# CVEs published 2026-04-13

220 CVEs were published on April 13, 2026: 21 critical, 60 high. Days are UTC.

- [CVE-2026-34069](https://cve.now/CVE-2026-34069.md): nimiq-consensus panics via RequestMacroChain micro-block locator (CVSS 5.3, nimiq core-rs-albatross · nimiq-consensus)
- [CVE-2026-33948](https://cve.now/CVE-2026-33948.md): jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input (CVSS 2.9, jqlang jq)
- [CVE-2026-40164](https://cve.now/CVE-2026-40164.md): jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed (CVSS 7.5, jqlang jq)
- [CVE-2026-5086](https://cve.now/CVE-2026-5086.md): Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks (CVSS 7.5, NERDVANA Crypt::SecretBuffer)
- [CVE-2026-6203](https://cve.now/CVE-2026-6203.md): User Registration & Membership \<= 5.1.4 - Unauthenticated Open Redirect via 'redirect\_to\_on\_logout' Parameter (CVSS 6.1, wpeverest User Registration & Membership – Free & Paid Memb…)
- [CVE-2026-39979](https://cve.now/CVE-2026-39979.md): jq: Out-of-Bounds Read in jv\_parse\_sized() Error Formatting for Non-NUL-Terminated Counted Buffers (CVSS 6.9, jqlang jq)
- [CVE-2026-39956](https://cve.now/CVE-2026-39956.md): jq: Missing runtime type checks for \_strindices lead to crash and limited memory disclosure (CVSS 6.1, jqlang jq)
- [CVE-2026-4786](https://cve.now/CVE-2026-4786.md): Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open() (CVSS 7.0, Python Software Foundation CPython)
- [CVE-2026-33947](https://cve.now/CVE-2026-33947.md): jq: Unbounded Recursion in jv\_setpath(), jv\_getpath() and delpaths\_sorted() (CVSS 6.2, jqlang jq)
- [CVE-2026-40312](https://cve.now/CVE-2026-40312.md): ImageMagick: Off-by-One in MSL decoder could result in crash (CVSS 6.2, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-40311](https://cve.now/CVE-2026-40311.md): ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values (CVSS 5.5, ImageMagick · Magick.NET-Q16-AnyCPU +15)
- [CVE-2026-40310](https://cve.now/CVE-2026-40310.md): ImageMagick: Heap out-of-bounds write in JP2 encoder (CVSS 5.5, ImageMagick · Magick.NET-Q16-AnyCPU +15)
- [CVE-2026-40183](https://cve.now/CVE-2026-40183.md): ImageMagick: Heap buffer overflow when encoding JXL image with a 16-bit float (CVSS 5.5, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-22563](https://cve.now/CVE-2026-22563.md): A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play net (CVSS 9.8, Ubiquiti UniFi Play PowerAmp · Ubiquiti UniFi Play Audio Po…)
- [CVE-2026-22562](https://cve.now/CVE-2026-22562.md): A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write f (CVSS 9.8, Ubiquiti UniFi Play PowerAmp · Ubiquiti UniFi Play Audio Po…)
- [CVE-2026-22566](https://cve.now/CVE-2026-22566.md): An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi crede (CVSS 7.5, Ubiquiti UniFi Play PowerAmp · Ubiquiti UniFi Play Audio Po…)
- [CVE-2026-22565](https://cve.now/CVE-2026-22565.md): An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop r (CVSS 7.5, Ubiquiti UniFi Play PowerAmp · Ubiquiti UniFi Play Audio Po…)
- [CVE-2026-22564](https://cve.now/CVE-2026-22564.md): An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthori (CVSS 9.8, Ubiquiti UniFi Play PowerAmp · Ubiquiti UniFi Play Audio Po…)
- [CVE-2026-40169](https://cve.now/CVE-2026-40169.md): ImageMagick: Heap buffer overflow (WRITE) in the YAML and JSON encoders (CVSS 6.2, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-6224](https://cve.now/CVE-2026-6224.md): nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox (CVSS 6.9, nocobase plugin-workflow-javascript)
- [CVE-2026-34238](https://cve.now/CVE-2026-34238.md): ImageMagick: Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds (CVSS 5.1, ImageMagick · Magick.NET-Q16-AnyCPU +5)
- [CVE-2026-33908](https://cve.now/CVE-2026-33908.md): ImageMagick is vulnerable to Stack Overflow in DestroyXMLTree() (CVSS 7.5, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-33905](https://cve.now/CVE-2026-33905.md): ImageMagick has an Out-of-Bounds read via -sample operation (CVSS 5.5, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-6220](https://cve.now/CVE-2026-6220.md): HummerRisk Video File Download URL ServerService.java ServerService.addServer server-side request forgery (CVSS 5.1, HummerRisk)
- [CVE-2026-33902](https://cve.now/CVE-2026-33902.md): ImageMagick: Stack Overflow via Recursive FX Expression Parsing (CVSS 5.5, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-33901](https://cve.now/CVE-2026-33901.md): ImageMagick has a Heap Buffer Overflow via MVG decoder (CVSS 7.5, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-33900](https://cve.now/CVE-2026-33900.md): ImageMagick has a Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds (CVSS 5.9, ImageMagick · Magick.NET-Q16-AnyCPU +5)
- [CVE-2026-33899](https://cve.now/CVE-2026-33899.md): ImageMagick: Heap BufferOverflow write of single zero byte when parsing XML (CVSS 5.3, ImageMagick · Magick.NET-Q16-AnyCPU +16)
- [CVE-2026-6219](https://cve.now/CVE-2026-6219.md): aandrew-me ytDownloader Compressor Feature compressor.js child\_process.exec command injection (CVSS 4.8, aandrew-me ytDownloader)
- [CVE-2026-33740](https://cve.now/CVE-2026-33740.md): EspoCRM: Email importEml can import and delete another user's attachment by raw fileId (CVSS 5.4, espocrm)
- [CVE-2026-33659](https://cve.now/CVE-2026-33659.md): EspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl Endpoint Allows Internal Network Access (CVSS 3.5, espocrm)
- [CVE-2026-6218](https://cve.now/CVE-2026-6218.md): aandrew-me ytDownloader Error Details Panel createTextNode cross site scripting (CVSS 5.3, aandrew-me ytDownloader)
- [CVE-2026-32272](https://cve.now/CVE-2026-32272.md): Craft Commerce: Blind SQL Injection via hasVariant/hasProduct (CVSS 8.7, craftcms commerce · craftcms/commerce)
- [CVE-2026-32271](https://cve.now/CVE-2026-32271.md): Craft Commerce: SQL Injection can lead to Remote Code Execution via TotalRevenue Widget (CVSS 7.7, craftcms commerce · craftcms/commerce)
- [CVE-2026-6216](https://cve.now/CVE-2026-6216.md): DbGate SVG Icon String FontIcon.svelte cross site scripting (CVSS 5.1, DbGate · dbgate-web)
- [CVE-2026-32270](https://cve.now/CVE-2026-32270.md): Craft Commerce: Unauthenticated information disclosure in \`commerce/payments/pay\` can leak some customer order data on anonymous payments (CVSS 1.7, craftcms commerce · craftcms/commerce)
- [CVE-2026-33657](https://cve.now/CVE-2026-33657.md): EspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post field (CVSS 4.6, espocrm)
- [CVE-2026-6215](https://cve.now/CVE-2026-6215.md): DbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery (CVSS 5.3, DbGate)
- [CVE-2026-33534](https://cve.now/CVE-2026-33534.md): EspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notation (CVSS 4.3, espocrm)
- [CVE-2026-6202](https://cve.now/CVE-2026-6202.md): code-projects Easy Blog Site post.php sql injection (CVSS 5.3, code-projects Easy Blog Site)
- [CVE-2026-6201](https://cve.now/CVE-2026-6201.md): CodeAstro Online Job Portal Delete Job Posting job-delete.php access control (CVSS 5.3, CodeAstro Online Job Portal)
- [CVE-2026-32605](https://cve.now/CVE-2026-32605.md): Nimiq: Remote crash via off-by-one signer bounds check in proposal buffer (CVSS 7.5, nimiq core-rs-albatross)
- [CVE-2026-6200](https://cve.now/CVE-2026-6200.md): Tenda F456 webtypelibrary formwebtypelibrary stack-based overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-6199](https://cve.now/CVE-2026-6199.md): Tenda F456 qossetting fromqossetting stack-based overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-6198](https://cve.now/CVE-2026-6198.md): Tenda F456 NatStaticSetting fromNatStaticSetting stack-based overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-40044](https://cve.now/CVE-2026-40044.md): Pachno 1.0.6 FileCache Deserialization Remote Code Execution (CVSS 9.3, Pachno)
- [CVE-2026-40043](https://cve.now/CVE-2026-40043.md): Pachno 1.0.6 Authentication Bypass via runSwitchUser() (CVSS 7.1, pancho Pachno)
- [CVE-2026-40042](https://cve.now/CVE-2026-40042.md): Pachno 1.0.6 Wiki TextParser XML External Entity Injection (CVSS 9.3, Pachno)
- [CVE-2026-40041](https://cve.now/CVE-2026-40041.md): Pachno 1.0.6 Cross-Site Request Forgery via State-Changing Endpoints (CVSS 5.3, Pachno)
- [CVE-2026-40040](https://cve.now/CVE-2026-40040.md): Pachno 1.0.6 Unrestricted File Upload Remote Code Execution (CVSS 8.7, Pachno)
- [CVE-2026-40039](https://cve.now/CVE-2026-40039.md): Pachno 1.0.6 Open Redirection via return\_to Parameter (CVSS 7.1, Pachno)
- [CVE-2026-40038](https://cve.now/CVE-2026-40038.md): Pachno 1.0.6 Stored Cross-Site Scripting via Multiple Parameters (CVSS 5.1, Pachno)
- [CVE-2026-6197](https://cve.now/CVE-2026-6197.md): Tenda F456 AdvSetWrlsafeset formWrlsafeset stack-based overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-32316](https://cve.now/CVE-2026-32316.md): jq: Integer overflow in jvp\_string\_append() allows Heap-based Buffer Overflow (CVSS 8.2, jqlang jq)
- [CVE-2026-6196](https://cve.now/CVE-2026-6196.md): Tenda F456 exeCommand fromexeCommand stack-based overflow (CVSS 8.7, Tenda F456)
- [CVE-2026-6195](https://cve.now/CVE-2026-6195.md): Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6100](https://cve.now/CVE-2026-6100.md): Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure (CVSS 9.1, Python Software Foundation CPython)
- [CVE-2026-6194](https://cve.now/CVE-2026-6194.md): Totolink A3002MU HTTP Request formWlanSetup sub\_410188 stack-based overflow (CVSS 8.7, Totolink A3002MU)
- [CVE-2026-28291](https://cve.now/CVE-2026-28291.md): simple-git has Command Execution via Option-Parsing Bypass (CVSS 8.1, steveukx git-js · simple-git)
- [CVE-2025-3756](https://cve.now/CVE-2025-3756.md): Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850 (CVSS 7.1, ABB AC800M · ABB Symphony Plus SD Series +2)
- [CVE-2026-6193](https://cve.now/CVE-2026-6193.md): PHPGurukul Daily Expense Tracking System register.php sql injection (CVSS 6.9, PHPGurukul Daily Expense Tracking System)
- [CVE-2026-23891](https://cve.now/CVE-2026-23891.md): Decidim has a Cross-site scripting (XSS) vulnerability via user name field (CVSS 9.3, decidim · decidim-core)
- [CVE-2026-6192](https://cve.now/CVE-2026-6192.md): uclouvain openjpeg pi.c opj\_pi\_initialise\_encode integer overflow (CVSS 4.8, uclouvain openjpeg)
- [CVE-2026-39940](https://cve.now/CVE-2026-39940.md): ChurchCRM has an Open Redirect via the ‘linkBack’ URL Parameter in DonatedItemEditor.php (CVSS 5.3, ChurchCRM CRM)
- [CVE-2026-6191](https://cve.now/CVE-2026-6191.md): itsourcecode Construction Management System equipments.php sql injection (CVSS 5.3, itsourcecode Construction Management System)
- [CVE-2026-6190](https://cve.now/CVE-2026-6190.md): itsourcecode Construction Management System employees.php sql injection (CVSS 5.3, itsourcecode Construction Management System)
- [CVE-2026-6189](https://cve.now/CVE-2026-6189.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2025-31991](https://cve.now/CVE-2025-31991.md): HCL DevOps Velocity is susceptible to brute-force attacks (CVSS 6.8, HCLSoftware Velocity)
- [CVE-2026-34188](https://cve.now/CVE-2026-34188.md): OS Command Injection in Event Response Execution (CVSS 7.5, Pandora FMS)
- [CVE-2026-34186](https://cve.now/CVE-2026-34186.md): SQL Injection in Custom Fields leads to Database Compromise (CVSS 8.7, Pandora FMS)
- [CVE-2026-30813](https://cve.now/CVE-2026-30813.md): SQL Injection in Module Search leads to Database Compromise (CVSS 8.7, Pandora FMS)
- [CVE-2026-30812](https://cve.now/CVE-2026-30812.md): Stored Cross-Site Scripting in Event Comments via Filter Bypass (CVSS 2.1, Pandora FMS)
- [CVE-2026-30811](https://cve.now/CVE-2026-30811.md): Missing Authorization in Configuration Ajax Endpoint leads to Information Disclosure (CVSS 8.4, Pandora FMS)
- [CVE-2026-30809](https://cve.now/CVE-2026-30809.md): OS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code Execution (CVSS 8.7, Pandora FMS)
- [CVE-2026-30806](https://cve.now/CVE-2026-30806.md): OS Command Injection in Network Report leads to Remote Code Execution (CVSS 8.7, Pandora FMS)
- [CVE-2026-6188](https://cve.now/CVE-2026-6188.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-30804](https://cve.now/CVE-2026-30804.md): Unrestricted File Upload in Extension Uploader leads to Remote Code Execution (CVSS 8.6, Pandora FMS)
- [CVE-2026-6231](https://cve.now/CVE-2026-6231.md): bson\_validate may skip validation when processing certain inputs (CVSS 5.3, MongoDB C Driver)
- [CVE-2026-6187](https://cve.now/CVE-2026-6187.md): SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection (CVSS 6.9, SourceCodester Pharmacy Sales and Inventory System)
- [CVE-2026-6186](https://cve.now/CVE-2026-6186.md): UTT HiPER 1200GW formNatStaticMap strcpy buffer overflow (CVSS 8.7, UTT HiPER 1200GW)
- [CVE-2026-6184](https://cve.now/CVE-2026-6184.md): code-projects Simple Content Management System welcome.php cross site scripting (CVSS 4.8, code-projects Simple Content Management System)
- [CVE-2026-1462](https://cve.now/CVE-2026-1462.md): Safe Mode Bypass in keras-team/keras (CVSS 8.8, keras-team/keras · keras)
- [CVE-2026-6183](https://cve.now/CVE-2026-6183.md): code-projects Simple Content Management System index.php sql injection (CVSS 6.9, code-projects Simple Content Management System)
- [CVE-2026-33858](https://cve.now/CVE-2026-33858.md): Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (\_\_type/\_\_var) Bypass in XCom API (CVSS 8.8, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2026-6182](https://cve.now/CVE-2026-6182.md): code-projects Simple Content Management System login.php sql injection (CVSS 6.9, code-projects Simple Content Management System)
- [CVE-2025-66236](https://cve.now/CVE-2025-66236.md): Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI (CVSS 7.5, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2026-31428](https://cve.now/CVE-2026-31428.md): netfilter: nfnetlink\_log: fix uninitialized padding leak in NFULA\_PAYLOAD (no CVSS, Linux)
- [CVE-2026-31427](https://cve.now/CVE-2026-31427.md): netfilter: nf\_conntrack\_sip: fix use of uninitialized rtp\_addr in process\_sdp (no CVSS, Linux)
- [CVE-2026-31426](https://cve.now/CVE-2026-31426.md): ACPI: EC: clean up handlers on probe failure in acpi\_ec\_setup() (CVSS 7.0, Linux)
- [CVE-2026-31425](https://cve.now/CVE-2026-31425.md): rds: ib: reject FRMR registration before IB connection is established (no CVSS, Linux)
- [CVE-2026-31424](https://cve.now/CVE-2026-31424.md): netfilter: x\_tables: restrict xt\_check\_match/xt\_check\_target extensions for NFPROTO\_ARP (no CVSS, Linux)
- [CVE-2026-31423](https://cve.now/CVE-2026-31423.md): net/sched: sch\_hfsc: fix divide-by-zero in rtsc\_min() (no CVSS, Linux)
- [CVE-2026-31422](https://cve.now/CVE-2026-31422.md): net/sched: cls\_flow: fix NULL pointer dereference on shared blocks (no CVSS, Linux)
- [CVE-2026-31421](https://cve.now/CVE-2026-31421.md): net/sched: cls\_fw: fix NULL pointer dereference on shared blocks (no CVSS, Linux)
- [CVE-2026-31420](https://cve.now/CVE-2026-31420.md): bridge: mrp: reject zero test interval to avoid OOM panic (no CVSS, Linux)
- [CVE-2026-31419](https://cve.now/CVE-2026-31419.md): net: bonding: fix use-after-free in bond\_xmit\_broadcast() (CVSS 7.8, Linux)
- [CVE-2026-31418](https://cve.now/CVE-2026-31418.md): netfilter: ipset: drop logically empty buckets in mtype\_del (no CVSS, Linux)
- [CVE-2026-31417](https://cve.now/CVE-2026-31417.md): net/x25: Fix overflow when accumulating packets (CVSS 7.5, Linux)
- [CVE-2026-31416](https://cve.now/CVE-2026-31416.md): netfilter: nfnetlink\_log: account for netlink header size (no CVSS, Linux)
- [CVE-2026-31415](https://cve.now/CVE-2026-31415.md): ipv6: avoid overflows in ip6\_datagram\_send\_ctl() (no CVSS, Linux)
- [CVE-2026-31414](https://cve.now/CVE-2026-31414.md): netfilter: nf\_conntrack\_expect: use expect-\>helper (CVSS 9.8, Linux)
- [CVE-2026-34476](https://cve.now/CVE-2026-34476.md): Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server (CVSS 7.1, Apache Software Foundation Apache SkyWalking MCP · github.c…)
- [CVE-2026-6204](https://cve.now/CVE-2026-6204.md): LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config (CVSS 8.5, librenms · librenms/librenms)
- [CVE-2026-2728](https://cve.now/CVE-2026-2728.md): LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. (CVSS 4.6, librenms · librenms/librenms)
- [CVE-2025-15632](https://cve.now/CVE-2025-15632.md): 1Panel-dev MaxKB MdPreview chat.ts cross site scripting (CVSS 5.1, 1Panel-dev MaxKB)
- [CVE-2026-35337](https://cve.now/CVE-2026-35337.md): Apache Storm Client: RCE through Unsafe Deserialization via Kerberos TGT Credential Handling (CVSS 8.8, Apache Software Foundation Apache Storm Client · org.apache…)
- [CVE-2026-35565](https://cve.now/CVE-2026-35565.md): Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UI (CVSS 5.4, Apache Software Foundation Apache Storm UI · org.apache.sto…)
- [CVE-2026-4810](https://cve.now/CVE-2026-4810.md): Remote Code Execution in Google Agent Development Kit (ADK) (CVSS 9.3, Google Cloud Agent Development Kit · google-adk)
- [CVE-2026-0232](https://cve.now/CVE-2026-0232.md): Cortex XDR Agent: Local Administrator can disable the agent on Windows (CVSS 4.0, Palo Alto Networks Cortex XDR Agent)
- [CVE-2026-0233](https://cve.now/CVE-2026-0233.md): Autonomous Digital Experience Manager: Improper validation of ADEM certificate (CVSS 2.0, Palo Alto Networks Autonomous Digital Experience Manager)
- [CVE-2026-0234](https://cve.now/CVE-2026-0234.md): Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration (CVSS 7.2, Palo Alto Networks Cortex XSOAR Microsoft Teams Marketplace…)
- [CVE-2026-5936](https://cve.now/CVE-2026-5936.md): Server-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API (CVSS 8.5, Foxit Software Foxit PDF Services API)
- [CVE-2026-5085](https://cve.now/CVE-2026-5085.md): Solstice::Session versions through 1440 for Perl generates session ids insecurely (CVSS 9.1, MCRAWFOR Solstice::Session)
- [CVE-2026-40436](https://cve.now/CVE-2026-40436.md): ZTE ZXEDM iEMS product has a password reset vulnerability (CVSS 7.1, ZTE ZXEDM iEMS)
- [CVE-2026-6168](https://cve.now/CVE-2026-6168.md): TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg stack-based overflow (CVSS 8.7, TOTOLINK A7000R)
- [CVE-2026-6167](https://cve.now/CVE-2026-6167.md): code-projects Faculty Management System subject-print.php sql injection (CVSS 6.9, code-projects Faculty Management System)
- [CVE-2026-34866](https://cve.now/CVE-2026-34866.md): Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confi (CVSS 5.1, Huawei HarmonyOS)
- [CVE-2026-34865](https://cve.now/CVE-2026-34865.md): Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confi (CVSS 10.0, Huawei HarmonyOS)
- [CVE-2026-6166](https://cve.now/CVE-2026-6166.md): code-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection (CVSS 6.9, code-projects Vehicle Showroom Management System)
- [CVE-2026-3830](https://cve.now/CVE-2026-3830.md): Product Filter for WooCommerce by WBW \< 3.1.3 - Unauthenticated SQLi (CVSS 8.6, Product Filter for WooCommerce by WBW)
- [CVE-2025-15441](https://cve.now/CVE-2025-15441.md): Form Maker \< 1.15.38 - SQL Injection (CVSS 6.8, Form Maker by 10Web)
- [CVE-2026-6165](https://cve.now/CVE-2026-6165.md): code-projects Vehicle Showroom Management System Login\_check.php sql injection (CVSS 6.9, code-projects Vehicle Showroom Management System)
- [CVE-2026-6164](https://cve.now/CVE-2026-6164.md): code-projects Lost and Found Thing Management addcat.php sql injection (CVSS 6.9, code-projects Lost and Found Thing Management)
- [CVE-2026-6163](https://cve.now/CVE-2026-6163.md): code-projects Lost and Found Thing Management catageory.php sql injection (CVSS 6.9, code-projects Lost and Found Thing Management)
- [CVE-2026-21010](https://cve.now/CVE-2026-21010.md): Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions. (CVSS 6.6, Samsung Mobile Devices)
- [CVE-2026-21008](https://cve.now/CVE-2026-21008.md): Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information. (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2026-40447](https://cve.now/CVE-2026-40447.md): Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115a (CVSS 5.1, Samsung Open Source Escargot)
- [CVE-2026-21014](https://cve.now/CVE-2026-21014.md): Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. (CVSS 5.1, Samsung Mobile Samsung Camera)
- [CVE-2026-21013](https://cve.now/CVE-2026-21013.md): Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information. (CVSS 6.9, Samsung Mobile Galaxy Wearable)
- [CVE-2026-21012](https://cve.now/CVE-2026-21012.md): External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system priv (CVSS 6.8, Samsung Mobile Devices)
- [CVE-2026-21011](https://cve.now/CVE-2026-21011.md): Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend U (CVSS 5.4, Samsung Mobile Devices)
- [CVE-2026-21009](https://cve.now/CVE-2026-21009.md): Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning. (CVSS 4.1, Samsung Mobile Devices)
- [CVE-2026-21007](https://cve.now/CVE-2026-21007.md): Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard. (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2026-21006](https://cve.now/CVE-2026-21006.md): Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents. (CVSS 4.7, Samsung Mobile Devices)
- [CVE-2026-6162](https://cve.now/CVE-2026-6162.md): PHPGurukul Company Visitor Management System bwdates-reports-details.php cross site scripting (CVSS 5.1, PHPGurukul Company Visitor Management System)
- [CVE-2026-21003](https://cve.now/CVE-2026-21003.md): Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the re (CVSS 5.2, Samsung Mobile Devices)
- [CVE-2026-40446](https://cve.now/CVE-2026-40446.md): Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This (CVSS 6.9, Samsung Open Source Escargot)
- [CVE-2026-25209](https://cve.now/CVE-2026-25209.md): Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc5 (CVSS 6.5, Samsung Open Source Escargot)
- [CVE-2026-25208](https://cve.now/CVE-2026-25208.md): Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4 (CVSS 8.1, Samsung Open Source Escargot)
- [CVE-2026-25207](https://cve.now/CVE-2026-25207.md): Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b (CVSS 7.4, Samsung Open Source Escargot)
- [CVE-2026-6161](https://cve.now/CVE-2026-6161.md): code-projects Simple ChatBox Endpoint insert.php sql injection (CVSS 6.9, code-projects Simple ChatBox)
- [CVE-2026-25206](https://cve.now/CVE-2026-25206.md): Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc5 (CVSS 6.7, Samsung Open Source Escargot)
- [CVE-2026-25205](https://cve.now/CVE-2026-25205.md): Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash (CVSS 7.4, Samsung Open Source Escargot)
- [CVE-2026-6160](https://cve.now/CVE-2026-6160.md): code-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox\_PHP file information disclosure (CVSS 6.9, code-projects Simple ChatBox)
- [CVE-2026-6159](https://cve.now/CVE-2026-6159.md): code-projects Simple ChatBox Endpoint insert.php cross site scripting (CVSS 5.3, code-projects Simple ChatBox)
- [CVE-2026-34864](https://cve.now/CVE-2026-34864.md): Boundary-unlimited vulnerability in the application read module. (CVSS 6.8, Huawei HarmonyOS)
- [CVE-2026-34863](https://cve.now/CVE-2026-34863.md): Out-of-bounds write vulnerability in the file system. (CVSS 6.7, Huawei HarmonyOS)
- [CVE-2026-34862](https://cve.now/CVE-2026-34862.md): Race condition vulnerability in the power consumption statistics module. (CVSS 6.3, Huawei HarmonyOS)
- [CVE-2026-34861](https://cve.now/CVE-2026-34861.md): Race condition vulnerability in the thermal management module. (CVSS 6.3, Huawei HarmonyOS)
- [CVE-2026-34859](https://cve.now/CVE-2026-34859.md): UAF vulnerability in the kernel module. (CVSS 5.9, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-34858](https://cve.now/CVE-2026-34858.md): UAF vulnerability in the communication module. (CVSS 4.1, Huawei HarmonyOS)
- [CVE-2026-34857](https://cve.now/CVE-2026-34857.md): UAF vulnerability in the communication module. (CVSS 4.7, Huawei HarmonyOS)
- [CVE-2026-35553](https://cve.now/CVE-2026-35553.md): Bluetooth ACPI Drivers provided by Dynabook Inc. (CVSS 6.7, Dynabook TOSRFEC.SYS · Dynabook DRFEC.SYS)
- [CVE-2026-34855](https://cve.now/CVE-2026-34855.md): Out-of-bounds write vulnerability in the kernel module. (CVSS 5.7, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-34854](https://cve.now/CVE-2026-34854.md): UAF vulnerability in the kernel module. (CVSS 5.7, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-6158](https://cve.now/CVE-2026-6158.md): Totolink N300RH upgrade.so setUpgradeUboot os command injection (CVSS 6.9, Totolink N300RH)
- [CVE-2026-34849](https://cve.now/CVE-2026-34849.md): UAF vulnerability in the screen management module. (CVSS 2.5, Huawei HarmonyOS)
- [CVE-2026-34856](https://cve.now/CVE-2026-34856.md): UAF vulnerability in the communication module. (CVSS 7.3, Huawei HarmonyOS)
- [CVE-2026-34853](https://cve.now/CVE-2026-34853.md): Permission bypass vulnerability in the LBS module. (CVSS 7.7, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-28553](https://cve.now/CVE-2026-28553.md): Vulnerability of improper permission control in the theme setting module. (CVSS 6.9, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-34867](https://cve.now/CVE-2026-34867.md): Double free vulnerability in the multi-mode input system. (CVSS 5.6, Huawei HarmonyOS)
- [CVE-2026-34860](https://cve.now/CVE-2026-34860.md): Access control vulnerability in the memo module. (CVSS 4.1, Huawei HarmonyOS)
- [CVE-2026-34852](https://cve.now/CVE-2026-34852.md): Stack overflow vulnerability in the media platform. (CVSS 6.1, Huawei HarmonyOS)
- [CVE-2026-6157](https://cve.now/CVE-2026-6157.md): Totolink A800R app.so setAppEasyWizardConfig buffer overflow (CVSS 8.7, Totolink A800R)
- [CVE-2026-34851](https://cve.now/CVE-2026-34851.md): Race condition vulnerability in the event notification module. (CVSS 2.2, Huawei HarmonyOS)
- [CVE-2026-34850](https://cve.now/CVE-2026-34850.md): Race condition vulnerability in the notification service. (CVSS 1.9, Huawei HarmonyOS)
- [CVE-2026-6156](https://cve.now/CVE-2026-6156.md): Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6155](https://cve.now/CVE-2026-6155.md): Totolink A7100RU CGI cstecgi.cgi setWanCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6154](https://cve.now/CVE-2026-6154.md): Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6153](https://cve.now/CVE-2026-6153.md): code-projects Vehicle Showroom Management System StaffDetailsFunction.php sql injection (CVSS 6.9, code-projects Vehicle Showroom Management System)
- [CVE-2026-6152](https://cve.now/CVE-2026-6152.md): code-projects Vehicle Showroom Management System StaffAddingFunction.php sql injection (CVSS 6.9, code-projects Vehicle Showroom Management System)
- [CVE-2026-6179](https://cve.now/CVE-2026-6179.md): Stored Cross Site Scripting in NightWolf Penetration Testing Platform (CVSS 6.3, FPT Software NightWolf Penetration Testing Platform)
- [CVE-2026-6151](https://cve.now/CVE-2026-6151.md): code-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection (CVSS 6.9, code-projects Vehicle Showroom Management System)
- [CVE-2026-6150](https://cve.now/CVE-2026-6150.md): code-projects Simple Laundry System checkupdatestatus.php cross site scripting (CVSS 5.3, code-projects Simple Laundry System)
- [CVE-2026-6149](https://cve.now/CVE-2026-6149.md): code-projects Vehicle Showroom Management System BookVehicleFunction.php sql injection (CVSS 6.9, code-projects Vehicle Showroom Management System)
- [CVE-2026-6148](https://cve.now/CVE-2026-6148.md): code-projects Vehicle Showroom Management System MonthTotalReportUpdateFunction.php sql injection (CVSS 6.9, code-projects Vehicle Showroom Management System)
- [CVE-2026-6143](https://cve.now/CVE-2026-6143.md): farion1231 cc-switch ProxyServer server.rs cross-domain policy (CVSS 5.3, farion1231 cc-switch)
- [CVE-2026-6142](https://cve.now/CVE-2026-6142.md): tushar-2223 Hotel Management System roomdelete.php sql injection (CVSS 6.9, tushar-2223 Hotel Management System)
- [CVE-2026-25204](https://cve.now/CVE-2026-25204.md): Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process a (CVSS 6.2, Samsung Open Source Escargot)
- [CVE-2026-6141](https://cve.now/CVE-2026-6141.md): danielmiessler Personal\_AI\_Infrastructure parse\_url.ts os command injection (CVSS 5.3, danielmiessler Personal\_AI\_Infrastructure)
- [CVE-2026-6140](https://cve.now/CVE-2026-6140.md): Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6139](https://cve.now/CVE-2026-6139.md): Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2026-6138](https://cve.now/CVE-2026-6138.md): Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection (CVSS 9.3, Totolink A7100RU)
- [CVE-2025-51414](https://cve.now/CVE-2025-51414.md): In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload funct (CVSS 8.8)
- [CVE-2025-63743](https://cve.now/CVE-2025-63743.md): Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated (CVSS 5.4)
- [CVE-2025-66769](https://cve.now/CVE-2025-66769.md): A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA pac (CVSS 7.5)
- [CVE-2025-69624](https://cve.now/CVE-2025-69624.md): Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert(). (CVSS 7.5)
- [CVE-2025-69627](https://cve.now/CVE-2025-69627.md): Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc (CVSS 8.4)
- [CVE-2025-70936](https://cve.now/CVE-2025-70936.md): Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. (CVSS 5.4)
- [CVE-2026-26460](https://cve.now/CVE-2026-26460.md): A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. (CVSS 6.1)
- [CVE-2026-29628](https://cve.now/CVE-2026-29628.md): A stack overflow in the experimental/tinyobj\_loader\_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (CVSS 6.2)
- [CVE-2026-29955](https://cve.now/CVE-2026-29955.md): The \`/registercrd\` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. (CVSS 8.8)
- [CVE-2026-30997](https://cve.now/CVE-2026-30997.md): An out-of-bounds read in the read\_global\_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Servi (CVSS 7.5)
- [CVE-2026-30998](https://cve.now/CVE-2026-30998.md): An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a De (CVSS 7.5)
- [CVE-2026-30999](https://cve.now/CVE-2026-30999.md): A heap buffer overflow in the av\_bprint\_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a craft (CVSS 7.5)
- [CVE-2026-31048](https://cve.now/CVE-2026-31048.md): An issue in the \<code\>pickle\</code\> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string (CVSS 9.8)
- [CVE-2026-31280](https://cve.now/CVE-2026-31280.md): An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause a Denial of Service (CVSS 6.5)
- [CVE-2026-31281](https://cve.now/CVE-2026-31281.md): Totara LMS v19.1.5 and before is vulnerable to HTML Injection. (CVSS 8.0)
- [CVE-2026-31282](https://cve.now/CVE-2026-31282.md): Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control. (CVSS 9.8)
- [CVE-2026-31283](https://cve.now/CVE-2026-31283.md): In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. (CVSS 9.8)
- [CVE-2026-33555](https://cve.now/CVE-2026-33555.md): An issue was discovered in HAProxy before 3.3.6. (CVSS 4.0, HAProxy)
- [CVE-2026-36872](https://cve.now/CVE-2026-36872.md): Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load\_book.php. (CVSS 2.7)
- [CVE-2026-36873](https://cve.now/CVE-2026-36873.md): Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load\_admin.php. (CVSS 2.7)
- [CVE-2026-36874](https://cve.now/CVE-2026-36874.md): Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load\_student.php. (CVSS 2.7)
- [CVE-2026-36919](https://cve.now/CVE-2026-36919.md): Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-updat (CVSS 2.7)
- [CVE-2026-36920](https://cve.now/CVE-2026-36920.md): Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions (CVSS 2.7)
- [CVE-2026-36922](https://cve.now/CVE-2026-36922.md): Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view\_category.php. (CVSS 2.7)
- [CVE-2026-36923](https://cve.now/CVE-2026-36923.md): Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view\_booking.php. (CVSS 2.7)
- [CVE-2026-36937](https://cve.now/CVE-2026-36937.md): Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view\_details.php. (CVSS 2.7)
- [CVE-2026-36938](https://cve.now/CVE-2026-36938.md): Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view\_room.php. (CVSS 2.7)
- [CVE-2026-36941](https://cve.now/CVE-2026-36941.md): Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage\_room.php. (CVSS 2.7)
- [CVE-2026-36942](https://cve.now/CVE-2026-36942.md): Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage\_activity.php. (CVSS 2.7)
- [CVE-2026-36943](https://cve.now/CVE-2026-36943.md): Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/manage\_ (CVSS 2.7)
- [CVE-2026-36944](https://cve.now/CVE-2026-36944.md): Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/view\_deta (CVSS 2.7)
- [CVE-2026-36945](https://cve.now/CVE-2026-36945.md): Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manage\_ (CVSS 2.7)
- [CVE-2026-36946](https://cve.now/CVE-2026-36946.md): Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view\_ (CVSS 2.7)
- [CVE-2026-36947](https://cve.now/CVE-2026-36947.md): Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view\_s (CVSS 2.7)
- [CVE-2026-36948](https://cve.now/CVE-2026-36948.md): Sourcecodester Online Thesis Archiving System v1.0 is vulnerale to SQL injection in the file /otas/view\_archive.php. (CVSS 7.3)
- [CVE-2026-36950](https://cve.now/CVE-2026-36950.md): Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projects\_per\_department.php. (CVSS 2.7)
- [CVE-2026-36952](https://cve.now/CVE-2026-36952.md): Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/manage\_curriculum.php. (CVSS 2.7)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-04-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.