CVEs published in April 2026

CVE-2026-3832Low

Security bypass allows acceptance of revoked server certificates via crafted OCSP response

CVE-2026-33845High

Denial of Service via DTLS zero-length fragment

CVE-2026-3833High

Policy bypass due to case-sensitive nameConstraints comparison

CVE-2026-41016Medium

Apache Airflow's SMTP provider `SmtpHook` called Python's `smtplib.SMTP.starttls` without an SSL context, so no certificate…

CVE-2026-0206High

CVE-2026-0205High

CVE-2026-0204High

CVE-2026-42198Critical

Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

CVE-2026-22745Medium

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.

CVE-2026-22741Low

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.

CVE-2026-22740Medium

WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K.

CVE-2026-6429Critical

Credential leak via reused proxy connection during HTTP redirects

CVE-2026-6276Critical

Information disclosure due to cookie leak when reusing connections with custom Host headers

CVE-2026-6253Medium

Proxy credential disclosure via redirects to unauthenticated proxies

CVE-2026-5773High

Wrong file transfer due to incorrect SMB connection reuse

CVE-2026-5545Medium

Libcurl Vulnerability in NetApp Products

CVE-2026-5419Low

Information disclosure via timing side-channel in PKCS#7 padding removal

CVE-2026-5260High

Information disclosure via heap overread in RSA key exchange

CVE-2026-4873Medium

Information disclosure due to incorrect TLS connection reuse

CVE-2026-42015High

Memory corruption due to off-by-one error in PKCS#12 bag handling

CVE-2026-42014Medium

Use-after-free in gnutls_pkcs11_token_set_pin

CVE-2026-42013High

Certificate validation bypass due to oversized Subject Alternative Name

CVE-2026-42012High

Certificate validation bypass due to improper handling of URI and SRV SANs

CVE-2026-42011High

Security bypass due to incorrect name constraint handling

CVE-2026-42010High

Authentication Bypass via NUL Character in Username

CVE-2026-42009High

Denial of Service via DTLS packet reordering vulnerability

CVE-2025-46836Medium

net-tools Vulnerability in NetApp Products

CVE-2026-6238Medium

GNU C Library (glibc) Vulnerability in NetApp Products

CVE-2026-41873Critical

** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability…

CVE-2026-40969Low

The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status…

CVE-2026-40968Medium

When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker…

CVE-2026-20148Critical

CVE-2026-20147Critical

CVE-2026-5435Medium

Out-of-bounds write via TSIG record processing

CVE-2026-41636Critical

Node.js skip recursion

CVE-2026-41607Critical

Out-of-bounds Read vulnerability

CVE-2026-41606Critical

Denial of Service via uncontrolled recursion

CVE-2026-41605Critical

Integer Overflow or Wraparound Vulnerability

CVE-2026-41604Critical

Out-of-bounds Read vulnerability

CVE-2026-41603Critical

Security Bypass via Improper Certificate Hostname Validation

CVE-2026-41602Critical

Integer Overflow in TFramedTransport Go implementation

CVE-2026-40980Medium

In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory

CVE-2026-40979Medium

In Spring AI, having access to a shared environment can expose the ONNX model used by the application.

CVE-2026-40978High

SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries

CVE-2025-48431Critical

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

CVE-2026-40966Medium

In Spring AI, an attacker

CVE-2026-40967High

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific…

CVE-2026-1460High

post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device

CVE-2026-0711Medium

post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device

CVE-2026-40977Medium

Spring Boot: When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location

CVE-2026-40974High

Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra

CVE-2026-7363Critical

Use after free in Canvas

CVE-2026-7361Critical

Use after free in iOS

CVE-2026-7359Critical

Use after free in ANGLE

CVE-2026-7343Critical

Use after free in Views

CVE-2026-40356Critical

MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

CVE-2026-40355Medium

Denial of Service via NULL pointer dereference in NegoEx mechanism

CVE-2026-40976Critical

Security bypass due to ineffective default web security

CVE-2026-40975High

Weak pseudo-random number generation can lead to information disclosure.

CVE-2026-40973High

Spring Boot: local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`

CVE-2026-40971Critical

When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification

CVE-2026-40972High

Spring Boot: attacker on the same network as the remote application

CVE-2026-40970Medium

When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification

CVE-2026-41081Medium

Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions…

CVE-2026-40557Medium

Apache Storm Prometheus: Improper Certificate Validation

CVE-2026-41409Critical

CVE-2024-23114High

CVE-2024-22369High

CVE-2025-30177Critical

CVE-2025-29891Critical

CVE-2026-27172High

Apache Camel camel-consul: Arbitrary code execution via deserialization of untrusted data

CVE-2026-33453Critical

Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code Execution

CVE-2026-33454Critical

Altered application behavior via header injection

CVE-2026-40022High

Information disclosure and authentication bypass in embedded HTTP/management servers

CVE-2026-40858High

Apache Camel camel-infinispan: Arbitrary code execution via deserialization of untrusted data

CVE-2025-27636Critical

CVE-2026-41635Critical

Arbitrary code execution via classname allowlist bypass

CVE-2026-40453Critical

Remote Code Execution and Arbitrary File Write via case-variant header injection

CVE-2026-40860Critical

Remote Code Execution via deserialization of JMS ObjectMessage

CVE-2026-40048Critical

Arbitrary code execution via insecure deserialization of crafted key files

CVE-2026-40473High

Apache Camel: The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in a java.io.ObjectInputStream…

CVE-2026-41411High

Command injection allows arbitrary code execution via malicious tag files

CVE-2026-40690Medium

Apache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users

CVE-2026-38743Medium

Apache Airflow: Dags endpoint might provide access to otherwise inaccessible entities

CVE-2023-20185High

Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability

CVE-2026-23902High

Incorrect Authorization vulnerability in Apache DolphinScheduler

CVE-2026-41043Medium

Apache ActiveMQ Web: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache ActiveMQ…

CVE-2025-62233Medium

Apache DolphinScheduler: Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module.

CVE-2026-41044Critical

Arbitrary code execution via improper input validation in admin console

CVE-2026-40466Critical

Arbitrary code execution via improper input validation in HTTP Discovery transport

CVE-2026-31669High

fix slab-use-after-free in __inet_lookup_established

CVE-2026-31607Critical

validate number_of_packets in usbip_pack_ret_submit

CVE-2026-23230High

Linux Kernel Vulnerability in NetApp Products

CVE-2026-23112Critical

Linux Kernel Vulnerability in NetApp Products

CVE-2026-23098High

Linux Kernel Vulnerability in NetApp Products

CVE-2026-23095Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2025-68263Critical

Linux Kernel Vulnerability in NetApp Products

CVE-2025-64756High

Node-Glob Vulnerability in NetApp Products

CVE-2025-37924Critical

Linux Kernel Vulnerability in NetApp Products

CVE-2025-22041High

Linux Kernel Vulnerability in NetApp Products