# CVEs published 2026-04-12

57 CVEs were published on April 12, 2026: 8 critical, 28 high. Days are UTC.

- [CVE-2026-6137](https://cve.now/CVE-2026-6137.md): Tenda F451 AdvSetWan fromAdvSetWan stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-6136](https://cve.now/CVE-2026-6136.md): Tenda F451 L7Im frmL7ImForm stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-6135](https://cve.now/CVE-2026-6135.md): Tenda F451 SetIpBind fromSetIpBind stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-6134](https://cve.now/CVE-2026-6134.md): Tenda F451 qossetting fromqossetting stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-6133](https://cve.now/CVE-2026-6133.md): Tenda F451 SafeUrlFilter fromSafeUrlFilter stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-6132](https://cve.now/CVE-2026-6132.md): Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6131](https://cve.now/CVE-2026-6131.md): Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6130](https://cve.now/CVE-2026-6130.md): chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injection (CVSS 6.9, chatboxai chatbox)
- [CVE-2026-6129](https://cve.now/CVE-2026-6129.md): zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication (CVSS 6.9, zhayujie chatgpt-on-wechat CowAgent)
- [CVE-2026-40396](https://cve.now/CVE-2026-40396.md): Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout\_linger. (CVSS 4.0, varnish-software Varnish Cache)
- [CVE-2026-40395](https://cve.now/CVE-2026-40395.md): Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL. (CVSS 4.0, varnish-software Varnish Enterprise)
- [CVE-2026-40394](https://cve.now/CVE-2026-40394.md): Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for cert (CVSS 4.0, varnish-software Varnish Cache)
- [CVE-2026-40393](https://cve.now/CVE-2026-40393.md): In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depen (CVSS 8.1, mesa3d Mesa)
- [CVE-2026-40386](https://cve.now/CVE-2026-40386.md): In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash (CVSS 4.0, libexif project libexif)
- [CVE-2026-40385](https://cve.now/CVE-2026-40385.md): In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes (CVSS 4.0, libexif project libexif)
- [CVE-2019-25713](https://cve.now/CVE-2019-25713.md): MyT-PM 1.5.1 SQL Injection via Charge\[group\_total\] Parameter (CVSS 7.1, MyT Project Management)
- [CVE-2019-25712](https://cve.now/CVE-2019-25712.md): BlueAuditor 1.7.2.0 Buffer Overflow Denial of Service via Registration Key (CVSS 6.9, NSauditor BlueAuditor)
- [CVE-2019-25711](https://cve.now/CVE-2019-25711.md): SpotFTP Password Recover 2.4.2 Denial of Service via Name Field (CVSS 6.9, NSauditor SpotFTP Password Recover)
- [CVE-2019-25710](https://cve.now/CVE-2019-25710.md): Dolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter (CVSS 8.8, Dolibarr ERP-CRM · dolibarr/dolibarr)
- [CVE-2019-25709](https://cve.now/CVE-2019-25709.md): CF Image Hosting Script 1.6.5 Unauthorized Database Access (CVSS 9.3, Davidtavarez CF Image Hosting Script)
- [CVE-2019-25708](https://cve.now/CVE-2019-25708.md): Heatmiser Wifi Thermostat 1.7 Cross-Site Request Forgery (CVSS 5.3, Heatmiser Wifi Thermostat)
- [CVE-2019-25707](https://cve.now/CVE-2019-25707.md): eBrigade ERP 4.5 SQL Injection via pdf.php (CVSS 7.1, eBrigade ERP)
- [CVE-2019-25706](https://cve.now/CVE-2019-25706.md): Across DR-810 ROM-0 Unauthenticated File Disclosure (CVSS 8.7, Across DR-810)
- [CVE-2019-25705](https://cve.now/CVE-2019-25705.md): Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field (CVSS 8.6, Sourceforge Echo Mirage)
- [CVE-2019-25703](https://cve.now/CVE-2019-25703.md): ImpressCMS 1.3.11 SQL Injection via bid Parameter (CVSS 7.1, ImpressCMS)
- [CVE-2019-25701](https://cve.now/CVE-2019-25701.md): Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH (CVSS 8.6, Divxtodvd Easy Video to iPod Converter)
- [CVE-2019-25699](https://cve.now/CVE-2019-25699.md): Newsbull Haber Script 1.0.0 Authenticated SQL Injection via search parameter (CVSS 7.1, Newsbull Haber Script)
- [CVE-2019-25697](https://cve.now/CVE-2019-25697.md): CMSsite 1.0 SQL Injection via category.php (CVSS 8.8, VictorAlagwu CMSsite)
- [CVE-2019-25695](https://cve.now/CVE-2019-25695.md): R 3.4.4 Local Buffer Overflow Windows XP SP3 (CVSS 8.6, r-project R)
- [CVE-2019-25693](https://cve.now/CVE-2019-25693.md): ResourceSpace 8.6 SQL Injection via collection\_edit.php (CVSS 7.1, ResourceSpace)
- [CVE-2019-25691](https://cve.now/CVE-2019-25691.md): Faleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass (CVSS 8.6, Faleemi Desktop Software)
- [CVE-2019-25689](https://cve.now/CVE-2019-25689.md): HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH (CVSS 8.6, Html5Videoplayer HTML5 Video Player)
- [CVE-2018-25258](https://cve.now/CVE-2018-25258.md): RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass (CVSS 8.6, R-Project RGui)
- [CVE-2018-25257](https://cve.now/CVE-2018-25257.md): Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile (CVSS 7.1, Adianti Framework)
- [CVE-2017-20239](https://cve.now/CVE-2017-20239.md): MDwiki Cross-Site Scripting via Location Hash Parameter (CVSS 5.1, Dynalon MDwiki)
- [CVE-2026-6126](https://cve.now/CVE-2026-6126.md): zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication (CVSS 6.9, zhayujie chatgpt-on-wechat CowAgent)
- [CVE-2026-6125](https://cve.now/CVE-2026-6125.md): Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injection (CVSS 5.3, Dromara warm-flow · org.dromara.warm:warm-flow-plugin-modes…)
- [CVE-2026-6124](https://cve.now/CVE-2026-6124.md): Tenda F451 httpd SafeMacFilter fromSafeMacFilter stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-6123](https://cve.now/CVE-2026-6123.md): Tenda F451 httpd addressNat fromAddressNat stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-6122](https://cve.now/CVE-2026-6122.md): Tenda F451 httpd L7Prot frmL7ProtForm stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-6121](https://cve.now/CVE-2026-6121.md): Tenda F451 httpd WrlclientSet stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-6120](https://cve.now/CVE-2026-6120.md): Tenda F451 httpd DhcpListClient fromDhcpListClient stack-based overflow (CVSS 8.7, Tenda F451)
- [CVE-2026-31413](https://cve.now/CVE-2026-31413.md): bpf: Fix unsound scalar forking in maybe\_fork\_scalars() for BPF\_OR (CVSS 7.8, Linux)
- [CVE-2026-6119](https://cve.now/CVE-2026-6119.md): AstrBotDevs AstrBot API Endpoint post\_data.get server-side request forgery (CVSS 5.3, AstrBotDevs AstrBot)
- [CVE-2026-6118](https://cve.now/CVE-2026-6118.md): AstrBotDevs AstrBot MCP Endpoint tools.py add\_mcp\_server command injection (CVSS 5.3, AstrBotDevs AstrBot)
- [CVE-2026-6117](https://cve.now/CVE-2026-6117.md): AstrBotDevs AstrBot install-upload Endpoint plugin.py install\_plugin\_upload sandbox (CVSS 5.3, AstrBotDevs AstrBot)
- [CVE-2026-6116](https://cve.now/CVE-2026-6116.md): Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6115](https://cve.now/CVE-2026-6115.md): Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6114](https://cve.now/CVE-2026-6114.md): Totolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6113](https://cve.now/CVE-2026-6113.md): Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6112](https://cve.now/CVE-2026-6112.md): Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6111](https://cve.now/CVE-2026-6111.md): FoundationAgents MetaGPT common.py decode\_image server-side request forgery (CVSS 5.3, FoundationAgents MetaGPT · metagpt)
- [CVE-2026-1116](https://cve.now/CVE-2026-1116.md): Cross-site Scripting (XSS) in parisneo/lollms (CVSS 8.2, parisneo/lollms · lollms)
- [CVE-2026-6110](https://cve.now/CVE-2026-6110.md): FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate\_thoughts code injection (CVSS 6.9, FoundationAgents MetaGPT · metagpt)
- [CVE-2026-6109](https://cve.now/CVE-2026-6109.md): FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgery (CVSS 5.3, FoundationAgents MetaGPT · metagpt)
- [CVE-2026-6108](https://cve.now/CVE-2026-6108.md): 1Panel-dev MaxKB Model Context Protocol Node base\_mcp\_node.py execute os command injection (CVSS 5.3, 1Panel-dev MaxKB)
- [CVE-2026-6107](https://cve.now/CVE-2026-6107.md): 1Panel-dev MaxKB ChatHeadersMiddleware chat\_headers\_middleware.py cross site scripting (CVSS 5.1, 1Panel-dev MaxKB)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-04-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.