Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2026

362 records · 14 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 4

  • CVE-2026-5281
    65This week

    Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execut

    HighCVSS 8.8KEVWeaponizedEPSS 0%

    google · chromeApr 1, 2026

  • CVE-2026-29014
    38Monitor

    MetInfo CMS Unauthenticated PHP Code Injection RCE

    CriticalCVSS 9.3Proof of conceptEPSS 4%

    metinfo · metinfoApr 1, 2026

  • CVE-2026-29598
    21Monitor

    Multiple stored cross-site scripting (XSS) vulnerabilities in the submit_add_user.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allow a

    MediumCVSS 5.4Proof of conceptEPSS 0%

    Apr 1, 2026

  • CVE-2026-34159
    39Monitor

    llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    ggml · llama.cppApr 1, 2026

  • CVE-2026-5032
    31Monitor

    W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header

    HighCVSS 7.5Proof of conceptEPSS 2%

    boldgrid · w3 total cacheApr 2, 2026

  • CVE-2026-23416
    22Monitor

    mm/mseal: update VMA end correctly on merge

    MediumCVSS 5.5Proof of conceptEPSS 0%

    linux · linux kernelApr 2, 2026

  • CVE-2026-4282
    29Monitor

    Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw

    HighCVSS 7.4Proof of conceptEPSS 0%

    redhat · build of keycloakApr 2, 2026

  • CVE-2026-29782
    28Monitor

    OpenSTAManager: Remote Code Execution via Insecure Deserialization in OAuth2

    HighCVSS 7.2Proof of conceptEPSS 0%

    devcode · openstamanagerApr 2, 2026

  • CVE-2026-2699
    40Plan

    EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    progress · sharefile storage zones controllerApr 2, 2026

  • CVE-2026-33641
    31Monitor

    Glances Vulnerable to Command Injection via Dynamic Configuration Values

    HighCVSS 7.8Proof of conceptEPSS 0%

    nicolargo · glancesApr 2, 2026

  • CVE-2026-5339
    11Monitor

    Tenda G103 Setting gpon.lua action_set_net_settings command injection

    LowCVSS 2.0No exploitEPSS 10%

    tenda · g103 firmwareApr 2, 2026

  • CVE-2026-23415
    31Monitor

    futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

    HighCVSS 7.8Proof of conceptEPSS 0%

    linux · linux kernelApr 2, 2026

  • CVE-2026-30332
    30Monitor

    A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escala

    HighCVSS 7.5Proof of conceptEPSS 0%

    Apr 2, 2026

  • CVE-2026-33691
    30Monitor

    OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks

    HighCVSS 7.5Proof of conceptEPSS 1%

    owasp · owasp modsecurity core rule setApr 2, 2026

  • CVE-2026-25212
    39Monitor

    An issue was discovered in Percona PMM before 3.7.

    CriticalCVSS 9.9Proof of conceptEPSS 0%

    percona · monitoring and managementApr 2, 2026

  • CVE-2026-34523
    21Monitor

    SillyTavern: Path traversal allows file existence oracle

    MediumCVSS 5.3No exploitEPSS 0%

    sillytavern · sillytavernApr 2, 2026

  • CVE-2026-34828
    28Monitor

    listmonk: Active sessions remain valid after password reset and password change

    HighCVSS 7.1Proof of conceptEPSS 0%

    nadh · listmonkApr 2, 2026

  • CVE-2026-34835
    26Monitor

    Rack: `Rack::Request` accepts invalid Host characters, enabling host allowlist bypass.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    rack · rackApr 2, 2026

  • CVE-2026-35414
    32Monitor

    OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a

    HighCVSS 8.1Proof of conceptEPSS 0%

    openbsd · opensshApr 2, 2026

  • CVE-2026-34838
    39Monitor

    Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection`

    CriticalCVSS 9.9Proof of conceptEPSS 0%

    intermesh · group-officeApr 2, 2026

  • CVE-2026-34847
    24Monitor

    hoppscotch: Open redirect via `/enter?redirect=`

    MediumCVSS 6.1Proof of conceptEPSS 0%

    hoppscotch · hoppscotchApr 2, 2026

  • CVE-2026-30251
    24Monitor

    A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allo

    MediumCVSS 6.1Proof of conceptEPSS 0%

    interzen · zenshare suiteApr 2, 2026

  • CVE-2026-30252
    24Monitor

    Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 al

    MediumCVSS 6.1Proof of conceptEPSS 0%

    interzen · zencrmApr 2, 2026

  • CVE-2026-35535
    31Monitor

    In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer

    HighCVSS 7.8No exploitEPSS 0%

    sudo project · sudoApr 2, 2026

  • CVE-2026-4350
    32Monitor

    Perfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter

    HighCVSS 8.1Proof of conceptEPSS 0%

    perfmatters · perfmattersApr 3, 2026

  • CVE-2026-0545
    40Plan

    Missing Authentication for Critical Function in mlflow/mlflow

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    lfprojects · mlflowApr 3, 2026

  • CVE-2026-31402
    39Monitor

    nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    linux · linux kernelApr 3, 2026

  • CVE-2025-10681
    35Monitor

    Gardyn Mobile Application and Device Firmware Use Hard-coded Credentials

    HighCVSS 8.8Proof of conceptEPSS 0%

    gardyn · mobile applicationApr 3, 2026

  • CVE-2026-25197
    37Monitor

    Gardyn Cloud API Authorization Bypass Through User-Controlled Key

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    mygardyn · cloud apiApr 3, 2026

  • CVE-2026-28766
    36Monitor

    Gardyn Cloud API Missing Authentication for Critical Function

    CriticalCVSS 9.2Proof of conceptEPSS 0%

    mygardyn · cloud apiApr 3, 2026

  • CVE-2026-28767
    27Monitor

    Gardyn Cloud API Missing Authentication for Critical Function

    MediumCVSS 6.9Proof of conceptEPSS 0%

    mygardyn · cloud apiApr 3, 2026

  • CVE-2026-32646
    34Monitor

    Gardyn Cloud API Missing Authentication for Critical Function

    HighCVSS 8.7Proof of conceptEPSS 0%

    mygardyn · cloud apiApr 3, 2026

  • CVE-2026-32662
    27Monitor

    Gardyn Cloud API Active Debug Code

    MediumCVSS 6.9Proof of conceptEPSS 0%

    mygardyn · cloud apiApr 3, 2026

  • CVE-2026-27833
    31Monitor

    Piwigo: Unauthenticated Information Disclosure via pwg.history.search API

    HighCVSS 7.5Proof of conceptEPSS 1%

    piwigo · piwigoApr 3, 2026

  • CVE-2026-28797
    34Monitor

    RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Component

    HighCVSS 8.7Proof of conceptEPSS 0%

    infiniflow · ragflowApr 3, 2026

  • CVE-2026-34980
    24Monitor

    OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

    MediumCVSS 6.1Proof of conceptEPSS 0%

    openprinting · cupsApr 3, 2026

  • CVE-2026-34990
    20Monitor

    OpenPrinting CUPS: Local print admin token disclosure using temporary printers

    MediumCVSS 5.0Proof of conceptEPSS 0%

    openprinting · cupsApr 3, 2026

  • CVE-2026-35616
    72This week

    A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unau

    CriticalCVSS 9.8KEVWeaponizedEPSS 9%

    fortinet · forticlientemsApr 3, 2026

  • CVE-2026-2600
    25Monitor

    ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget

    MediumCVSS 6.4Proof of conceptEPSS 0%

    roxnor · elementskit elementor addons – advanced widgets & templates addons for elementorApr 4, 2026

