Tag: 2026-04-09

5 Attack Reports | 272 Vulnerabilities

Attack reports

Payroll pirate attacks targeting Canadian employees

Microsoft Incident Response researchers identified Storm-2755, a financially motivated threat actor conducting payroll pirate attacks against Canadian users. The campaign uses malvertising and SEO poisoning on generic search terms like "Office 365" to lure victims to a fraudulent sign-in page. Thro…
aitm
malvertising
seo poisoning
credential phishing
CVE-2025-27152
session hijacking
token theft
2026-04-09
canadian targeting
payroll fraud
Published: April 9, 2026
Linked vulnerabilities : CVE-2025-27152
Downloadable IOCs: 1

Stealer Campaign Impacting SLTT macOS Users

MacSync Stealer is a macOS infostealer operating as Malware-as-a-Service (MaaS), distributed through SEO poisoning and fake ClickFix CAPTCHAs. The campaign has evolved through three iterations since November 2025, shifting from fake download sites to malicious ChatGPT conversations and finally to s…
infostealer
seo poisoning
macos
clickfix
maas
macsync stealer
macsync
cryptocurrency wallet
2026-04-09
ledger trojanization
Published: April 9, 2026
Downloadable IOCs: 12

This fake Windows support website delivers password-stealing malware

A malicious campaign is targeting French-speaking users in an attempt to steal passwords, payment details and banking details from people across France, according to researchers at the Institute for Strategic Studies (ISS).
python
javascript
electron
microsoft
indonesia
france
kela
windows update
2026-04-09
Published: April 9, 2026
Downloadable IOCs: 2

Hack-for-Hire Campaign Targets Journalists Across MENA Region

A hack-for-hire operation with suspected links to the Bitter threat actor targeted journalists, activists, and government officials across the Middle East and North Africa between 2023 and 2025. The campaign employed sophisticated spear-phishing attacks via LinkedIn, Apple Messages, WhatsApp, and e…
spear-phishing
oauth
hack-for-hire
journalists
mena
2026-04-09
civil-society-targeting
dracarys
prospy
regional-surveillance
tospy
Published: April 9, 2026
Linked vulnerabilities : CVE-2025-55182 (CVSS 10.0), CVE-2026-34040 (CVSS 8.8), CVE-2026-5281 (CVSS 8.8), CVE-2026-35616 (CVSS 9.8)
Downloadable IOCs: 0

The long road to your crypto: ClipBanker and its marathon infection chain

Proxifiers are speciaized software designed to tunnel traffic for programs that do not natively support proxy servers. They are a go-to for making sure these apps are functional within secured development environments. By coincidence, Proxifier is also a name for a proprietary proxifier developed b…
2026-04-09
Published: April 9, 2026
Downloadable IOCs: 1
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-40089

9.9
    Sonicverse
  • Sonicverse
Published: April 9, 2026

CVE-2026-1830

9.8
    Wordpress
  • Quick Playground Plugin
Published: April 9, 2026

CVE-2026-40088

9.6
    Praisonai
  • Praisonai
Published: April 9, 2026

CVE-2025-62718

9.3
    Axios
  • Axios
Published: April 9, 2026

CVE-2026-39987

9.3
    Marimo
  • Marimo
Published: April 9, 2026

CVE-2025-13926

9.3
    Contemporary Controls
  • Basc 20t
Published: April 9, 2026

CVE-2026-5194

9.3
    Wolfssl
  • Wolfssl
Published: April 9, 2026

CVE-2026-33784

9.3
    Juniper
  • Virtual Lightweight Collector
Published: April 9, 2026

CVE-2026-40111

9.3
    Praisonai
  • Praisonaiagents
Published: April 9, 2026

CVE-2026-40154

9.3
    Praisonai
  • Praisonai
Published: April 9, 2026

CVE-2026-34424

9.3
    Smart Slider
  • Smart Slider 3 Pro
Published: April 9, 2026

CVE-2026-28205

9.2
    Openplc
  • Openplc V3
Published: April 9, 2026

CVE-2026-35556

9.2
    Openplc
  • Openplc V3
Published: April 9, 2026

CVE-2026-34177

9.1
    Canonical
  • Lxd
Published: April 9, 2026

CVE-2026-34178

9.1
    Canonical
  • Lxd
Published: April 9, 2026

CVE-2026-34179

9.1
    Canonical
  • Lxd
Published: April 9, 2026

CVE-2025-57735

9.1
    Apache
  • Airflow
Published: April 9, 2026

CVE-2026-39980

9.1
    Opencti
  • Opencti
Published: April 9, 2026

CVE-2026-39912

9.1
    V2board
  • V2board
    Xboard
Published: April 9, 2026

CVE-2026-29145

9.1
    Apache
  • Tomcat
  • Tomcat Native
Published: April 9, 2026

CVE-2026-33771

9.1
    Juniper
  • Ctp Os
Published: April 9, 2026

CVE-2026-34971

9.0
    Wasmtime
  • Wasmtime
Published: April 9, 2026

CVE-2026-34987

9.0
    Wasmtime
  • Wasmtime
Published: April 9, 2026

CVE-2026-5850

8.9
    Totolink
  • A7100ru
Published: April 9, 2026

CVE-2026-5851

8.9
    Totolink
  • A7100ru
Published: April 9, 2026

CVE-2026-5852

8.9
    Totolink
  • A7100ru
Published: April 9, 2026

CVE-2026-5853

8.9
    Totolink
  • A7100ru
Published: April 9, 2026

CVE-2026-5854

8.9
    Totolink
  • A7100ru
Published: April 9, 2026

CVE-2026-5975

8.9
    Totolink
  • A7100ru
Published: April 9, 2026

CVE-2026-5976

8.9
    Totolink
  • A7100ru
Published: April 9, 2026

CVE-2026-5977

8.9
    Totolink
  • A7100ru
Published: April 9, 2026

CVE-2026-5978

8.9
    Totolink
  • A7100ru
Published: April 9, 2026

CVE-2026-4326

8.8
    Vertex
  • Addons For Elementor
Published: April 9, 2026

CVE-2026-34184

8.8
    Hydrosystem
  • Hydrosystem Control System
Published: April 9, 2026

CVE-2026-39962

8.8
    Misp
  • Misp
Published: April 9, 2026

CVE-2026-30478

8.8
    Gatewaygeo
  • Mapserver
Published: April 9, 2026

CVE-2026-39981

8.8
    Agix
  • Agix
Published: April 9, 2026

CVE-2023-54359

8.8
    Adivaha
  • Travel Plugin
Published: April 9, 2026

CVE-2026-34185

8.7
    Hydrosystem
  • Hydrosystem Control System
Published: April 9, 2026

CVE-2026-39911

8.7
    Hashgraph
  • Guardian
Published: April 9, 2026

CVE-2026-35063

8.7
    Openplc
  • Openplc
Published: April 9, 2026

CVE-2026-40107

8.7
    Siyuan
  • Siyuan
Published: April 9, 2026

CVE-2026-33778

8.7
    Juniper
  • Junos Os
Published: April 9, 2026

CVE-2026-33782

8.7
    Juniper Networks
  • Junos Os
Published: April 9, 2026

CVE-2026-33790

8.7
    Juniper
  • Juniper Junos
Published: April 9, 2026

CVE-2026-35638

8.7
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35639

8.7
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-39983

8.6
    Nodejs
  • Basic-Ftp
Published: April 9, 2026

CVE-2026-4436

8.6
    *
  • Modbus
  • Gas Injection System
Published: April 9, 2026

CVE-2026-39942

8.5
    Directus
  • Directus
Published: April 9, 2026

CVE-2026-39974

8.5
    N8n
  • N8n-Mcp
Published: April 9, 2026

CVE-2026-5329

8.5
    Rapid7
  • Velociraptor
Published: April 9, 2026

CVE-2026-33788

8.5
    Juniper
  • Junose
Published: April 9, 2026

CVE-2026-33793

8.5
    Juniper
  • Juniper Junos Os
  • Juniper Junos Os Evolved
Published: April 9, 2026

CVE-2026-35625

8.5
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35204

8.4
    Helm
  • Helm
Published: April 9, 2026

CVE-2026-35205

8.4
    Helm
  • Helm
Published: April 9, 2026

CVE-2026-21915

8.4
    Juniper
  • Jsi Virtual Lightweight Collector
Published: April 9, 2026

CVE-2026-33791

8.4
    Juniper
  • Junos Os
  • Junos Os Evolved
Published: April 9, 2026

CVE-2026-40113

8.4
    Praisonai
  • Praisonai
    Google
Published: April 9, 2026

CVE-2026-33779

8.3
    Juniper
  • Juniper Networks Junos Os
Published: April 9, 2026

CVE-2026-35618

8.3
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-5264

8.3
    Wolfssl
  • Wolfssl
Published: April 9, 2026

CVE-2026-34578

8.2
    Opnsense
  • Opnsense
Published: April 9, 2026

CVE-2026-40070

8.1
    Bsv
  • Ruby Sdk
Published: April 9, 2026

CVE-2026-40093

8.1
    Nimiq
  • Nimiq Blockchain
Published: April 9, 2026

CVE-2026-40149

7.9
    Praisonai
  • Praisonai
Published: April 9, 2026

CVE-2026-39853

7.8
    Osslsigncode
  • Osslsigncode
Published: April 9, 2026

CVE-2026-34734

7.8
    Hdf5
  • Hdf5
Published: April 9, 2026

CVE-2026-39843

7.7
    Plane
  • Plane
Published: April 9, 2026

CVE-2026-40150

7.7
    Praisonaiagents
  • Praisonaiagents
Published: April 9, 2026

CVE-2025-62188

7.5
    Apache
  • Dolphinscheduler
Published: April 9, 2026

CVE-2026-4660

7.5
    Hashicorp
  • Go-Getter
Published: April 9, 2026

CVE-2026-5959

7.5
    Gl.Inet
  • Gl-Rm1
  • Gl-Rm10
  • Gl-Rm10rc
  • Gl-Rm1pe
Published: April 9, 2026

CVE-2026-33266

7.5
    Apache
  • Openmeetings
Published: April 9, 2026

CVE-2026-34020

7.5
    Apache
  • Openmeetings
Published: April 9, 2026

CVE-2026-40046

7.5
    Apache
  • Activemq
  • Activemq All
  • Activemq Mqtt
Published: April 9, 2026

CVE-2026-1584

7.5
    Gnutls
  • Gnutls
Published: April 9, 2026

CVE-2026-40069

7.5
    Bsv
  • Bsv Ruby Sdk
Published: April 9, 2026

CVE-2026-24880

7.5
    Apache
  • Tomcat
Published: April 9, 2026

CVE-2026-29129

7.5
    Apache
  • Tomcat
Published: April 9, 2026

CVE-2026-29146

7.5
    Apache
  • Tomcat
Published: April 9, 2026

CVE-2026-34483

7.5
    Apache
  • Tomcat
Published: April 9, 2026

CVE-2026-34486

7.5
    Apache
  • Tomcat
Published: April 9, 2026

CVE-2026-34487

7.5
    Apache
  • Tomcat
Published: April 9, 2026

CVE-2026-40116

7.5
    Praisonai
  • Praisonai
Published: April 9, 2026

CVE-2026-5815

7.4
    D-Link
  • Dir-645
Published: April 9, 2026

CVE-2026-5830

7.4
    Tenda
  • Ac15
Published: April 9, 2026

CVE-2026-5979

7.4
    D-Link
  • Dir-605l
Published: April 9, 2026

CVE-2026-5980

7.4
    Dlink
  • Dir-605l
Published: April 9, 2026

CVE-2026-40153

7.4
    Praison
  • Praisonaiagents
Published: April 9, 2026

CVE-2026-5981

7.4
    D-Link
  • Dir-605l
