CVEs published in April 2026
516 tracked CVEs from 19 vendors had their first vendor advisory published in April 2026: 113 critical, 224 high, 12 in CISA KEV. Newest first.
372 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-32082High
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32081Medium
Package Catalog Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32075High
Windows UPnP Device Host Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32073High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32071High
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27931Medium
Windows GDI Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27929High
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27927High
Windows Projected File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27926High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27924High
Desktop Window Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27921High
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27919High
Windows UPnP Device Host Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27918High
Windows Shell Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27917High
Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27915High
Windows UPnP Device Host Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27908High
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27907High
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26183High
Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26181High
Microsoft Brokering File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26180High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26179High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26175Medium
Windows Boot Manager Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26174High
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26167High
Windows Push Notifications Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26166High
Windows Shell Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26165High
Windows Shell Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26162High
Windows OLE Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26161High
Windows Sensor Data Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26160High
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26155Medium
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26154High
Windows Server Update Service (WSUS) Tampering Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26151High
Remote Desktop Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-23670Medium
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20945Medium
Microsoft SharePoint Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-25184High
Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20930High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33929Medium
Apache · 1 advisory - Added
CVE-2026-23907Medium
Apache · 1 advisory - Added
CVE-2026-31924Medium
Apache APISIX: Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.
Apache · 1 advisory - Added
CVE-2026-31923High
Apache APISIX: Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.
Apache · 1 advisory - Added
CVE-2026-31908Critical
Apache APISIX: Header injection vulnerability in Apache APISIX.
Apache · 1 advisory - Added
CVE-2026-39815High
SQL Injection via API
Fortinet · 1 advisory - Added
CVE-2026-39814Medium
Multiple Path traversals in CLI
Fortinet · 1 advisory - Added
CVE-2026-39813Critical
Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
Fortinet · 1 advisory - Added
CVE-2026-39812Medium
Multiple Stored XSS
Fortinet · 1 advisory - Added
CVE-2026-39811Medium
Integer Overflow Denial of Service in administrative interface
Fortinet · 1 advisory - Added
CVE-2026-39810Medium
Hardcoded symmetric encryption key for Postgresql
Fortinet · 1 advisory - Added
CVE-2026-39809High
Multiple SQL Injections
Fortinet · 1 advisory - Added
CVE-2026-39808CriticalCISA KEV
Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet · 1 advisory - Added
Credential disclosure in LDAP configuration web page.
Fortinet · 1 advisory - Added
CVE-2026-25691Medium
Arbitrary directory delete on vmimages delete feature
Fortinet · 1 advisory - Added
CVE-2026-23708Medium
2FA request can be replayed without a valid token after one successful request
Fortinet · 1 advisory - Added
CVE-2026-22828High
Heap-based buffer overflow in oftpd daemon
Fortinet · 1 advisory - Added
CVE-2026-22576Medium
Clear-text credentials retrievable with IP modification for connectors
Fortinet · 1 advisory - Added
CVE-2026-22574Medium
Clear-text credentials retrievable with IP modification for LDAP
Fortinet · 1 advisory - Added
CVE-2026-22573Medium
Path Traversal on File Content Extraction connector
Fortinet · 1 advisory - Added
CVE-2026-22155Medium
Fortinet · 1 advisory - Added
CVE-2026-22154Medium