  • CVE-2026-5530
    21Monitor

    Ollama Model Pull API download.go server-side request forgery

    MediumCVSS 5.3Proof of conceptEPSS 0%

    Apr 4, 2026

  • CVE-2026-5555
    22Monitor

    code-projects Concert Ticket Reservation System Parameter login.php sql injection

    MediumCVSS 5.5Proof of conceptEPSS 0%

    code-projects · concert ticket reservation systemApr 5, 2026

  • CVE-2026-5556
    8Monitor

    badlogic pi-mono loader.ts discoverAndLoadExtensions code injection

    LowCVSS 2.1Proof of conceptEPSS 0%

    badlogic · pi-monoApr 5, 2026

  • CVE-2026-5562
    23Monitor

    provectus kafka-ui Endpoint testexecutions validateAccess code injection

    MediumCVSS 5.5Proof of conceptEPSS 3%

    provectus · uiApr 5, 2026

  • CVE-2026-5615
    8Monitor

    givanz Vvvebjs File Upload Endpoint upload.php cross site scripting

    LowCVSS 2.1Proof of conceptEPSS 1%

    givanz · vvvebjsApr 6, 2026

  • CVE-2026-26026
    28Monitor

    GLPI has a Server-Side Template Injection via Double-Compilation

    HighCVSS 7.2Proof of conceptEPSS 0%

    glpi-project · glpiApr 6, 2026

  • CVE-2026-34885
    34Monitor

    WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability

    HighCVSS 8.5Proof of conceptEPSS 1%

    david lingren · media library assistantApr 6, 2026

  • CVE-2026-34897
    26Monitor

    WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    david lingren · media library assistantApr 6, 2026

  • CVE-2026-33752
    34Monitor

    Redirect-based SSRF leading to internal network access in curl_cffi (with TLS impersonation bypass)

    HighCVSS 8.6Proof of conceptEPSS 0%

    lexiforest · curl cffiApr 6, 2026

  • CVE-2026-34444
    31Monitor

    Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr

    HighCVSS 7.9Proof of conceptEPSS 0%

    scoder · lupaApr 6, 2026

  • CVE-2026-34588
    34Monitor

    OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

    HighCVSS 8.6No exploitEPSS 0%

    openexr · openexrApr 6, 2026

  • CVE-2026-34753
    21Monitor

    vLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url `

    MediumCVSS 5.4Proof of conceptEPSS 0%

    vllm · vllmApr 6, 2026

  • CVE-2026-34940
    35Monitor

    KubeAI has an OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods

    HighCVSS 8.8Proof of conceptEPSS 0%

    kubeai · kubeaiApr 6, 2026

  • CVE-2026-34975
    17Monitor

    Plunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers

    MediumCVSS 4.3Proof of conceptEPSS 0%

    useplunk · plunkApr 6, 2026

  • CVE-2026-34976
    40Plan

    Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    dgraph · dgraphApr 6, 2026

  • CVE-2026-35029
    35Monitor

    LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

    HighCVSS 8.7Proof of conceptEPSS 3%

    litellm · litellmApr 6, 2026

  • CVE-2026-35030
    37Monitor

    LiteLLM has an authentication bypass via OIDC userinfo cache key collision

    CriticalCVSS 9.4Proof of conceptEPSS 0%

    litellm · litellmApr 6, 2026

  • CVE-2026-35037
    28Monitor

    Ech0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata

    HighCVSS 7.2Proof of conceptEPSS 0%

    ech0 · ech0Apr 6, 2026

  • CVE-2026-35045
    32Monitor

    Tandoor Recipes Affected by Private Recipe Exposure and Unauthorized Modification

    HighCVSS 8.1Proof of conceptEPSS 0%

    tandoor · recipesApr 6, 2026

  • CVE-2026-0049
    24Monitor

    In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion.

