| CVE-2025-41118 | CVE-2025-41118: Critical Vulnerability in Grafana Pyroscope | CRITICAL | Incorrect Permission | Pyroscope | -- | Apr 15, 2026 |
| CVE-2026-20186 | CVE-2026-20186: Critical Vulnerability in Cisco Identity Services Engine | CRITICAL | Command Injection | — | -- | Apr 15, 2026 |
| CVE-2026-20184 | CVE-2026-20184: Critical Vulnerability in Cisco Webex Services | CRITICAL | Improper Certificate Validation | — | -- | Apr 15, 2026 |
| CVE-2026-20180 | CVE-2026-20180: Critical Vulnerability in Cisco Identity Services Engine | CRITICAL | Path Traversal | — | Yes | Apr 15, 2026 |
| CVE-2026-20147 | CVE-2026-20147: Critical Vulnerability in Cisco ISE and Cisco ISE-PIC | CRITICAL | Command Injection | — | -- | Apr 15, 2026 |
| CVE-2025-15610 | CVE-2025-15610: Critical Vulnerability in OpenText RightFax | CRITICAL | Insecure Deserialization | — | -- | Apr 15, 2026 |
| CVE-2025-14813 | CVE-2025-14813: Critical Vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA | CRITICAL | Broken Cryptography | — | -- | Apr 15, 2026 |
| CVE-2025-70023 | CVE-2025-70023: Critical Vulnerability in transloadit uppy | CRITICAL | Other | — | -- | Apr 14, 2026 |
| CVE-2025-65135 | CVE-2025-65135: Critical Vulnerability in manikandan580 School-management-system | CRITICAL | SQL Injection | — | -- | Apr 14, 2026 |
| CVE-2025-65133 | CVE-2025-65133: Critical Vulnerability in School Management System | CRITICAL | SQL Injection | — | -- | Apr 14, 2026 |
| CVE-2025-63939 | CVE-2025-63939: Critical Vulnerability in anirudhkannan Grocery Store Management System | CRITICAL | SQL Injection | — | -- | Apr 14, 2026 |
| CVE-2025-61260 | CVE-2025-61260: Critical Vulnerability in OpenAI Codex CLI | CRITICAL | Code Injection | — | -- | Apr 14, 2026 |
| CVE-2025-8095 | CVE-2025-8095: Critical Vulnerability in OpenEdge Platform | CRITICAL | Other | — | -- | Apr 14, 2026 |
| CVE-2025-44560 | CVE-2025-44560: Critical Vulnerability in Owntone Server | CRITICAL | Buffer Overflow | — | -- | Apr 10, 2026 |
| CVE-2025-13926 | CVE-2025-13926: Critical Vulnerability in Contemporary Controls BASC 20T | CRITICAL | Other | — | -- | Apr 9, 2026 |
| CVE-2026-28205 | CVE-2026-28205: Critical Vulnerability in OpenPLC Project OpenPLC_V3 Firmware | CRITICAL | Other | Openplc V3 Firmware | -- | Apr 9, 2026 |
| CVE-2026-39987 | CVE-2026-39987: Critical Vulnerability in CoreWeave Marimo | CRITICAL | Missing Authentication | Marimo | Yes | Apr 9, 2026 |
| CVE-2026-39980 | CVE-2026-39980: Critical Vulnerability in Citeum OpenCTI | CRITICAL | Other | Opencti | -- | Apr 9, 2026 |
| CVE-2025-50228 | CVE-2025-50228: Critical Vulnerability in Jizhicms | CRITICAL | SSRF | Jizhicms | -- | Apr 9, 2026 |
| CVE-2025-57735 | CVE-2025-57735: Critical Vulnerability in Apache Airflow | CRITICAL | Other | Airflow | -- | Apr 9, 2026 |