Stored Cross Site Scripting (XSS) in Reports View page
Fortinet · 1 advisory - Added
CVE-2026-21742Medium
Fortinet · 1 advisory - Added
Open Redirection via Import CSV option
Fortinet · 1 advisory - Added
CVE-2025-68649Medium
Path Traversal in CLI
Fortinet · 1 advisory - Added
CVE-2025-61886Medium
Reflected XSS in Operation Center
Fortinet · 1 advisory - Added
CVE-2025-61848Medium
SQL Injection via JSON RPC API
Fortinet · 1 advisory - Added
CVE-2025-61624MediumCISA KEV
Fortinet Multiple Products Path Traversal Vulnerability
Fortinet · 1 advisory - Added
CVE-2025-59809Medium
SSRF via Report template and scheduling
Fortinet · 1 advisory - Added
CVE-2025-53847Medium
Missing Authentication for critical function in CAPWAP daemon
Fortinet · 1 advisory - Added
CVE-2024-23104Medium
unauthorized backup file access
Fortinet · 1 advisory - Added
CVE-2026-33948Medium
Input validation bypass via embedded NUL bytes allows parser differential attacks
NetApp, Red Hat · 2 advisories - Added
CVE-2026-40164High
Denial of Service via crafted JSON object causing hash collisions
NetApp, Red Hat · 2 advisories - Added
CVE-2026-39979High
out-of-bounds read in jv_parse_sized on error formatting for non-NUL-terminated buffers
NetApp, Red Hat · 2 advisories - Added
CVE-2026-39956Medium
missing runtime type checks for _strindices lead to crash and limited memory disclosure
NetApp, Red Hat · 2 advisories - Added
CVE-2026-33947Medium
unbounded Recursion in jv_setpath / jv_getpath / delpaths_sorted
NetApp, Red Hat · 2 advisories - Added
CVE-2026-32316High
Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflow
NetApp, Red Hat · 2 advisories - Added
CVE-2026-6100Critical
CPython Vulnerability in NetApp Products
NetApp, Red Hat · 2 advisories - Added
CVE-2026-33858High
Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API
Apache · 1 advisory - Added
CVE-2025-66236High
Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI
Apache · 1 advisory - Added
CVE-2026-34476High
Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP.
Apache · 1 advisory - Added
CVE-2026-35565Medium
Apache Storm UI: Stored Cross-Site Scripting (XSS)
Apache · 1 advisory - Added
CVE-2026-35337High
Apache Storm: Deserialization of Untrusted Data vulnerability in Apache Storm.
Apache · 1 advisory - Added
CVE-2026-0234Critical
improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during…
Palo Alto · 1 advisory - Added
CVE-2026-0233High
certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows
Palo Alto · 1 advisory - Added
CVE-2026-0232Medium
problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows
Palo Alto · 1 advisory - Added
CVE-2026-40175Critical
Remote Code Execution via Prototype Pollution escalation
NetApp, Red Hat · 2 advisories - Added
CVE-2026-40023Medium
Apache Log4cxx Vulnerability in NetApp Products
Apache, NetApp · 2 advisories - Added
CVE-2026-40021Medium
Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list and…
Apache · 1 advisory - Added
CVE-2026-34481High
Denial of Service via invalid JSON output
Apache, NetApp, Red Hat · 4 advisories - Added
CVE-2026-34480High
Invalid XML output causes denial of service in logging
Apache, NetApp, Red Hat · 4 advisories - Added
CVE-2026-34479High
The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard…
Apache, NetApp, Red Hat · 4 advisories - Added
CVE-2026-34478High
Log injection via CRLF sequences due to configuration attribute renames
Apache, NetApp, Red Hat · 4 advisories - Added
CVE-2026-34477High
Man-in-the-middle attack due to incomplete hostname verification
Apache, NetApp, Red Hat · 4 advisories - Added
CVE-2026-39304High
Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion
Apache, Red Hat · 2 advisories - Added
CVE-2021-47961High
Synology · 1 advisory - Added
CVE-2021-47960High
Synology · 1 advisory - Added
CVE-2026-22750High
When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configuration…
VMware · 1 advisory - Added
CVE-2026-40200High
musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort
NetApp, Red Hat · 2 advisories - Added
CVE-2026-21226Critical
Azure Core shared client library for Python Vulnerability in NetApp Products
NetApp, Splunk · 2 advisories - Added
CVE-2023-28840High
Docker Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-33797High
Improper Input Validation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker, sending a specific genuine BGP packet in an already established BGP session to reset only that session causing a Denial of Service (DoS)
Juniper · 1 advisory - Added
CVE-2026-33793High
Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to gain root privileges, thus compromising the system
Juniper · 1 advisory - Added
CVE-2026-33791Medium
OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted CLI commands to inject arbitrary shell commands as root, leading to a complete compromise of the system
Juniper · 1 advisory