CVEs published April 20 to April 26, 2026
1,446 CVEs were published Apr 20 to Apr 26, 2026, 146 of them critical. CISA added 14 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,446
- Critical
- 146
- Added to CISA KEV
- 14
- Busiest day
- Tue, Apr 21 (352)
- Quietest day
- Sat, Apr 25 (40)
- April 20, 2026180 CVEs · 18 critical
- April 21, 2026352 CVEs · 34 critical
- April 22, 2026337 CVEs · 18 critical
- April 23, 2026183 CVEs · 42 critical
- April 24, 2026275 CVEs · 29 critical
- April 25, 202640 CVEs · 3 critical
- April 26, 202679 CVEs · 2 critical
Added to CISA KEV 14
- CVE-2023-27351This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).PaperCut NG
- CVE-2024-27199In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possibleJetBrains TeamCity
- CVE-2025-2749Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCEKentico Xperience
- CVE-2025-32975Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341
- CVE-2025-48700An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1.
- CVE-2026-20122Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-20128Cisco Catalyst SD-WAN Manager Information Disclosure VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-20133A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affectCisco Catalyst SD-WAN Manager
- CVE-2026-33825Microsoft Defender Elevation of Privilege VulnerabilityMicrosoft Defender Antimalware Platform
- CVE-2026-39987marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypassmarimo-team marimo · marimo
- CVE-2024-57726SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with exce
- CVE-2024-57728SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a
- CVE-2024-7399Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackSamsung Electronics MagicINFO 9 Server
- CVE-2025-29635A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote