CVEs published April 30, 2026
167 CVEs were published on April 30, 2026: 5 critical, 58 high.
- Published
- 167
- Critical
- 5
- High
- 58
- Medium
- 95
- Low
- 7
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 117
Most affected products
- Wireshark Foundation Wireshark
- 42
- Absolute Software Secure Access
- 10
- chartbrew
- 6
- FreeBSD
- 6
- IBM Langflow Desktop
- 6
- Exim
- 4
- Linux
- 4
- IBM Db2
- 3
- MeWare Software Development PDKS
- 3
- traefik · github.com/traefik/traefik +2
- 3
Critical 5
- CVE-2022-50993Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServletWeaver Network Co. E-office
- CVE-2025-71284Synway SMG Gateway Management Software OS Command Injection via radius_addressSynway Information Engineering Co. Synway SMG Gateway Manag…
- CVE-2026-4670Improper Authentication vulnerability in Progress MOVEit AutomationProgress Software MOVEit Automation
- CVE-2026-36760An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissi
- CVE-2026-36767A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeablcom.shopizer:shopizer
High 58
- CVE-2026-7513UTT HiPER 1200GW formRemoteControl strcpy buffer overflowUTT HiPER 1200GW
- CVE-2026-7512UTT HiPER 1200GW formUser strcpy buffer overflowUTT HiPER 1200GW
- CVE-2026-5403Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-5656Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in WiresharkWireshark Foundation Wireshark
- CVE-2026-5405Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-7503code-projects for Plugin cstecgi.cgi setWiFiMultipleConfig buffer overflowcode-projects for Plugin
- CVE-2026-7551HKUDS OpenHarness Remote Command Execution via /bridge Slash CommandHKUDS OpenHarness
- CVE-2026-6389IBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerabilityIBM Turbonomic prometurbo agent
- CVE-2026-6543Authenticated Remote Code Execution Vulnerability in Langflow Code Validation EndpointIBM Langflow Desktop
- CVE-2026-4503Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download EndpointIBM Langflow Desktop
- CVE-2026-40912Traefik: StripPrefixRegex auth bypass via Path/RawPath desynctraefik · github.com/traefik/traefik +2
- CVE-2026-39858Traefik: Forwarded alias spoofing top pre-auth decision bypasstraefik · github.com/traefik/traefik/v3 +2
- CVE-2026-35051Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass authtraefik · github.com/traefik/traefik/v3 +2
- CVE-2026-40950Buffer overflow in the Secure Access server prior to 14.50Absolute Software Secure Access
- CVE-2026-7435SSCMS v7.4.0 SQL Injection via stl:sqlContent queryStringsiteserver SSCMS
- CVE-2026-33451Arbitrary read/write vulnerability in Windows clients prior to 14.50Absolute Software Secure Access
- CVE-2026-7461OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume CredentialsAWS Amazon ECS Agent · github.com/aws/amazon-ecs-agent
- CVE-2026-40601Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh togglechartbrew
- CVE-2026-40600Chartbrew: Incorrect Access Control in project share policy routes via unbound policy_idchartbrew
- CVE-2026-40595Chartbrew: Incorrect Access Control in public chart and export routes via missing onReport and SharePolicy checkschartbrew
- CVE-2026-40904Chartbrew: Incorrect Access Control in dataset and dataRequest routes via team-scoped permission checkschartbrew
- CVE-2026-32148Lockfile checksums not verified in Hex allows dependency integrity bypasshexpm hex
- CVE-2026-33845Gnutls: gnutls: denial of service via dtls zero-length fragmentgnutls · Red Hat Enterprise Linux +7
- CVE-2025-51846CryptPad unbounded WebSocket frame floodCryptPad
- CVE-2022-50992Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServletWeaver Network Co. E-cology
- CVE-2025-14543Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.RTI Connext Professional
- CVE-2026-5174Improper Access Control Vulnerability in Progress MOVEit AutomationProgress Software MOVEit Automation
- CVE-2026-2892Otter Blocks <= 3.1.4 - Improper Authorization to Unauthenticated Purchase Verification Bypass via Forged Cookiethemeisle Otter Blocks – Gutenberg Blocks, Page Builder for…
- CVE-2026-7246[DISPUTED] Pallets Click contains a command injection via Unsanitized Filename "click.edit()"Pallets Click Click
- CVE-2026-7402Improper Rate Limiting in MeWare Software's PDKSMeWare Software Development PDKS
- CVE-2025-14576Possible QML code injection in VectorImage componentQt
- CVE-2026-7399IDOR in MeWare Software's PDKSMeWare Software Development PDKS
- CVE-2024-13971Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_proLobster_pro
- CVE-2026-31693cifs: some missing initializations on replayLinux
- CVE-2026-41882In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible viJetBrains IntelliJ IDEA
- CVE-2026-31786Buffer overflow in drivers/xen/sys-hypervisor.cLinux
- CVE-2026-42800Deference after null check in ims_client sipASR Lapwing_Linux
- CVE-2026-42799Out-of-bounds read in ulpASR Kestrel
- CVE-2026-22070ColorOS Assistant Path Traversal VulnerabilityOPPO ColorOS Assistant
- CVE-2026-35547Heap overflow in libnvFreeBSD
- CVE-2026-39457Stack overflow via select() file descriptor set overflowFreeBSD
- CVE-2026-42512Remotely triggerable out-of-bounds heap write in dhclientFreeBSD
- CVE-2026-7164pf can overflow the stack parsing crafted SCTP packetsFreeBSD
- CVE-2024-39847Arbitrary File Read and Server Side Request Forgery via XML External Entities in 4D Server SOAP4D Server
- CVE-2026-7270Local privilege escalation via execve()FreeBSD
- CVE-2026-42511Remote code execution via malicious DHCP optionsFreeBSD
- CVE-2026-5402Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-7470Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflowTenda 4G300
- CVE-2025-46115An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification Request
- CVE-2025-56568Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Ope
- CVE-2026-36340An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email functionkrayin/laravel-crm
- CVE-2026-36762An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload per
- CVE-2026-36765An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticated attackers to exec
- CVE-2026-36956A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0.
- CVE-2026-36957Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler.
- CVE-2026-36958A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router.
- CVE-2026-36959U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint.
- CVE-2026-36960A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.0.0.
Medium, low and unrated 104
- CVE-2026-22726Route Services Firewall BypassCloudFoundry Foundation Routing release · CloudFoundry Foun…
- CVE-2026-5404Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in WiresharkWireshark Foundation Wireshark
- CVE-2026-7510OWAP DefectDojo Benchmark/Engagement/Product/Survey authorizationOWAP DefectDojo
- CVE-2026-7508Bootstrap CMS Page Creation show.blade.php code injectionBootstrap CMS
- CVE-2026-7506SourceCodester Hotel Management System check sql injectionSourceCodester Hotel Management System
- CVE-2026-7505nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorizationnextlevelbuilder GoClaw
- CVE-2026-28909Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintApple macOS
- CVE-2026-1577IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueriesIBM Db2
- CVE-2025-36122IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automaticIBM Db2
- CVE-2025-14688IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurationsIBM Db2
- CVE-2026-2311IBM i is affected by a privilege escalation vulnerability in Web Administration GUI []IBM i
- CVE-2025-36180Inadequate Pod Communication Restrictions, affects watsonx.dataIBM watsonx.data
- CVE-2026-6542Monitor API allows cross-user read of transaction logs and deletion of build data via flow_idIBM Langflow OSS
- CVE-2026-7502LinkStackOrg LinkStack Management Endpoint UserController.php saveLink authorizationLinkStackOrg LinkStack
- CVE-2025-36335Vulnerabilities foundIBM watsonx.data intelligence
- CVE-2026-3345Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload EndpointIBM Langflow Desktop
- CVE-2026-3346Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRawIBM Langflow Desktop
- CVE-2026-3340Server-Side Request Forgery (SSRF) in Langflow URL ComponentIBM Langflow Desktop
- CVE-2026-4502Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 APIIBM Langflow Desktop
- CVE-2026-7501LinkStackOrg LinkStack UserController.php editPage cross site scriptingLinkStackOrg LinkStack
- CVE-2026-41263Traefik: BasicAuth middleware: timing side-channel vulnerabilitytraefik · github.com/traefik/traefik +2
- CVE-2026-6539Notepad++ 8.9.3 Format String Injection via nativeLang.xmlNotepad++
- CVE-2026-40951Memory corruption in Secure Access Windows clients prior to 14.50Absolute Software Secure Access
- CVE-2026-41174Traefik Kubernetes CRD allows unauthorized cross-namespace middleware bindingtraefik · github.com/traefik/traefik +2
- CVE-2026-28532FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser FunctionsFRRouting frr
- CVE-2026-40949Buffer overflow in Windows clients prior to 14.50Absolute Software Secure Access
- CVE-2026-33452Buffer overflow in Windows clients prior to 14.50Absolute Software Secure Access
- CVE-2026-33450Out of bounds read in Secure Access MacOS clients prior to 14.50Absolute Software Secure Access
- CVE-2026-33449Message handler buffer overflow in clients prior to 14.50Absolute Software Secure Access
- CVE-2026-33448Format string vulnerability in MacOS clients prior to 14.50Absolute Software Secure Access
- CVE-2026-7429SSCMS v7.4.0 Reflected Cross-Site Scripting via STL Processingsiteserver SSCMS
- CVE-2026-33447CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50.Absolute Software Secure Access
- CVE-2026-33446Buffer overflow in client authentication prior to version 14.50Absolute Software Secure Access
- CVE-2026-40603Chartbrew: Incorrect Access Control in /api/project/dashboard/:brewName via same-team overridechartbrew
- CVE-2026-35514Unauthenticated Account Registration via /user/invited Bypasses All Signup Restrictions in Chartbrewchartbrew
- CVE-2026-3832Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responsegnutls · Red Hat Enterprise Linux +5
- CVE-2026-3833Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisongnutls · Red Hat Enterprise Linux +6
- CVE-2026-7500Org.keycloak.keycloak-services: improper access control on keycloak server when the account account api feature is disabledRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-7163Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosureassisted-service · Red Hat multicluster engine for Kubernet…
- CVE-2026-7382Information Disclosure in MeWare Software's PDKSMeWare Software Development PDKS
- CVE-2026-5080Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurelyBIGPRESH Dancer::Session::Abstract
- CVE-2026-1493Cross-Site Scripting in LEX Baza DokumentówWolters Kluwer Polska LEX Baza Dokumentów
- CVE-2026-31692rtnetlink: add missing netlink_ns_capable() check for peer netnsLinux
- CVE-2026-31787xen/privcmd: fix double free via VMA splittingLinux
- CVE-2026-6498Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameterrustaurius Five Star Restaurant Reservations – WordPress Bo…
