CVE Tools
Sign in
month report

April 2026

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

April 2026 closed with 6,440 published CVEs. 607 criticals, 31 added to CISA KEV (7 ransomware-linked). linux led volume, mostly via linux. Top weakness class — CWE-79 (620 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
6,440
— MoM— YoY
Severity mix
607 / 2,243
critical / high
KEV added
31
7 ransomware-linked
Nuclei coverage
0.7%
45 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
7.0
n=38
Within 7 days
50.0%
Within 30 days
89.5%
Days → KEV (median)
5
n=10
Detection gap

KEV pressure, no Nuclei coverage

April 2026 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in April 2026

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection22Path Traversal862Missing Authorization78OS Command Injection918SSRF416Use After Free74Injection94Code Injection77Command Injectionlinux56npm8321201025264microsoft2265512microsoft corp2213562openclaw6118сообщество свободного программного обеспечения428163193google57google inc56ооо «ред софт»42621162oracle corporationoracletotolink6984

Most discussed CVEs — April 2026

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1linux—
    379 CVE29 critCVSS 6.8
    KEV 1
    linux (379) · linux kernel (374)
  • 2npm—
    309 CVE
    openclaw (204) · flowise (24) · flowise-components (11)
  • 3microsoft—
    185 CVE15 critCVSS 7.2
    KEV 3
    windows server 2025 (server core installation) (121) · windows server 2025 (121) · windows server 2022, 23h2 edition (server core installation) (119)
  • 4openclaw—
    174 CVE2 critCVSS 6.3
    NEW
    openclaw (174)
  • 5google—
    147 CVE9 critCVSS 7.5
    KEV 1
    chrome (145) · google chrome (85) · android (2)
  • 6oracle—
    102 CVE5 critCVSS 5.9
    mysql server (25) · jdk (9) · oracle java se (9)
  • 7totolink—
    94 CVE63 critCVSS 8.8
    a7100ru (40) · a8000ru (24) · a3300r firmware (21)
  • 8code-projects—
    91 CVECVSS 5.8
    simple laundry system (14) · vehicle showroom management system (12) · simple it discussion forum (10)
  • 9tenda—
    87 CVE6 critCVSS 8.4
    f456 (27) · f456 firmware (22) · f451 (18)
  • 10apache software foundation—
    86 CVE11 critCVSS 7.3
    KEV 1Nuclei 4
    apache airflow (14) · apache tomcat (10) · apache thrift (8)
  • 11apache—
    84 CVE11 critCVSS 7.3
    KEV 1Nuclei 4
    airflow (15) · tomcat (10) · camel (9)
  • 12redhat—
    73 CVE3 critCVSS 6.6
    KEV 1Nuclei 1
    red hat enterprise linux 9 (38) · red hat enterprise linux 8 (37) · red hat enterprise linux 7 (32)
  • 13go—
    62 CVE
    github.com/lin-snow/ech0 (7) · github.com/patrickhener/goshs/v2 (6) · github.com/kyverno/kyverno (6)
  • 14pypi—
    59 CVE
    praisonai (8) · praisonaiagents (7) · openssl-encrypt (5)
  • 15adobe—
    57 CVE7 critCVSS 7.3
    KEV 1
    framemaker (11) · adobe framemaker (11) · adobe indesign (9)
  • 16packagist—
    57 CVE
    wwbn/avideo (20) · froxlor/froxlor (6) · pocketmine/pocketmine-mp (5)
  • 17sourcecodester—
    54 CVECVSS 5.6
    pizzafy ecommerce system (21) · pharmacy sales and inventory system (20) · record management system (2)
  • 18dlink—
    52 CVE1 critCVSS 6.9
    di-8003 firmware (28) · di-8003 (25) · dir-605l firmware (6)
  • 19mozilla—
    52 CVE8 critCVSS 7.6
    firefox (51) · thunderbird (50) · firefox esr (3)
  • 20ibm—
    48 CVE1 critCVSS 6.3
    verify identity access (10) · verify identity access container (10) · security verify access container (10)
  • 21dell—
    45 CVECVSS 5.7
    data domain operating system (27) · powerprotect data domain (24) · powerprotect dp series appliance (17)
  • 22praison—
    44 CVE14 critCVSS 8.1
    NEW
    praisonai (38) · praisonaiagents (13)
  • 23uutils—
    44 CVECVSS 4.9
    NEW
    coreutils (44)
  • 24wireshark—
    42 CVECVSS 5.7
    NEW
    wireshark (42)
  • 25wireshark foundation—
    42 CVECVSS 5.7
    NEW
    wireshark (42)
  • 26churchcrm—
    38 CVE4 critCVSS 7.9
    NEWNuclei 1
    crm (38) · churchcrm (29)
  • 27samsung—
    38 CVE5 critCVSS 8.1
    exynos 980 firmware (11) · exynos 850 firmware (11) · exynos w920 firmware (11)
  • 28endian—
    34 CVECVSS 6.9
    NEW
    endian firewall (34) · firewall community (34)
  • 29сообщество свободного программного обеспечения—
    33 CVE5 critCVSS 7.4
    Nuclei 2
    debian gnu/linux (10) · linux (9) · cups (5)
  • 30cisco—
    32 CVE6 critCVSS 6.6
    PoC 32
    cisco unified computing system (standalone) (10) · integrated management controller (10) · enterprise nfv infrastructure software (9)
  • 31chamilo—
    31 CVE3 critCVSS 7.2
    NEW
    chamilo lms (31) · chamilo-lms (31)
  • 32wwbn—
    31 CVE3 critCVSS 6.6
    NEW
    avideo (31)
  • 33fortinet—
    28 CVE3 critCVSS 6.2
    KEV 1Nuclei 2
    fortisoar (8) · fortisoar paas (8) · fortisoar on-premise (8)
  • 34juniper networks—
    27 CVE1 critCVSS 6.9
    PoC 27
    junos os (19) · junos os evolved (9) · jsi lwc (2)
  • 35vmware—
    26 CVE1 critCVSS 6.0
    KEV 1
    spring boot (8) · spring security (6) · spring ai (5)
  • 36fortinet inc.—
    24 CVE3 critCVSS 6.1
    KEV 1Nuclei 2
    fortisoar on-premise (7) · fortisoar paas (7) · fortisandbox (6)
  • 37itsourcecode—
    24 CVE4 critCVSS 7.1
    construction management system (12) · online student enrollment system (4) · online enrollment system (2)
  • 38d-link—
    23 CVE1 critCVSS 6.2
    dir-605l (6) · dir-513 (3) · dns-321 (2)
  • 39wolfssl—
    23 CVE5 critCVSS 7.2
    wolfssl (22) · wolfssh (1)
  • 40ci4-cms-erp—
    22 CVE11 critCVSS 7.9
    NEW
    ci4ms (22)
  • 41freescout-help-desk—
    22 CVE4 critCVSS 7.0
    NEW
    freescout (22)
  • 42gitlab—
    22 CVECVSS 5.8
    gitlab (22)
  • 43powerdns—
    22 CVECVSS 5.3
    NEW
    dnsdist (11) · recursor (9) · authoritative (6)
  • 44amazon—
    21 CVECVSS 7.1
    NEWKEV 1
    athena odbc (6) · amazon athena odbc driver (6) · freertos-plus-tcp (5)
  • 45huawei—
    20 CVE1 critCVSS 5.7
    harmonyos (20) · emui (5)
  • 46spring—
    20 CVE1 critCVSS 6.1
    NEW
    spring boot (8) · spring security (6) · spring ai (4)
  • 47flowiseai—
    19 CVE6 critCVSS 8.5
    NEW
    flowise (19) · flowise-components (6)
  • 48juniper—
    19 CVECVSS 6.7
    PoC 19
    junos (17) · junos os evolved (8)
  • 49phpgurukul—
    19 CVECVSS 6.1
    online shopping portal project (9) · news portal project (4) · online course registration (2)
  • 50aws—
    18 CVE1 critCVSS 7.1
    NEW
    freertos-plus-tcp (5) · tough (3) · tuftool (3)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79620—
2CWE-89391—
3CWE-22292—
4CWE-862282—
5CWE-78236—
6CWE-918235—
7CWE-416215—
8CWE-74210—
9CWE-94206—
10CWE-77189—
11CWE-284188—
12CWE-863157—
13CWE-120143—
14CWE-119140—
15CWE-125140—
16CWE-787140—
17CWE-200130—
18CWE-639128—
19CWE-20122—
20CWE-306114—

Sectors

Solution categories ranked by distinct CVE count this period.

  • OSS Libraries1,120 CVE
    85 crit232 vendorsCVSS 9.6
    coreutils (44) · electron (36) · wolfssl (23)
  • Web & CMS Plugins1,025 CVE
    119 crit6 KEV446 vendorsCVSS 7.6
    pizzafy ecommerce system (21) · directus (20) · pharmacy sales and inventory system (20)
  • Operating Systems761 CVE
    154 crit91 KEV48 vendorsCVSS 8.8
    linux (388) · linux kernel (374) · red hat enterprise linux 9 (38)
  • Enterprise Software676 CVE
    99 crit7 KEV168 vendorsCVSS 8.0
    freescout (28) · data domain operating system (27) · powerprotect data domain (24)
  • Networking Infrastructure585 CVE
    129 crit6 KEV83 vendorsCVSS 7.7
    a7100ru (40) · di-8003 firmware (28) · f456 (27)
  • Security Products423 CVE
    35 crit1 KEV91 vendorsCVSS 7.6
    openclaw (174) · secure access (20) · acronis true image (4)
  • AI / ML249 CVE
    78 crit2 KEV96 vendorsCVSS 8.8
    praisonai (72) · praisonaiagents (22) · flowise (19)
  • Consumer Software227 CVE
    70 crit7 KEV63 vendorsCVSS 8.1
    adobe framemaker (22) · adobe connect (17) · foxit pdf editor (14)
  • Mobile Apps225 CVE
    93 crit2 KEV11 vendorsCVSS 8.3
    chrome (145) · google chrome (85) · harmonyos (20)
  • Cloud & SaaS216 CVE
    25 crit6 KEV89 vendorsCVSS 7.3
    vikunja (11) · budibase (7) · immich (6)
  • DevTools & CI171 CVE
    21 crit49 vendorsCVSS 8.1
    wireshark (42) · radare2 (11) · proteus (8)
  • Databases143 CVE
    29 crit21 vendorsCVSS 9.3
    mysql server (50) · firebird (9) · jdk (9)
  • ICS / OT / IoT128 CVE
    121 crit52 vendorsCVSS 8.2
    x3050 (11) · x3500 firmware (10) · anviz cx7 firmware (9)
  • Hardware Firmware96 CVE
    10 crit31 vendorsCVSS 7.8
    triton inference server (5) · coolercontrold (4) · mediatek chipset (4)
  • Communications89 CVE
    11 crit40 vendorsCVSS 8.3
    secure email gateway (14) · webmail (14) · mailcow-dockerized (6)
  • Unclassified396 CVE
    54 crit269 vendorsCVSS 6.8
    goshs (22) · prompts.chat (10) · devolutions server (8)
Weakness × Sector

Which weaknesses hit which solution categories in April 2026

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection22Path Traversal862Missing Authorization78OS Command Injection918SSRF416Use After Free74Injection94Code Injection77Command InjectionOSS Libraries42179248307020153117Web & CMS Plugins2781615213275194736Operating Systems84112131113954Enterprise Software12412221362525460286Networking Infrastructure4541751061278116Consumer Software26412961086261Security Products20612297123AI / ML9104281835132612Cloud & SaaS25161316231116ICS / OT / IoT14399141