CVEs published April 29, 2026
133 CVEs were published on April 29, 2026: 12 critical, 50 high. 1 is now in CISA KEV.
- Published
- 133
- Critical
- 12
- High
- 50
- Medium
- 70
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 46
Most affected products
- CDAC-Noida e-Sushrut, Hospital Management Information System
- 6
- SourceCodester Pizzafy Ecommerce System
- 6
- AWS FreeRTOS-Plus-TCP
- 5
- TUBITAK BILGEM Software Technologies Research Institute Par…
- 5
- wazuh
- 5
- cockpit-hq/cockpit
- 3
- SonicWall SonicOS
- 3
- SourceCodester Pharmacy Sales and Inventory System
- 3
- UTT HiPER 1250GW
- 3
- Acronis DeviceLock DLP · Acronis Cyber Protect Cloud Agent
- 2
Critical 12
- CVE-2026-7381Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewritingMIYAGAWA Plack::Middleware::XSendfile
- CVE-2018-25318Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS ChangeTenda FH303/A300
- CVE-2018-25317Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS ChangeTenda W3002R · Tenda A302 +1
- CVE-2018-25316Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS ChangeTenda W308R
- CVE-2026-30893Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peerwazuh
- CVE-2026-26015Unauthenticated RCE in DocsGPT MCP STDIO Configurationarc53 DocsGPT
- CVE-2026-41940WebPros cPanel and WHM Authentication Bypass via Login FlowWebPros cPanel · WebPros WP Squared +1
- CVE-2026-5166Path Traversal in TUBITAK BILGEM's Pardus Software CenterTUBITAK BILGEM Software Technologies Research Institute Par…
- CVE-2026-42523Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the featuJenkins Project Jenkins GitHub Plugin · com.coravy.hudson.p…
- CVE-2026-3325SQL injection in MegaCMS by CRM Sistemas de FidelizaciónCRM Sistemas de Fidelización MegaCMS
- CVE-2026-36841TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice
- CVE-2026-38992Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints.cockpit-hq/cockpit
High 50
- CVE-2026-7420UTT HiPER 1250GW ConfigAdvideo strcpy buffer overflowUTT HiPER 1250GW
- CVE-2026-7419UTT HiPER 1250GW formTaskEdit_ap strcpy buffer overflowUTT HiPER 1250GW
- CVE-2026-7418UTT HiPER 1250GW NTP strcpy buffer overflowUTT HiPER 1250GW
- CVE-2026-34965Cockpit CMS Authenticated Remote Code Execution via CollectionsCockpit CMS
- CVE-2018-25311VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory TraversalVideoFlow Digital Video Protection
- CVE-2018-25315Alloksoft Video joiner 4.6.1217 Buffer Overflow via License NameAlloksoft Video Joiner
- CVE-2018-25314Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer OverflowAlloksoft WMV to AVI MPEG DVD WMV Converter
- CVE-2018-25312LifeSize ClearSea 3.1.4 Directory Traversal Remote Code ExecutionLifeSize ClearSea
- CVE-2018-25308BuddyPress Xprofile Custom Fields Type 2.6.3 Arbitrary File Deletiondonmik Buddypress Xprofile Custom Fields Type
- CVE-2018-25307SysGauge Pro 4.6.12 Local Buffer Overflow SEHSysGauge Pro
- CVE-2018-25304Free Download Manager 2.0 Build 417 Local Buffer Overflow SEHFilehippo Free Download Manager
- CVE-2018-25303Allok Video to DVD Burner 2.6.1217 Buffer Overflow SEHAlloksoft Allok Video to DVD Burner
- CVE-2018-25302Allok AVI to DVD SVCD VCD Converter 4.0.1217 Buffer Overflow SEHAlloksoft Allok AVI to DVD SVCD VCD Converter
- CVE-2018-25301Easy MPEG to DVD Burner 1.7.11 SEH Local Buffer OverflowEasy MPEG to DVD Burner
- CVE-2018-25300XATABoost CMS 1.0.0 SQL Injection via news.phpXATABoost CMS
- CVE-2018-25299Prime95 29.4b8 Local Buffer Overflow via SEHMersenne Prime95
- CVE-2026-7426Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus-TCP
- CVE-2026-7424Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus-TCP
- CVE-2026-7466AgentFlow Arbitrary Python Pipeline Execution via pipeline_pathberabuddies AgentFlow
- CVE-2026-5712IdentityIQ Role Editor Incorrect Authorization VulnerabilitySailPoint Technologies IdentityIQ
- CVE-2026-6914MD5 checksum creation may cause availability lossMongoDB Server
- CVE-2026-0204A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific SonicWall SonicOS
- CVE-2026-42198pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoSpgjdbc · org.postgresql:postgresql
- CVE-2026-6849OS Command Injection in TUBITAK BILGEM's Pardus OS My ComputerTUBITAK BILGEM Software Technologies Research Institute Par…
- CVE-2026-5161Improper Authentication in TUBITAK BILGEM's Pardus AboutTUBITAK BILGEM Software Technologies Research Institute Par…
- CVE-2026-7111Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruptionHMBRAND Text::CSV_XS
- CVE-2026-5141Improper Access Control in TUBITAK BILGEM's Pardus Software CenterTUBITAK BILGEM Software Technologies Research Institute Par…
- CVE-2026-41220Local privilege escalation due to improper input validation.Acronis DeviceLock DLP · Acronis Cyber Protect Cloud Agent
- CVE-2026-41952Local privilege escalation due to improper input validation.Acronis DeviceLock DLP · Acronis Cyber Protect Cloud Agent
