CVEs published April 26, 2026

49 CVEs1 criticalUpdated October 22, 2026Source: NVD

77,396 CVEs in 2026

MonWedFri JanFebMarAprMayJunJulAugSepOct
Apr 26
Totolink A8000RU9.8CVE-2026-7037

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521.

Apr 26
Tenda F4568.8CVE-2026-7057

A flaw has been found in Tenda F456 1.0.0.5.

Apr 26
Tenda F4568.8CVE-2026-7056

A vulnerability was detected in Tenda F456 1.0.0.5.

Apr 26
Tenda F4568.8CVE-2026-7055

A security vulnerability has been detected in Tenda F456 1.0.0.5.

Apr 26
Tenda F4568.8CVE-2026-7054

A weakness has been identified in Tenda F456 1.0.0.5.

Apr 26
Tenda F4568.8CVE-2026-7053

A security flaw has been discovered in Tenda F456 1.0.0.5.

Apr 26
Tenda FH12028.8CVE-2026-7035

A vulnerability was determined in Tenda FH1202 1.2.0.14.

Apr 26
Tenda FH12028.8CVE-2026-7034

A vulnerability was found in Tenda FH1202 1.2.0.14(408).

Apr 26
Tenda F4568.8CVE-2026-7033

A vulnerability has been found in Tenda F456 1.0.0.5.

Apr 26
Tenda F4568.8CVE-2026-7032

A flaw has been found in Tenda F456 1.0.0.5.

Apr 26
Tenda F4568.8CVE-2026-7031

A vulnerability was detected in Tenda F456 1.0.0.5.

Apr 26
Tenda F4568.8CVE-2026-7030

A security vulnerability has been detected in Tenda F456 1.0.0.5.

Apr 26
Tenda F4568.8CVE-2026-7029

A weakness has been identified in Tenda F456 1.0.0.5.

Apr 26
Tenda F4568.8CVE-2026-7019

A vulnerability was identified in Tenda F456 1.0.0.5.

Apr 26
tufantunc ssh-mcp7.8CVE-2026-7039

A security vulnerability has been detected in tufantunc ssh-mcp up to 1.5.0.

Apr 26
Firefox7.5CVE-2026-6786

Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149.

Apr 26
Firefox7.5CVE-2026-6785

Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149.

Apr 26
AgentDeskAI browser-tools-mcp7.3CVE-2026-7064

A flaw has been found in AgentDeskAI browser-tools-mcp up to 1.2.0.

Apr 26
code-projects Employee Management System7.3CVE-2026-7063

A vulnerability was detected in code-projects Employee Management System 1.0.

Apr 26
Intina47 context-sync7.3CVE-2026-7062

A security vulnerability has been detected in Intina47 context-sync up to 2.0.0.

Apr 26
Toowiredd chatgpt-mcp-server7.3CVE-2026-7061

A weakness has been identified in Toowiredd chatgpt-mcp-server up to 0.1.0.

Apr 26
liyupi yu-picture7.3CVE-2026-7060

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec.

Apr 26
666ghj MiroFish7.3CVE-2026-7058

A vulnerability has been found in 666ghj MiroFish up to 0.1.2.

Apr 26
666ghj MiroFish7.3CVE-2026-7042

A flaw has been found in 666ghj MiroFish up to 0.1.2.

Apr 26
Tenda i97.3CVE-2026-7036

A vulnerability was identified in Tenda i9 1.0.0.5(2204).

Apr 26
Typecho7.3CVE-2026-7025

A vulnerability was found in Typecho up to 1.3.0.

Apr 26
SmythOS sre7.3CVE-2026-7022

A security vulnerability has been detected in SmythOS sre up to 0.0.15.

Apr 26
Technitium DNS Server7.2CVE-2026-42255

Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.

Apr 26
baomidou dynamic-datasource6.3CVE-2026-7045

A vulnerability was determined in baomidou dynamic-datasource 2.5.0.

Apr 26
GreenCMS6.3CVE-2026-7044

A vulnerability was found in GreenCMS up to 2.3.

Apr 26
GreenCMS6.3CVE-2026-7043

A vulnerability has been found in GreenCMS up to 2.3.

Apr 26
ByteDance coze-studio6.3CVE-2026-7023

A vulnerability was detected in ByteDance coze-studio up to 0.5.1.

Apr 26
Datavane Datavines5.6CVE-2026-7018

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71.

Apr 26
rawchen sims5.4CVE-2026-7024

A flaw has been found in rawchen sims up to 004f783b1db5ecdfad81c8fdc3b34171211112de.

Apr 26
666ghj MiroFish5.3CVE-2026-7059

A vulnerability was found in 666ghj MiroFish up to 0.1.2.

Apr 26
CodeAstro Online Job Portal4.7CVE-2026-7028

A security flaw has been discovered in CodeAstro Online Job Portal 1.0.

Apr 26
D-Link DGS-34204.5CVE-2026-7026

A vulnerability was determined in D-Link DGS-3420 1.50.018.

Apr 26
CVE-2026-422544.0

Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response.

Apr 26
666ghj MiroFish3.7CVE-2026-7041

A vulnerability was detected in 666ghj MiroFish up to 0.1.2.

Apr 26
Ollama3.7CVE-2026-7020

A security flaw has been discovered in Ollama up to 0.20.2.

Apr 26
SmythOS sre3.5CVE-2026-7021

A weakness has been identified in SmythOS sre up to 0.0.15.

Apr 26
tufantunc ssh-mcp3.3CVE-2026-7038

A weakness has been identified in tufantunc ssh-mcp up to 1.5.0.

Apr 26
CVE-2026-70272.4

A vulnerability was identified in D-Link DSL-2740R EU_01.15.

Apr 26
MaxSite CMS2.4CVE-2026-7016

A vulnerability was found in MaxSite CMS up to 109.3.

Apr 26
MaxSite CMS2.4CVE-2026-7015

A vulnerability has been found in MaxSite CMS up to 109.3.

Apr 26
MaxSite CMS2.4CVE-2026-7014

A flaw has been found in MaxSite CMS up to 109.3.

Apr 26
MaxSite CMS2.4CVE-2026-7013

A security vulnerability has been detected in MaxSite CMS up to 109.3.

Apr 26
MaxSite CMS2.4CVE-2026-7012

A vulnerability was detected in MaxSite CMS up to 109.3.

Apr 26
MaxSite CMS2.4CVE-2026-7011

A weakness has been identified in MaxSite CMS up to 109.3.