Published: April 9, 2026

CVE-2026-5982

7.4
    D-Link
  • Dir-605l
Published: April 9, 2026

CVE-2026-5983

7.4
    D-Link
  • Dir-605l
Published: April 9, 2026

CVE-2026-5984

7.4
    D-Link
  • Dir-605l
Published: April 9, 2026

CVE-2026-5988

7.4
    Tenda
  • F451
Published: April 9, 2026

CVE-2026-5844

7.3
    D-Link
  • Dir-882
Published: April 9, 2026

CVE-2024-1490

7.2
    Wago
  • Wago Plc
    Openvpn
Published: April 9, 2026

CVE-2026-34512

7.2
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-40114

7.2
    Praison
  • Praisonai
Published: April 9, 2026

CVE-2026-39959

7.1
    Tmds
  • Dbus
  • Dbus.Protocol
Published: April 9, 2026

CVE-2026-39972

7.1
    Mercure
  • Mercure
Published: April 9, 2026

CVE-2026-39976

7.1
    Laravel
  • Passport
    League
Published: April 9, 2026

CVE-2026-39977

7.1
    Flatpak
  • Flatpak-Builder
Published: April 9, 2026

CVE-2025-59969

7.1
    Juniper
  • Juniper Junos Os Evolved
Published: April 9, 2026

CVE-2026-21919

7.1
    Juniper
  • Juniper Junos
  • Juniper Junos Evolved
Published: April 9, 2026

CVE-2026-33775

7.1
    Juniper Networks
  • Junos
Published: April 9, 2026

CVE-2026-33780

7.1
    Juniper
  • Junos Os
  • Junos Os Evolved
Published: April 9, 2026

CVE-2026-33781

7.1
    Juniper
  • Junos
Published: April 9, 2026

CVE-2026-33783

7.1
    Juniper
  • Junos Os Evolved
Published: April 9, 2026

CVE-2026-33797

7.1
    Juniper
  • Junos Os
  • Junos Os Evolved
Published: April 9, 2026

CVE-2026-35631

7.1
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35636

7.1
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35644

7.1
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2025-13914

7.0
    Juniper
  • Apstra
Published: April 9, 2026

CVE-2026-21916

7.0
    Juniper
  • Junos
Published: April 9, 2026

CVE-2026-5263

7.0
    Wolfssl
  • Wolfssl
Published: April 9, 2026

CVE-2026-5814

6.9
    Phpgurukul
  • Online Course Registration
Published: April 9, 2026

CVE-2026-5824

6.9
    Code-Projects
  • Simple Laundry System
Published: April 9, 2026

CVE-2026-5827

6.9
    Code-Projects
  • Simple It Discussion Forum
Published: April 9, 2026

CVE-2026-5828

6.9
    Code-Projects
  • Simple It Discussion Forum
Published: April 9, 2026

CVE-2026-5829

6.9
    Code-Projects
  • Simple It Discussion Forum
Published: April 9, 2026

CVE-2026-5832

6.9
    Atototo
  • Api-Lab-Mcp
Published: April 9, 2026

CVE-2026-5837

6.9
    Phpgurukul
  • News Portal
Published: April 9, 2026

CVE-2026-5841

6.9
    Tenda
  • I3
Published: April 9, 2026

CVE-2026-5842

6.9
    Decolua
  • 9router
Published: April 9, 2026

CVE-2026-5849

6.9
    Tenda
  • I12
Published: April 9, 2026

CVE-2026-4901

6.9
    Hydrosystem
  • Hydrosystem Control System
Published: April 9, 2026

CVE-2026-5961

6.9
    Code-Projects
  • Simple It Discussion Forum
Published: April 9, 2026

CVE-2026-5962

6.9
    Tenda
  • Ch22
Published: April 9, 2026

CVE-2026-5970

6.9
    Foundationagents
  • Metagtp
Published: April 9, 2026

CVE-2026-5971

6.9
    Foundationagents
  • Metagpt
Published: April 9, 2026

CVE-2026-34941

6.9
    Wasmtime
  • Wasmtime
Published: April 9, 2026

CVE-2026-5972

6.9
    Foundationagents
  • Metagtp
Published: April 9, 2026

CVE-2026-5973

6.9
    Foundationagents
  • Metagpt
Published: April 9, 2026

CVE-2026-5974

6.9
    Foundationagents
  • Metagpt
Published: April 9, 2026