- CVE-2026-42524Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the legacy wrapper file, resulting in a stored cross-site Jenkins Project Jenkins HTML Publisher Plugin · org.jenkins…
- CVE-2026-42520Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing aJenkins Project Jenkins Credentials Binding Plugin · org.je…
- CVE-2026-5140Authorization Bypass in TUBITAK BILGEM's Pardus UpdateTUBITAK BILGEM Software Technologies Research Institute Par…
- CVE-2026-42249Remote Code Execution in Ollama via Update MechanismOllama
- CVE-2026-42248Missing Signature Verification for Updates in OllamaOllama
- CVE-2026-42646WordPress TaxoPress plugin <= 3.44.0 - SQL Injection vulnerabilitySteve Burge TaxoPress
- CVE-2026-42652WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerabilitywpeverest User Registration
- CVE-2026-42518Information Disclosure Vulnerability in e-Sushrut HMISCDAC-Noida e-Sushrut, Hospital Management Information System
- CVE-2026-42517Cryptographic Failure Vulnerability in e-Sushrut HMISCDAC-Noida e-Sushrut, Hospital Management Information System
- CVE-2026-42516Broken Access Control Vulnerability in e-Sushrut HMISCDAC-Noida e-Sushrut, Hospital Management Information System
- CVE-2026-42515Insecure Direct Object Reference (IDOR) Vulnerability in e-Sushrut HMISCDAC-Noida e-Sushrut, Hospital Management Information System
- CVE-2026-42514Sensitive Data Exposure Vulnerability in e-Sushrut HMISCDAC-Noida e-Sushrut, Hospital Management Information System
- CVE-2026-42513Authentication Bypass Vulnerability in e-Sushrut HMISCDAC-Noida e-Sushrut, Hospital Management Information System
- CVE-2026-42377WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerabilityBrainstorm Force SureForms Pro
- CVE-2026-35155Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability.Dell iDRAC10
- CVE-2026-42615GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.GCHQ CyberChef · cyberchef
- CVE-2025-50328A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protect
- CVE-2026-30769An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via s
- CVE-2026-36837TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formM
- CVE-2026-37555An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec.
- CVE-2026-38991Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially craftcockpit-hq/cockpit
Medium, low and unrated 71
- CVE-2026-7445ZachHandley ZMCPTools MCP Log Resource ResourceManager.ts path traversalZachHandley ZMCPTools
- CVE-2026-7443BurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injectionBurtTheCoder mcp-dnstwist
- CVE-2026-7417Algovate xhs-mcp MCP mcp.server.ts xhs_publish_content server-side request forgeryAlgovate xhs-mcp
- CVE-2026-7416PolarVista xcode-mcp-server MCP index.ts run_tests os command injectionPolarVista xcode-mcp-server
- CVE-2026-7410SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7409SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7408SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7407SourceCodester Pizzafy Ecommerce System Setting ajax.php save_settings sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-1858wget2 Improper Certificate Validationgnu wget2
- CVE-2026-7404getsimpletool mcpo-simple-server base_manager.py delete_shared_prompt path traversalgetsimpletool mcpo-simple-server · mcpo-simple-server
- CVE-2026-7403geldata gel-mcp server.py fetch_rule path traversalgeldata gel-mcp
- CVE-2018-25310VideoFlow Digital Video Protection DVP 2.10 - Authenticated Remote Code ExecutionVideoFlow Digital Video Protection
- CVE-2018-25313SysGauge 4.5.18 Local Denial of Service via Proxy ConfigurationSysGauge
- CVE-2018-25309MyBB Recent threads 17.0 Persistent Cross-Site ScriptingMyBB Recent threads
- CVE-2018-25306PDFunite 0.41.0 Buffer Overflow via Malformed PDFpoppler-utils PDFunite
- CVE-2018-25305librsvg2-bin 2.40.13 Buffer Overflow via Malformed SVGlibrsvg2-bin
- CVE-2018-25298Merge PACS 7.0 Cross-Site Request Forgery via merge-viewerMerge PACS
- CVE-2026-7401SourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scriptingSourceCodester CET Automated Grading System with AI Predict…
- CVE-2026-7400geekgod382 filesystem-mcp-server read_file_tool/write_file_tool server.py is_path_allowed path traversalgeekgod382 filesystem-mcp-server
- CVE-2026-7425Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus-TCP
- CVE-2026-7423Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCPAWS FreeRTOS-Plus-TCP
- CVE-2026-7422MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet ProcessingAWS FreeRTOS-Plus-TCP
- CVE-2026-7398florensiawidjaja BioinfoMCP Upload Endpoint app.py upload path traversalflorensiawidjaja BioinfoMCP
- CVE-2026-27105Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link Following') vulneraDell/Alienware Purchased Apps
- CVE-2026-7439AgentFlow Local Web API Content-Type Validation Bypassberabuddies AgentFlow
- CVE-2026-41499Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()wazuh
