CVEs published April 19, 2026
25 CVEs were published on April 19, 2026: 0 critical, 3 high.
- Published
- 25
- Critical
- 0
- High
- 3
- Medium
- 22
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- liangliangyy DjangoBlog
- 5
- TransformerOptimus SuperAGI
- 5
- kodcloud KodExplorer
- 4
- H3C Magic B1
- 2
- Collabora KodExplorer
- 1
- dameng100 muucmf
- 1
- EMQX Enterprise
- 1
- EyouCMS
- 1
- H3C Magic B0
- 1
- osuuu LightPicture
- 1
High 3
Medium, low and unrated 22
- CVE-2026-6586TransformerOptimus SuperAGI Budget Endpoint budget.py update_budget authorizationTransformerOptimus SuperAGI
- CVE-2026-6585TransformerOptimus SuperAGI Organisation Update Endpoint organisation.py update_organisation authorizationTransformerOptimus SuperAGI
- CVE-2026-6584TransformerOptimus SuperAGI User Update Endpoint user.py update_user authorizationTransformerOptimus SuperAGI
- CVE-2026-6583TransformerOptimus SuperAGI API Key Management Endpoint api_key.py edit_api_key authorizationTransformerOptimus SuperAGI
- CVE-2026-6582TransformerOptimus SuperAGI Vector Database Management Endpoint vector_dbs.py get_vector_db_details missing authenticationTransformerOptimus SuperAGI
- CVE-2026-6580liangliangyy DjangoBlog Amap API Call views.py hard-coded keyliangliangyy DjangoBlog
- CVE-2026-6579liangliangyy DjangoBlog Clean Endpoint views.py missing authenticationliangliangyy DjangoBlog
- CVE-2026-6578liangliangyy DjangoBlog Setting settings.py hard-coded credentialsliangliangyy DjangoBlog
- CVE-2026-6577liangliangyy DjangoBlog logtracks Endpoint views.py missing authenticationliangliangyy DjangoBlog
- CVE-2026-6576liangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injectionliangliangyy DjangoBlog
- CVE-2026-6574osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentialsosuuu LightPicture
- CVE-2026-6573PHPEMS Instant Exam Creation exams.master.php temppage server-side request forgeryPHPEMS
- CVE-2026-6572Collabora KodExplorer fileUpload Endpoint share.class.php improper authorizationCollabora KodExplorer
- CVE-2026-6571kodcloud KodExplorer systemRole.class.php roleGroupAction authorizationkodcloud KodExplorer
- CVE-2026-6570kodcloud KodExplorer systemMember.class.php initInstall authorizationkodcloud KodExplorer
- CVE-2026-6569kodcloud KodExplorer fileGet Endpoint share.class.php improper authenticationkodcloud KodExplorer
- CVE-2026-6568kodcloud KodExplorer Public Share share.class.php initShareOld path traversalkodcloud KodExplorer
- CVE-2026-6564EMQ EMQX Enterprise Session Handling improper authorizationEMQX Enterprise
- CVE-2026-6562dameng100 muucmf index.html getListByPage sql injectiondameng100 muucmf
- CVE-2026-6561EyouCMS Index.php edit_adminlogo unrestricted uploadEyouCMS
- CVE-2026-6559Wavlink WL-WN579A3 login.cgi sub_401F80 cross site scriptingWavlink WL-WN579A3
- CVE-2026-0868EMC Scheduling Manager <= 4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via calendly Shortcodeturn2honey EMC – Easily Embed Calendly Scheduling