CVE-2026-33773

6.9
    Juniper
  • Junos
  • Ex Series
  • Qfx Series
Published: April 9, 2026

CVE-2026-33774

6.9
    Juniper
  • Juniper Junos Os
Published: April 9, 2026

CVE-2026-35626

6.9
    Openclaw
  • *
Published: April 9, 2026

CVE-2026-35627

6.9
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35632

6.9
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35633

6.9
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35637

6.9
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35640

6.9
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-5503

6.9
    Wolfssl
  • Wolfssl
Published: April 9, 2026

CVE-2026-5985

6.9
    Code-Projects
  • Simple It Discussion Forum
Published: April 9, 2026

CVE-2026-39961

6.8
    Aiven
  • Aiven Operator
Published: April 9, 2026

CVE-2026-35577

6.8
    Apollo
  • Mcp Server
Published: April 9, 2026

CVE-2026-33776

6.8
    Juniper
  • Junos
  • Junos Evolved
Published: April 9, 2026

CVE-2026-33786

6.8
    Juniper
  • Junos
Published: April 9, 2026

CVE-2026-33787

6.8
    Juniper
  • Junos Os
Published: April 9, 2026

CVE-2026-4878

6.7
    Libcap
  • Libcap
Published: April 9, 2026

CVE-2026-34538

6.5
    Apache
  • Airflow
Published: April 9, 2026

CVE-2026-39943

6.5
    Directus
  • Directus
Published: April 9, 2026

CVE-2026-34500

6.5
    Apache
  • Tomcat
Published: April 9, 2026

CVE-2026-39848

6.5
    Dockyard
  • Dockyard
Published: April 9, 2026

CVE-2026-40148

6.5
    Praisonai
  • Praisonai
Published: April 9, 2026

CVE-2026-4429

6.4
    Wordpress
  • Osm Plugin
  • Wordpress
Published: April 9, 2026

CVE-2026-5357

6.4
    Wordpress
  • Download Manager
Published: April 9, 2026

CVE-2026-4336

6.4
    Ultimate Faq Accordion
  • Ultimate Faq Accordion
Published: April 9, 2026

CVE-2026-5742

6.4
    Wordpress
  • Userswp
Published: April 9, 2026

CVE-2026-3005

6.4
    Wordpress
  • List Category Posts Plugin
Published: April 9, 2026

CVE-2026-5447

6.3
    Wolfssl
  • Wolfssl
Published: April 9, 2026

CVE-2026-33785

6.3
    Juniper
  • Junoss
Published: April 9, 2026

CVE-2026-35623

6.3
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35628

6.3
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35635

6.3
    Openclaw
  • Openclaw
    Synology
Published: April 9, 2026

CVE-2026-35646

6.3
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-5504

6.3
    Wolfssl
  • Wolfssl
Published: April 9, 2026

CVE-2026-40115

6.2
    Praisonai
  • Praisonai
Published: April 9, 2026

CVE-2026-40117

6.2
    Praison
  • Praisonaiaagents
Published: April 9, 2026

CVE-2025-45806

6.1
    Rrweb
  • Rrweb-Snapshot
Published: April 9, 2026

CVE-2025-63238

6.1
    Limesurvey
  • Limesurvey
Published: April 9, 2026

CVE-2025-70797

6.1
    Limesurvey
  • Limesurvey
Published: April 9, 2026

CVE-2026-39315

6.1
    Unhead
  • Unhead
Published: April 9, 2026

CVE-2026-35186

6.1
    Wasmtime
  • Wasmtime
Published: April 9, 2026

CVE-2026-35195

6.1
    Wasmtime
  • Wasmtime
Published: April 9, 2026

CVE-2026-25854

6.1
    Apache
  • Tomcat
Published: April 9, 2026

CVE-2026-35645

6.1
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-5446

6.0
    Wolfssl
  • Wolfssl
Published: April 9, 2026

CVE-2026-35622

6.0
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-34942

5.9
    Wasmtime
  • Wasmtime
Published: April 9, 2026

CVE-2026-34946

5.9
    Bytecode Alliance
  • Wasmtime
Published: April 9, 2026

CVE-2026-5295

5.9
    Wolfssl
  • Wolfssl
Published: April 9, 2026

CVE-2026-34943

5.6
    Wasmtime
  • Wasmtime
Published: April 9, 2026

CVE-2026-39855

5.5
    Osslsigncode
  • Osslsigncode
Published: April 9, 2026

CVE-2026-39856

5.5
    Osslsigncode
  • Osslsigncode
Published: April 9, 2026

CVE-2026-5986

5.5
    Zod
  • Jsvideourlparser
Published: April 9, 2026

CVE-2026-4124

5.4
    Ziggeo
  • Ziggeo
Published: April 9, 2026

CVE-2025-70365

5.4
    Kiamo
  • Kiamo
Published: April 9, 2026

CVE-2026-35207

5.4
    Deepin
  • Plugin-Deepinid
  • Dde-Control-Center
Published: April 9, 2026

CVE-2026-40071

5.4
    Pyload
  • Pyload
Published: April 9, 2026

CVE-2026-40112

5.4
    Praisonai
  • Praisonai
    Flask
Published: April 9, 2026

CVE-2026-5823

5.3
    Itsourcecode
  • Construction Management System
Published: April 9, 2026

CVE-2026-5825

5.3
    Code-Projects
  • Simple Laundry System
Published: April 9, 2026

CVE-2026-5826

5.3
    Code-Projects
  • Simple It Discussion Forum
Published: April 9, 2026

CVE-2026-5831

5.3
    Agions
  • Taskflow-Ai
Published: April 9, 2026

CVE-2026-2519

5.3
    Wordpress
  • Bookly
Published: April 9, 2026

CVE-2026-35040

5.3
    Fast-Jwt
  • Fast-Jwt
Published: April 9, 2026

CVE-2026-39941

5.3
    Churchcrm
  • Churchcrm
Published: April 9, 2026

CVE-2026-32990

5.3
    Apache
  • Tomcat
Published: April 9, 2026

CVE-2026-40087

5.3
    Langchain
  • Langchain
Published: April 9, 2026

CVE-2026-35629

5.3
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35642

5.3
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-40151

5.3
    Praisonai
  • Praisonai
  • Agentos
Published: April 9, 2026

CVE-2026-40152

5.3
    Praison
  • Praisonaiagents
Published: April 9, 2026

CVE-2026-39958

5.2
    Aosc
  • Oma
Published: April 9, 2026

CVE-2026-5838

5.1
    Phpgurukul
  • News Portal Project
Published: April 9, 2026

CVE-2026-5839

5.1
    Phpgurukul
  • News Portal
Published: April 9, 2026

CVE-2026-5840

5.1
    Phpgurukul
  • News Portal
Published: April 9, 2026

CVE-2026-5848

5.1
    Jeecgboot
  • Jimureport
Published: April 9, 2026

CVE-2026-34757

5.1
    Libpng
  • Libpng
Published: April 9, 2026

CVE-2023-54358

5.1
    Adivaha
  • Travel Plugin
Published: April 9, 2026

CVE-2023-54360

5.1
    Jlex
  • Jlex Review
Published: April 9, 2026

CVE-2023-54361

5.1
    Joomla
  • Iproperty
Published: April 9, 2026

CVE-2023-54362

5.1
    Joomla
  • Virtuemart
Published: April 9, 2026

CVE-2023-54363

5.1
    Joomla
  • Solidres
Published: April 9, 2026

CVE-2023-54364

5.1
    Joomla
  • Hikashop
Published: April 9, 2026

CVE-2026-21904

5.1
    Juniper
  • Juniper Junos Space
Published: April 9, 2026

CVE-2026-35634

5.1
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-5987

5.1
    Sanluan
  • Publiccms
    Freemarker
Published: April 9, 2026

CVE-2026-5833

4.8
    Awwaiid
  • Mcp-Server-Taskwarrior
Published: April 9, 2026

CVE-2026-5834

4.8
    Code-Projects
  • Online Shoe Store
Published: April 9, 2026

CVE-2026-5835

4.8
    Code-Projects
  • Online Shoe Store
Published: April 9, 2026

CVE-2026-5836

4.8
    Code-Projects
  • Online Shoe Store
Published: April 9, 2026

CVE-2026-35206

4.8
    Helm
  • Helm
Published: April 9, 2026

CVE-2026-3574

4.4
    Experto
  • Experto Dashboard For Woocommerce
