Medium 6.5
    CVE-2026-32201 Exploited Public exploit EPSS 44%

    Microsoft SharePoint Server Spoofing Vulnerability

    Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
    KEV Apr 14, 2026
  • High 7.8
    CVE-2026-33825 Exploited · Ransomware Public exploit

    Microsoft Defender Elevation of Privilege Vulnerability

    Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

    Microsoft Microsoft Defender Antimalware Platform
    KEV Apr 22, 2026
  • Medium 4.3
    CVE-2026-32202 Exploited Public exploit EPSS 71%

    Windows Shell Spoofing Vulnerability

    Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Alpine
    KEV Apr 28, 2026
  • Critical 9.1
    CVE-2026-39808 Exploited Public exploit Scanner template EPSS 93%

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …

    Fortinet FortiSandbox FortiSandbox PaaS Network devices
    KEV Jul 16, 2026
  • High 8.6
    CVE-2026-34621 Exploited Public exploit

    Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

    Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the curre…

    Adobe Acrobat 2024 Acrobat Reader DC Acrobat DC
    KEV Apr 13, 2026
  • High 7.5
    CVE-2026-34486 Exploited Public exploit Scanner template EPSS 99%

    Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

    Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat org.apache.tomcat:tomcat-tribes Maven
    KEV Aug 4, 2026
  • Critical 9.3
    CVE-2026-39987 Exploited Public exploit Scanner template EPSS 100%

    marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

    marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary…

    marimo-team marimo marimo PyPI
    KEV Apr 23, 2026
  • High 8.8
    CVE-2026-34197 Exploited Public exploit Scanner template EPSS 98%

    Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

    Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia…

    Apache Software Foundation Apache ActiveMQ Apache ActiveMQ All Apache ActiveMQ Broker Debian Ubuntu Maven
    KEV Apr 16, 2026
  • Critical 9.1
    CVE-2026-35616 Exploited Public exploit Scanner template EPSS 94%

    A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated att…

    Fortinet FortiClientEMS Network devices
    KEV Apr 6, 2026
  • High 8.8
    CVE-2026-5281 Exploited Public exploit EPSS 14%

    Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the rende…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV Apr 1, 2026