CVEs published April 27 to May 3, 2026
1,092 CVEs were published Apr 27 to May 3, 2026, 86 of them critical. CISA added 4 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,092
- Critical
- 86
- Added to CISA KEV
- 4
- Busiest day
- Fri, May 1 (256)
- Quietest day
- Sun, May 3 (44)
- April 27, 2026197 CVEs · 30 critical
- April 28, 2026221 CVEs · 18 critical
- April 29, 2026133 CVEs · 12 critical
- April 30, 2026167 CVEs · 5 critical
- May 1, 2026256 CVEs · 19 critical
- May 2, 202674 CVEs · 2 critical
- May 3, 202644 CVEs
Added to CISA KEV 4
- CVE-2024-1708Improper limitation of a pathname to a restricted directory (“path traversal”)ConnectWise ScreenConnect
- CVE-2026-32202Windows Shell Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-41940WebPros cPanel and WHM Authentication Bypass via Login FlowWebPros cPanel · WebPros WP Squared +1
- CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeLinux