CVEs published in April 2026
516 tracked CVEs from 19 vendors had their first vendor advisory published in April 2026: 113 critical, 224 high, 12 in CISA KEV. Newest first.
372 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-34601Critical
XML structure injection via CDATA terminator
Red Hat, Splunk · 2 advisories - Added
CVE-2025-65114High
Apache Traffic Server: Apache Traffic Server allows request smuggling if chunked messages are malformed.
Apache · 1 advisory - Added
CVE-2025-58136High
Apache Traffic Server: bug in POST request handling causes a crash under a certain condition.
Apache · 1 advisory - Added
CVE-2026-35414Medium
Security bypass via mishandling of authorized_keys principals option
NetApp, Palo Alto, Red Hat · 3 advisories - Added
Low integrity impact from unconfirmed proxy-mode multiplexing sessions
NetApp, Palo Alto, Red Hat · 3 advisories - Added
Information disclosure due to unintended cryptographic algorithm usage
NetApp, Palo Alto, Red Hat · 3 advisories - Added
OpenSSH Vulnerability in NetApp Products
NetApp, Palo Alto, Red Hat · 3 advisories - Added
CVE-2026-35385High
Privilege escalation via scp legacy protocol when not preserving file mode
NetApp, Palo Alto, Red Hat · 3 advisories - Added
CVE-2026-3987High
WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI
WatchGuard · 1 advisory - Added
CVE-2026-20174Medium
Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20160Critical
Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20155High
Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20151High
Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20093Critical
Cisco Integrated Management Controller Authentication Bypass Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20042Medium
Cisco Nexus Dashboard Configuration Backup REST API Unauthorized Access Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20041Medium
Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability
Cisco · 1 advisory