- CVE-2026-41016Apache Airflow Providers SMTP: No certificate validation on SMTP STARTTLS connections in SMTP providerApache Software Foundation Apache Airflow Providers SMTP ·…
- CVE-2026-42798Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.littlecms little cms color engine
- CVE-2026-41226Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor.Ricoh Company Multiple laser printers and MFPs which implem…
- CVE-2026-5409Uncontrolled Recursion in WiresharkWireshark Foundation Wireshark
- CVE-2026-5408Uncontrolled Recursion in WiresharkWireshark Foundation Wireshark
- CVE-2026-5406Uncontrolled Recursion in WiresharkWireshark Foundation Wireshark
- CVE-2026-5407Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-5299Uncontrolled Recursion in WiresharkWireshark Foundation Wireshark
- CVE-2026-5401Uncontrolled Recursion in WiresharkWireshark Foundation Wireshark
- CVE-2026-5654Stack-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-5655Use After Free in WiresharkWireshark Foundation Wireshark
- CVE-2026-5657Double Free in WiresharkWireshark Foundation Wireshark
- CVE-2026-5653Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-6538Stack-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-6537Stack-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-6536Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-6535Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation Wireshark
- CVE-2026-6534Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-6533Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation Wireshark
- CVE-2026-6532Buffer Over-read in WiresharkWireshark Foundation Wireshark
- CVE-2026-6531Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-6530Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-6529Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-6528Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-6527Uncontrolled Recursion in WiresharkWireshark Foundation Wireshark
- CVE-2026-6526NULL Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2026-6524Access of Uninitialized Pointer in WiresharkWireshark Foundation Wireshark
- CVE-2026-6523Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-6521Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-6520Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-6519Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-6522Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-6870Access of Uninitialized Pointer in WiresharkWireshark Foundation Wireshark
- CVE-2026-6869Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation Wireshark
- CVE-2026-6867Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation Wireshark
- CVE-2026-6868Stack-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-7378Heap-based Buffer Overflow in WiresharkWireshark Foundation Wireshark
- CVE-2026-7379Missing Release of Memory after Effective Lifetime in WiresharkWireshark Foundation Wireshark
- CVE-2026-7375Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2026-7376NULL Pointer Dereference in WiresharkWireshark Foundation Wireshark
- CVE-2025-13030All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint.django-mdeditor
- CVE-2026-7469Tenda 4G300 DelFil sub_425A28 command injectionTenda 4G300
- CVE-2026-74681024-lab smart-admin Demo Site index.html access control1024-lab smart-admin
- CVE-2026-7447SourceCodester Pet Grooming Management Software update_customer.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2026-7446VetCoders mcp-server-semgrep MCP index.ts create_rule os command injectionVetCoders mcp-server-semgrep · mcp-server-semgrep
- CVE-2026-36756A Server-Side Request Forgery (SSRF) in the /plugins/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan int
- CVE-2026-36757A Server-Side Request Forgery (SSRF) in the /plugins/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to sca
- CVE-2026-36758A Server-Side Request Forgery (SSRF) in the /themes/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan inte
- CVE-2026-36759A Server-Side Request Forgery (SSRF) in the /themes/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan
- CVE-2026-36761A stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint of JeeSite v5.15.1 allows attackers to execute arbitrar
- CVE-2026-36763A stored cross-site scripting (XSS) vulnerability in the /api/blade-desk/notice/submit endpoint of SpringBlade v4.8.0 allows attackers to ex
- CVE-2026-36764A Server-Side Request Forgery (SSRF) in the /ureport/datasource/testConnection endpoint of SpringBlade v4.8.0 allows authenticated attackers
- CVE-2026-36766Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer v3.2.5 allows attackcom.shopizer:shopizer
- CVE-2026-38939Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitiv
- CVE-2026-38940Cross Site Scripting vulnerability in RafyMrX TOKO-ONLINE-ROTI v.1.0 allows a remote attacker to execute arbitrary code via the detail_produ
- CVE-2026-40684In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is presExim
- CVE-2026-40685In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in Exim
- CVE-2026-40686In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malfoExim
- CVE-2026-40687In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write thatExim