- CVE-2026-7397NousResearch hermes-agent file_tools.py _check_sensitive_path symlinkNousResearch hermes-agent
- CVE-2026-28221Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64wazuh
- CVE-2026-26206Wazuh: API brute-force protection bypass via race condition in login attempt trackingwazuh
- CVE-2026-26204Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertDatawazuh
- CVE-2026-7396NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversalNousResearch hermes-agent
- CVE-2026-7394SourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injectionSourceCodester Pizzafy Ecommerce System
- CVE-2026-7393SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted uploadSourceCodester Pizzafy Ecommerce System
- CVE-2026-6915Flaw in the updateUser Command May Allow Unauthorized Configuration ChangeMongoDB Server
- CVE-2026-7392SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injectionSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-0206A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.SonicWall SonicOS
- CVE-2026-0205A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.SonicWall SonicOS
- CVE-2026-7391SourceCodester Pharmacy Sales and Inventory System ajax.php save_supplier sql injectionSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-7390SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-40230Helpy 2.8.0 - Stored XSS in knowledgebase Doc body renderinghelpyio helpy
- CVE-2026-40229Helpy 2.8.0 - Stored XSS in post author display via PostsHelperhelpyio helpy
- CVE-2026-7389EyouCMS common.php GetSortData sql injectionEyouCMS
- CVE-2026-2810Endpoint DLP Driver Out-of-Bounds ReadNetskope Client
- CVE-2026-7388EyouCMS Template File FilemanagerLogic.php editFile code injectionEyouCMS
- CVE-2026-7386fatbobman mail-mcp-bridge mail_mcp_server.py path traversalfatbobman mail-mcp-bridge
- CVE-2026-7384ezequiroga mcp-bases research_server.py search_papers path traversalezequiroga mcp-bases
- CVE-2026-25852Local privilege escalation due to DLL hijacking vulnerability.Acronis DeviceLock DLP
- CVE-2026-42525Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowiJenkins Project Jenkins Microsoft Entra ID (previously Azur…
- CVE-2026-42522A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permJenkins Project Jenkins GitHub Branch Source Plugin · org.j…
- CVE-2026-42521Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless constructors of classes specifiJenkins Project Jenkins Matrix Authorization Strategy Plugi…
- CVE-2026-42519A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission tJenkins Project Jenkins Script Security Plugin · org.jenkin…
- CVE-2026-22745CVE-2026-22745 : Denial of service in static resource handling on Windows platformsVMware Spring Framework · org.springframework:spring-web… +1
- CVE-2026-22741Static resource cache poisoning in Spring MVC and WebFluxVMware Spring Framework · org.springframework:spring-web… +1
- CVE-2026-2902WP Meteor Website Speed Optimization Addon <= 3.4.16 - Unauthenticated Stored Cross-Site Scripting via Commentaguidrevitch WP Meteor Website Speed Optimization Addon
- CVE-2026-22740Spring Framework DoS with Multipart Temp Files in WebFluxVMware Spring Framework · org.springframework:spring-webflux
- CVE-2026-42641WordPress Share This Image plugin <= 2.14 - Server Side Request Forgery (SSRF) vulnerabilityILLID Share This Image
- CVE-2026-42645WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.11.0 - Cross Site Request Forgery (CSRF) vulnerabilityDmitry V. (CEO of "UKR Solution") Barcode Scanner with Inve…
- CVE-2026-42648WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerabilityBrainstorm Force Spectra
- CVE-2026-42642WordPress GiveWP plugin <= 4.14.5 - Broken Access Control vulnerabilityStellarWP GiveWP
- CVE-2026-42643WordPress Image Widget plugin <= 4.4.11 - Cross Site Scripting (XSS) vulnerabilityStellarWP Image Widget
- CVE-2026-42644WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerabilityWPDeveloper BetterDocs
- CVE-2026-4019Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST EndpointComplianz – GDPR/CCPA Cookie Consent
- CVE-2025-10503Reflected Cross-Site Scripting via Authentication Endpoint in WSO2 Identity ServerWSO2 Identity Server
- CVE-2026-42412WordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerabilityweDevs WP User Frontend
- CVE-2026-21023Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify theSamsung Mobile Devices
- CVE-2026-23773Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability.Dell Disk Library for mainframe DLm8700 · Dell Disk Library…
- CVE-2025-56534A cross-site scripting (XSS) vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers to execute arbitrary
- CVE-2025-56535A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a
- CVE-2025-56536A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via inje
- CVE-2025-56537A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scrip
- CVE-2026-38993Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component.cockpit-hq/cockpit