| CVE-2026-31550 | CVE-2026-31550: Medium Vulnerability in Linux Kernel | MEDIUM | Unknown | Linux Kernel | -- | Apr 24, 2026 |
| CVE-2025-61872 | CVE-2025-61872: Medium Vulnerability in Mahara | MEDIUM | XSS | — | -- | Apr 24, 2026 |
| CVE-2025-62233 | CVE-2025-62233: Medium Vulnerability in Apache DolphinScheduler | MEDIUM | Insecure Deserialization | Dolphinscheduler | -- | Apr 24, 2026 |
| CVE-2025-11762 | CVE-2025-11762: Medium Vulnerability in HubSpot All-In-One Marketing Plugin for WordPress | MEDIUM | Missing Authorization | — | -- | Apr 24, 2026 |
| CVE-2026-32870 | CVE-2026-32870: Medium Vulnerability in getkirby Kirby | MEDIUM | Other | Kirby | -- | Apr 24, 2026 |
| CVE-2026-41360 | CVE-2026-41360: Medium Vulnerability in OpenClaw | MEDIUM | TOCTOU | Openclaw | -- | Apr 23, 2026 |
| CVE-2026-41358 | CVE-2026-41358: Low Vulnerability in OpenClaw | LOW | Other | Openclaw | -- | Apr 23, 2026 |
| CVE-2026-41355 | CVE-2026-41355: Medium Vulnerability in Openclaw OpenShell | MEDIUM | Other | Openclaw | -- | Apr 23, 2026 |
| CVE-2026-41354 | CVE-2026-41354: Medium Vulnerability in OpenClaw | MEDIUM | Other | Openclaw | -- | Apr 23, 2026 |
| CVE-2026-41353 | CVE-2026-41353: High Vulnerability in OpenClaw | HIGH | Other | Openclaw | -- | Apr 23, 2026 |
| CVE-2026-32210 | CVE-2026-32210: Critical Vulnerability in Microsoft Dynamics 365 (Online) | CRITICAL | SSRF | — | -- | Apr 23, 2026 |
| CVE-2026-26210 | CVE-2026-26210: Critical Vulnerability in KTransformers | CRITICAL | Insecure Deserialization | — | -- | Apr 23, 2026 |
| CVE-2026-26150 | CVE-2026-26150: High Vulnerability in Microsoft Purview | HIGH | SSRF | Purview Ediscovery | -- | Apr 23, 2026 |
| CVE-2026-41270 | CVE-2026-41270: High Vulnerability in FlowiseAI Flowise | HIGH | Access Control | Flowise | -- | Apr 23, 2026 |
| CVE-2026-31160 | CVE-2026-31160: Medium Vulnerability in ToToLink A3300R Firmware | MEDIUM | Command Injection | A3300r Firmware | -- | Apr 23, 2026 |
| CVE-2025-62373 | CVE-2025-62373: Critical Vulnerability in Pipecat | CRITICAL | Insecure Deserialization | Pipecat | -- | Apr 23, 2026 |
| CVE-2025-50229 | CVE-2025-50229: Critical Vulnerability in Jizhicms | CRITICAL | SQL Injection | Jizhicms | -- | Apr 23, 2026 |
| CVE-2025-70994 | CVE-2025-70994: High Vulnerability in Yadea T5 Electric Bicycles | HIGH | Other | — | Yes | Apr 23, 2026 |
| CVE-2026-39440 | CVE-2026-39440: Critical Vulnerability in Funnelforms LLC FunnelFormsPro | CRITICAL | Code Injection | — | -- | Apr 23, 2026 |
| CVE-2025-66286 | CVE-2025-66286: Medium Vulnerability in WebKitGTK and WPE WebKit | MEDIUM | Other | — | -- | Apr 23, 2026 |