CVEs published April 12, 2026

34 CVEs7 criticalUpdated October 22, 2026Source: NVD

77,396 CVEs in 2026

MonWedFri JanFebMarAprMayJunJulAugSepOct
Apr 12
Totolink A7100RU9.8CVE-2026-6132

A vulnerability was determined in Totolink A7100RU 7.4cu.2313_b20191024.

Apr 12
Totolink A7100RU9.8CVE-2026-6131

A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024.

Apr 12
Totolink A7100RU9.8CVE-2026-6116

A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024.

Apr 12
Totolink A7100RU9.8CVE-2026-6115

A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024.

Apr 12
Totolink A7100RU9.8CVE-2026-6114

A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024.

Apr 12
Totolink A7100RU9.8CVE-2026-6113

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.

Apr 12
Totolink A7100RU9.8CVE-2026-6112

A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024.

Apr 12
Tenda F4518.8CVE-2026-6134

A security flaw has been discovered in Tenda F451 1.0.0.7_cn_svn7958.

Apr 12
Tenda F4518.8CVE-2026-6133

A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958.

Apr 12
Tenda F4518.8CVE-2026-6124

A vulnerability was determined in Tenda F451 1.0.0.7.

Apr 12
Tenda F4518.8CVE-2026-6123

A vulnerability was found in Tenda F451 1.0.0.7.

Apr 12
Tenda F4518.8CVE-2026-6122

A vulnerability has been found in Tenda F451 1.0.0.7.

Apr 12
Tenda F4518.8CVE-2026-6121

A flaw has been found in Tenda F451 1.0.0.7.

Apr 12
Tenda F4518.8CVE-2026-6120

A vulnerability was detected in Tenda F451 1.0.0.7.

Apr 12
Mesa8.1CVE-2026-40393

Out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.

Apr 12
CVE-2026-314137.8

When dst has signed range [-1, 0], it forks the verifier state: the pushed path gets dst = 0, the current path gets dst = -1.

Apr 12
chatboxai chatbox7.3CVE-2026-6130

A flaw has been found in chatboxai chatbox up to 1.20.0.

Apr 12
zhayujie chatgpt-on-wechat CowAgent7.3CVE-2026-6129

A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4.

Apr 12
zhayujie chatgpt-on-wechat CowAgent7.3CVE-2026-6126

A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4.

Apr 12
FoundationAgents MetaGPT7.3CVE-2026-6110

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1.

Apr 12
Dromara warm-flow6.3CVE-2026-6125

A security flaw has been discovered in Dromara warm-flow up to 1.8.4.

Apr 12
AstrBotDevs AstrBot6.3CVE-2026-6119

A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1.

Apr 12
AstrBotDevs AstrBot6.3CVE-2026-6118

A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1.

Apr 12
AstrBotDevs AstrBot6.3CVE-2026-6117

A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1.

Apr 12
FoundationAgents MetaGPT6.3CVE-2026-6111

A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1.

Apr 12
1Panel-dev MaxKB6.3CVE-2026-6108

A vulnerability was found in 1Panel-dev MaxKB up to 2.6.1.

Apr 12
parisneo/lollms6.1CVE-2026-1116

A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms prior to version 2.2.0.

Apr 12
FoundationAgents MetaGPT4.3CVE-2026-6109

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.

Apr 12
Varnish Cache4.0CVE-2026-40396

Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger.

Apr 12
Varnish Enterprise4.0CVE-2026-40395

Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL.

Apr 12
Varnish Cache4.0CVE-2026-40394

Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data.

Apr 12
libexif4.0CVE-2026-40386

An integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

Apr 12
libexif4.0CVE-2026-40385

An unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks.

Apr 12
1Panel-dev MaxKB3.5CVE-2026-6107

A flaw has been found in 1Panel-dev MaxKB up to 2.6.1.