Published: April 9, 2026

CVE-2026-3568

4.3
    Wordpress
  • Mstore Api
Published: April 9, 2026

CVE-2026-33005

4.3
    Apache
  • Openmeetings
Published: April 9, 2026

CVE-2026-39985

4.3
    Loris
  • Loris
Published: April 9, 2026

CVE-2026-35041

4.2
    Fast-Jwt
  • Fast-Jwt
Published: April 9, 2026

CVE-2026-34944

4.1
    Wasmtime
  • Wasmtime
Published: April 9, 2026

CVE-2026-5507

4.1
    Wolfssl
  • Wolfssl
Published: April 9, 2026

CVE-2026-21388

3.7
    Mattermost
  • Plugins
  • Mattermost
Published: April 9, 2026

CVE-2026-24661

3.7
    Mattermost
  • Plugins
Published: April 9, 2026

CVE-2026-40077

3.5
    Beszel
  • Beszel
Published: April 9, 2026

CVE-2026-40109

3.1
    Flux
  • Notification-Controller
Published: April 9, 2026

CVE-2025-14551

2.7
    Ubuntu
  • Subiquity
Published: April 9, 2026

CVE-2025-15480

2.7
    Ubuntu
  • Ubuntu Desktop Provision
Published: April 9, 2026

CVE-2026-39957

2.3
    Lychee
  • Lychee
Published: April 9, 2026

CVE-2026-34945

2.3
    Wasmtime
  • Wasmtime
Published: April 9, 2026

CVE-2026-34988

2.3
    Wasmtime
  • Wasmtime
    Webassembly
Published: April 9, 2026

CVE-2026-5187

2.3
    Wolfssl
  • Wolfcrypt
Published: April 9, 2026

CVE-2026-35617

2.3
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-35624

2.3
    Openclaw
  • Openclaw
Published: April 9, 2026

CVE-2026-5847

2.1
    Code-Projects
  • Movie Ticketing System
Published: April 9, 2026

CVE-2026-5960

2.1
    Code-Projects
  • Patient Record Management System
Published: April 9, 2026

CVE-2026-5772

2.1
    Wolfssl
  • Wolfssl
  • Matchdomainname
Published: April 9, 2026

CVE-2026-5778

2.1
    Wolfssl
  • Packet Sniffer
Published: April 9, 2026

CVE-2026-40072

1.7
    Web3
  • Web3.Py
Published: April 9, 2026

CVE-2026-34983

1.0
    Wasmtime
  • Wasmtime
Published: April 9, 2026

CVE-2025-50228

None
    Jizhicms
  • Jizhicms
Published: April 9, 2026

CVE-2025-70810

None
    Phpbb
  • Phpbb
Published: April 9, 2026

CVE-2025-70811

None
    Phpbb
  • Phpbb
Published: April 9, 2026

CVE-2026-4112

None
    Sonicwall
  • Sma1000
Published: April 9, 2026

CVE-2026-4113

None
    Sonicwall
  • Sma1000
Published: April 9, 2026

CVE-2026-4114

None
    Sonicwall
  • Sma1000
Published: April 9, 2026

CVE-2026-4116

None
    Sonicwall
  • Sma1000
Published: April 9, 2026

CVE-2026-5437

None
    Dicom
  • Dicomstreamreader
  • Dicom
Published: April 9, 2026

CVE-2026-5438

None
    Orthanc
  • Orthanc
Published: April 9, 2026

CVE-2026-5439

None
    Orthanc
  • Orthanc
    Zip
Published: April 9, 2026

CVE-2026-5440

None
    *
  • Http Server
Published: April 9, 2026

CVE-2026-5441

None
    Philips
  • Dicom Imag Decoder
Published: April 9, 2026

CVE-2026-5442

None
    *
  • Dicom Image Decoder
Published: April 9, 2026

CVE-2026-5443

None
    *
  • Dicom
Published: April 9, 2026

CVE-2026-5444

None
    Orthanc
  • Orthanc
Published: April 9, 2026

CVE-2026-5445

None
    *
  • Dicom Image Decoder
Published: April 9, 2026

CVE-2025-70364

None
    Kiamo
  • Kiamo
Published: April 9, 2026

CVE-2026-39398

None
    *
  • *
Published: April 9, 2026

CVE-2026-30479

None
    Osgeo
  • Mapserver
Published: April 9, 2026

CVE-2026-31170

None
    Totolink
  • A3300r
Published: April 9, 2026

CVE-2026-29923

None
    Entech Taiwan
  • Powerstrip
Published: April 9, 2026
Click here to see more Vulnerabilities