CVEs published in April 2026

CVE-2026-33790High

Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker sending a specific, malformed ICMPv6 packet to cause the srxpfe process to crash and restart

CVE-2026-33788High

Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device

CVE-2026-33787Medium

Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1500, SRX4100, SRX4200 and SRX4600 allows a local attacker with low privileges to cause a complete Denial of Service (DoS)

CVE-2026-33786Medium

Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1600, SRX2300 and SRX4300 allows a local attacker with low privileges to cause a complete Denial of Service (DoS)

CVE-2026-33785High

Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices

CVE-2026-33784Critical

Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to take full control of the device

CVE-2026-33783Medium

Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, authenticated attacker with low privileges to cause a complete Denial of Service (DoS)

CVE-2026-33782Medium

Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, unauthenticated attacker to cause a memory leak, that will eventually cause a complete Denial-of-Service (DoS)

CVE-2026-33781Medium

Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX and QFX Series devices allow an unauthenticated, adjacent attacker to cause a complete Denial of Service (DoS)

CVE-2026-33780Medium

Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a memory leak ultimately leading to a Denial of Service (DoS)

CVE-2026-33779Medium

Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it

CVE-2026-33778High

Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS)

CVE-2026-33776Medium

Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive information

CVE-2026-33775Medium

Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS)

CVE-2026-33774Medium

Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the configured firewall filter and access the control-plane of the device

CVE-2026-33773Medium

Incorrect Initialization of Resource vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series and QFX Series device allows an unauthenticated, network-based attacker to cause an integrity impact to downstream networks

CVE-2026-33771High

Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacker to exploit weak passwords of local accounts and potentially take full control of the device

CVE-2026-21919Medium

Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service (DoS) of the management plane

CVE-2026-21916High

UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system

CVE-2026-21915Medium

Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows a local, high privileged attacker to escalate their privileges to root

CVE-2026-21904Medium

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the list filter field that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator

CVE-2025-59969Medium

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper Networks Junos OS Evolved on PTX Series or QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).An attacker sending crafted multicast packets will cause line cards running evo-aftmand/evo-pfemand to crash and restart or non-line card devices to crash and restart

CVE-2025-13914High

Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM attacker to impersonate managed devices

CVE-2026-29129High

Apache Tomcat: Configured cipher preference order not preserved vulnerability in Apache Tomcat.

CVE-2026-34500Critical

Authentication bypass via client certificate misconfiguration

CVE-2026-34487High

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat…

CVE-2026-34486HighCISA KEV

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

CVE-2026-34483High

Information disclosure due to improper encoding in JsonAccessLogValve

CVE-2026-32990Critical

Improper Input Validation vulnerability due to incomplete fix

CVE-2026-29146High

Information disclosure via Padding Oracle vulnerability in EncryptInterceptor

CVE-2026-29145Critical

Authentication bypass due to CLIENT_CERT soft fail misconfiguration

CVE-2026-25854Medium

Open Redirect vulnerability via LoadBalancerDrainingValve

CVE-2026-24880High

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat

CVE-2026-40046High

CVE-2025-66168High

Apache ActiveMQ Vulnerability in NetApp Products

CVE-2026-34020High

Apache OpenMeetings: Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings.

CVE-2026-33266High

Apache OpenMeetings: Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings.

CVE-2026-33005Medium

Apache OpenMeetings: Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings.

CVE-2026-4116High

CVE-2026-4114High

CVE-2026-4113High

CVE-2026-4112High

CVE-2026-34757Medium

Information disclosure and data corruption via use-after-free vulnerability

CVE-2025-62718Critical

Server-Side Request Forgery and proxy bypass due to improper hostname normalization

CVE-2025-57735Critical

Apache Airflow: Airflow Logout Not Invalidating JWT

CVE-2026-34538Medium

Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)

CVE-2025-62188High

CVE-2023-48796High

CVE-2026-5173High

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9.6 before 18.8.9, 18.9 before 18.9.5, and 18.10…

CVE-2026-4916Low

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10…

CVE-2026-4332Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before…

CVE-2026-2619Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before…

CVE-2026-2104Medium

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10…

CVE-2026-1752Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before…

CVE-2026-1516Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10…

CVE-2026-1101Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before…

CVE-2026-1092High

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.8.9, 18.9 before 18.9.5, and 18.10…

CVE-2025-9484Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before…

CVE-2025-12664High

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 18.8.9, 18.9 before 18.9.5, and 18.10…

CVE-2026-39892Critical

Buffer overflow via non-contiguous buffer in API

CVE-2026-39883Critical

github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris

CVE-2025-30650Medium

Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root

CVE-2026-32281Critical

Go crypto/x509: Denial of Service via inefficient certificate chain validation

CVE-2026-32280Critical

Denial of Service vulnerability in certificate chain building

CVE-2026-32288Critical

Go's archive/tar package: Denial of Service via maliciously-crafted archive

CVE-2026-32283Critical

Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

CVE-2026-27143Critical

possible memory corruption after bound check elimination

CVE-2026-27140Critical

Go (golang) and cmd/go: Arbitrary Code Execution via malicious SWIG file names

CVE-2026-33810Critical

Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

CVE-2026-32289Critical

Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

CVE-2026-27144Critical

no-op interface conversion bypasses overlap checking

CVE-2026-32282Critical

Root.Chmod can follow symlinks out of the root

CVE-2026-28390High

Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

CVE-2026-29181Critical

github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers

CVE-2026-32588Medium

Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies

CVE-2026-27315Medium

Sensitive Information Leak in cqlsh in Apache Cassandra 4.0

CVE-2026-27314High

Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator

CVE-2026-23818High

vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the login flow using a crafted URL

CVE-2026-35554High

race condition in the Apache Kafka Java producer client’s buffer pool management

CVE-2026-33227Medium

Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker…

CVE-2026-34197HighCISA KEV

Apache ActiveMQ Improper Input Validation Vulnerability

CVE-2026-31790Medium

Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

CVE-2026-31789Medium

Heap buffer overflow on 32-bit systems from large X.509 certificate processing

CVE-2026-28389Medium

Denial of Service vulnerability in CMS processing

CVE-2026-28388Medium

Denial of Service due to NULL pointer dereference in delta CRL processing

CVE-2026-28387Low

OpenSSL Vulnerability in NetApp Products

CVE-2026-28386Medium

Denial of Service due to out-of-bounds read in AES-CFB128

CVE-2026-34986Critical

Denial of Service via crafted JSON Web Encryption (JWE) object

CVE-2026-5704Medium

hidden file injection via crafted archives

CVE-2026-4878Critical

Privilege escalation via TOCTOU race condition in cap_set_file

CVE-2016-20058High

Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation

CVE-2016-20057High

NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation

CVE-2026-35616CriticalCISA KEV

Fortinet FortiClient EMS Improper Access Control Vulnerability

CVE-2026-27456Medium

TOCTOU in the mount program when setting up loop devices

CVE-2026-35536Critical

Cookie attribute injection due to improper handling of cookie arguments

CVE-2026-31402Critical

fix heap overflow in NFSv4.0 LOCK replay cache

CVE-2025-8941High

Linux-Pam Vulnerability in NetApp Products

CVE-2024-22365Medium

Linux-Pam Vulnerability in NetApp Products

CVE-2026-20110Medium

Cisco IOS XE Software Denial of Service Vulnerability

CVE-2026-34743Medium

Denial of Service via buffer overflow in index decoding