Week 16, 2026

13–19 April 2026

New CVEs: 1,198
Critical: 114
High: 508
Newly exploited: 10
Advisories: 615
Malicious pkgs: 331

Newly exploited 10

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

High 8.8
CVE-2026-34197 KEV Apr 16, 2026 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
Apache Software Foundation · Apache ActiveMQ · Apache ActiveMQ All · Apache ActiveMQ Broker

EPSS 98%
High 8.8
CVE-2009-0238 KEV Apr 14, 2026 Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerP…
EPSS 43%
Medium 6.5
CVE-2026-32201 KEV Apr 14, 2026 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition

EPSS 43%
Critical 9.1
CVE-2026-21643 KEV Apr 13, 2026 An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthentic…
Fortinet · FortiClientEMS

EPSS 98%
High 8.8
CVE-2023-21529 KEV Apr 13, 2026 · ransomware Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft · Microsoft Exchange Server 2016 Cumulative Update 23 · Microsoft Exchange Server 2013 Cumulative Update 23 · Microsoft Exchange Server 2019 Cumulative Update 12

EPSS 59%
High 8.6
CVE-2026-34621 KEV Apr 13, 2026 Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
Adobe · Acrobat 2024 · Acrobat Reader DC · Acrobat DC

EPSS 7.3%
High 7.8
CVE-2020-9715 KEV Apr 13, 2026 Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free…
Adobe · Adobe Acrobat and Reader

EPSS 33%
High 7.8
CVE-2012-1854 KEV Apr 13, 2026 Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications …
EPSS 21%
High 7.8
CVE-2025-60710 KEV Apr 13, 2026 · ransomware Host Process for Windows Tasks Elevation of Privilege Vulnerability
Microsoft · Windows Server 2025 · Windows Server 2025 (Server Core installation) · Windows 11 Version 24H2

EPSS 4.6%
High 7.8
CVE-2023-36424 KEV Apr 13, 2026 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 12%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.1
CVE-2026-39808 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may all…
Fortinet · FortiSandbox · FortiSandbox PaaS

EPSS 93%
Critical 9.8
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 77%
Critical 9.1
CVE-2026-39813 A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of…
Fortinet · FortiSandbox

EPSS 22%
Critical 9.8
CVE-2026-6195 Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection
Totolink · A7100RU

EPSS 14%
Critical 9.9
CVE-2026-20147 Cisco Identity Services Engine Remote Code Execution Vulnerability
Cisco · Cisco Identity Services Engine Software · Cisco ISE Passive Identity Connector

EPSS 10%
Critical 9.8
CVE-2025-61260 OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files
EPSS 6.7%
Critical 9.9
CVE-2026-20180 Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability
Cisco · Cisco Identity Services Engine Software

EPSS 6%
Critical 9.9
CVE-2026-20186 Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability
Cisco · Cisco Identity Services Engine Software

EPSS 5.6%
Critical 9.9
CVE-2026-38526 An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x allows attackers to execute arbitrary co…
EPSS 4.1%
Critical 9.3
CVE-2026-27304 ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2023 · ColdFusion 2025

EPSS 3.6%
Critical 9.8
CVE-2026-6140 Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection
Totolink · A7100RU

EPSS 2.2%
Critical 9.8
CVE-2026-6349 HGiga｜iSherlock - OS Command Injection
HGiga · iSherlock-audit-4.5 · iSherlock-audit-5.5 · iSherlock-base-4.5

EPSS 2%
Critical 9.8
CVE-2026-6156 Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection
Totolink · A7100RU

EPSS 1.8%
Critical 9.8
CVE-2026-6154 Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection
Totolink · A7100RU

EPSS 1.8%
Critical 9.8
CVE-2026-6139 Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection
Totolink · A7100RU

EPSS 1.8%

All 114 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Medium 4.3
CVE-2026-32202 Windows Shell Spoofing Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 71%
Medium 6.5
CVE-2026-32201 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition

EPSS 43%
High 8.6
CVE-2026-27305 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion 2025 · ColdFusion 2023

EPSS 26%
Medium 4.6
CVE-2026-20945 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition

EPSS 19%
High 7.2
CVE-2026-6483 Wavlink WL-WN530H4 internet.cgi snprintf os command injection
WAVLINK · WL-WN530H4

EPSS 13%
High 7.7
CVE-2026-34619 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion 2023 · ColdFusion 2025

EPSS 7.6%
High 8.5
CVE-2026-6204 LibreNMS is Vulnerable to Remote Code Execution by Arbitrary File Write
librenms · librenms

EPSS 7.5%
High 7.8
CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability
Microsoft · Microsoft Defender Antimalware Platform

EPSS 6.7%

Advisories

USN-8163-2 linux-azure vulnerabilities 350 CVEs
USN-8184-1 linux-realtime, linux-realtime-6.8 vulnerabilities 175 CVEs
USN-8179-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities 174 CVEs
USN-8179-1 linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities 174 CVEs
USN-8185-1 linux-nvidia, linux-nvidia-6.8 vulnerabilities 173 CVEs
USN-8177-1 linux, linux-realtime vulnerabilities 139 CVEs
USN-8177-2 linux-realtime-6.17 vulnerabilities 139 CVEs
USN-8183-1 linux-gcp, linux-gcp-6.17 vulnerabilities 138 CVEs
WID-SEC-2026-1104 Microsoft Windows: Mehrere Schwachstellen 134 CVEs
USN-8188-1 linux-hwe-5.15 vulnerabilities 84 CVEs