    MediumCVSS 6.2Proof of conceptEPSS 0%

    google · androidApr 6, 2026

  • CVE-2025-54328
    40Plan

    An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    samsung · exynos 980 firmwareApr 6, 2026

  • CVE-2026-5682
    11Monitor

    Meesho Online Shopping App com.meesho.supply endpoint risky encryption

    LowCVSS 2.9Proof of conceptEPSS 0%

    meesho · online shopping appApr 6, 2026

  • CVE-2026-0740
    58Plan

    Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 62%

    saturdaydrive · ninja forms - file uploadsApr 7, 2026

  • CVE-2026-5465
    35Monitor

    Amelia <= 2.1.3 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter

    HighCVSS 8.8Proof of conceptEPSS 0%

    ameliabooking · booking for appointments and events calendar – ameliaApr 7, 2026

  • CVE-2026-34197
    70This week

    Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

    HighCVSS 8.8KEVWeaponizedEPSS 15%

    apache · activemqApr 7, 2026

  • CVE-2026-22666
    39Monitor

    Dolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard()

    HighCVSS 8.6Proof of conceptEPSS 15%

    dolibarr · dolibarr erp\/crmApr 7, 2026

  • CVE-2026-22679
    43Plan

    Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint

    CriticalCVSS 9.3Proof of conceptEPSS 20%

    weaver · e-cologyApr 7, 2026

  • CVE-2026-33866
    21Monitor

    Authorization Bypass in MLflow AJAX Endpoint

    MediumCVSS 5.3No exploitEPSS 0%

    lfprojects · mlflowApr 7, 2026

  • CVE-2026-33033
    26Monitor

    Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload

    MediumCVSS 6.5Proof of conceptEPSS 0%

    djangoproject · djangoApr 7, 2026

  • CVE-2024-36057
    40Plan

    Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    Apr 7, 2026

  • CVE-2026-35492
    26Monitor

    Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

    MediumCVSS 6.5Proof of conceptEPSS 0%

    kedro-org · kedro-pluginsApr 7, 2026

  • CVE-2026-35517
    35Monitor

    Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection

    HighCVSS 8.8Proof of conceptEPSS 1%

    pi-hole · ftldnsApr 7, 2026

  • CVE-2024-36058
    39Monitor

    The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the PO

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    Apr 7, 2026

  • CVE-2026-22683
    35Monitor

    Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE

    HighCVSS 8.7Proof of conceptEPSS 2%

    windmill · windmillApr 7, 2026

  • CVE-2026-23696
    41Plan

    Windmill < 1.603.3 File Ownership Handling SQLi RCE

    CriticalCVSS 9.4Proof of conceptEPSS 13%

    windmill labs · windmill ce (community edition)Apr 7, 2026

  • CVE-2026-35580
    36Monitor

    Emissary has GitHub Actions Shell Injection via Workflow Inputs

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    nsa · emissaryApr 7, 2026

  • CVE-2026-35584
    27Monitor

    FreeScout has an Unauthenticated IDOR in Open Tracking Endpoint Allows Cross-Conversation Thread Manipulation and Enumeration

    MediumCVSS 6.9Proof of conceptEPSS 0%

    freescout · freescoutApr 7, 2026

  • CVE-2026-35585
    31Monitor

    File Browser has a Command Injection via Hook Runner

    HighCVSS 7.5Proof of conceptEPSS 2%

    filebrowser · filebrowserApr 7, 2026

  • CVE-2026-39324
    37Monitor

    Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    rack · rack-sessionApr 7, 2026

  • CVE-2026-39339
    37Monitor

    ChurchCRM has an API Authentication Bypass

    CriticalCVSS 9.1Proof of conceptEPSS 1%

    churchcrm · churchcrmApr 7, 2026

  • CVE-2025-14857
    21Monitor

    Semtech LR11xx Memory Write Access Control Bypass

    MediumCVSS 5.4Proof of conceptEPSS 0%

    semtech · lr1110Apr 7, 2026

  • CVE-2025-56015
    30Monitor

    In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.

    HighCVSS 7.5Proof of conceptEPSS 0%

    genieacs · genieacsApr 7, 2026

  • CVE-2025-69515
    36Monitor

    An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsifie

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    Apr 7, 2026

  • CVE-2026-39363
    33Monitor

    Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket

    HighCVSS 8.2Proof of conceptEPSS 2%

    vitejs · viteApr 7, 2026

  • CVE-2026-39364
    32Monitor

    Vite has a `server.fs.deny` bypass with queries

    HighCVSS 8.2Proof of conceptEPSS 1%

    vitejs · viteApr 7, 2026

  • CVE-2026-39365
    25Monitor

    Vite has a Path Traversal in Optimized Deps `.map` Handling

    MediumCVSS 6.3Proof of conceptEPSS 0%

    vitejs · viteApr 7, 2026

  • CVE-2026-39371
    32Monitor

    RedwoodSDK has a CSRF vulnerability in server function dispatch via GET requests

    HighCVSS 8.1Proof of conceptEPSS 0%

    redwoodjs · redwoodsdkApr 7, 2026

  • CVE-2026-39376
    30Monitor

    FastFeedParser has an infinite redirect loop DoS via meta-refresh chain

    HighCVSS 7.5Proof of conceptEPSS 0%

    kagi · fastfeedparserApr 7, 2026

  • CVE-2026-39382
    37Monitor

    dbt has a Command Injection in Reusable Workflow via Unsanitized comment-body Output

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    dbt-labs · dbt-coreApr 7, 2026

  • CVE-2026-4631
    42Plan

    Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection

    CriticalCVSS 9.8Proof of conceptEPSS 9%

    red hat · red hat enterprise linux 10Apr 7, 2026

  • CVE-2026-33439
    40Plan

    Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM

    CriticalCVSS 9.3Proof of conceptEPSS 8%

    openidentityplatform · openamApr 7, 2026

  • CVE-2026-4406
    18Monitor

    Gravity Forms <= 2.9.30 - Reflected Cross-Site Scripting via 'form_ids' Parameter

    MediumCVSS 4.7Proof of conceptEPSS 0%

    gravity forms · gravity formsApr 7, 2026

  • CVE-2026-3296
    40Plan

    Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    wpeverest · everest forms – contact form, payment form, quiz, survey & custom form builderApr 7, 2026

  • CVE-2026-39636
    26Monitor

    WordPress Livemesh Addons for Elementor plugin <= 9.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5Proof of conceptEPSS 0%

    livemesh · livemesh addons for elementorApr 8, 2026

  • CVE-2026-39676
    21Monitor

    WordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability

    MediumCVSS 5.3Proof of conceptEPSS 0%

    shahjada · download managerApr 8, 2026

  • CVE-2026-3396
    31Monitor

    WCAPF – WooCommerce Ajax Product Filter <= 4.2.3 - Unauthenticated Time-Based SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 1%

    shamimmoeen · wcapf – ajax product filter for woocommerceApr 8, 2026

  • CVE-2026-33229
    34Monitor

    XWiki Platform affected by remote code execution with script right through unprotected Velocity scripting API

    HighCVSS 8.6Proof of conceptEPSS 1%

    xwiki · xwikiApr 8, 2026

  • CVE-2026-2942
    39Monitor

    ProSolution WP Client <= 1.9.9 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    prosolution · prosolution wp clientApr 8, 2026

  • CVE-2026-34724
    34Monitor

    Zammad has a server-side template injection leading to RCE via AI Agent

    HighCVSS 8.7Proof of conceptEPSS 0%

    zammad · zammadApr 8, 2026

  • CVE-2026-35455
    21Monitor

    immich has Stored XSS via OCR Text in 360° Panorama Viewer

    MediumCVSS 5.4Proof of conceptEPSS 0%

    futo · immichApr 8, 2026

  • CVE-2026-23869
    30Monitor

    A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server

    HighCVSS 7.5Proof of conceptEPSS 1%

    meta · react-server-dom-turbopackApr 8, 2026