The month in security: 2026-04

• CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared)due 2026-05-03
• CVE-2024-57726SimpleHelp SimpleHelpdue 2026-05-08
• CVE-2023-21529Microsoft Exchange Serverdue 2026-04-27
• CVE-2024-1708ConnectWise ScreenConnectdue 2026-05-12
• CVE-2023-27351PaperCut NG/MFdue 2026-05-04
• CVE-2024-57728SimpleHelp SimpleHelpdue 2026-05-08
• CVE-2026-33825Microsoft Defenderdue 2026-05-06
• CVE-2024-27199JetBrains TeamCitydue 2026-05-04
• CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS)due 2026-04-23
• CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM)due 2026-04-11
• CVE-2026-21643Fortinet FortiClient EMSdue 2026-04-16
• CVE-2026-35616Fortinet FortiClient EMSdue 2026-04-09
• CVE-2026-39987Marimo Marimodue 2026-05-07
• CVE-2026-34197Apache ActiveMQdue 2026-04-30
• CVE-2024-7399Samsung MagicINFO 9 Serverdue 2026-05-08
• CVE-2009-0238Microsoft Officedue 2026-04-28
• CVE-2026-5281Google Dawndue 2026-04-15
• CVE-2025-32975Quest KACE Systems Management Appliance (SMA)due 2026-05-04
• CVE-2025-29635D-Link DIR-823Xdue 2026-05-08
• CVE-2026-34621Adobe Acrobat and Readerdue 2026-04-27
• CVE-2020-9715Adobe Acrobatdue 2026-04-27
• CVE-2025-2749Kentico Kentico Xperiencedue 2026-05-04
• CVE-2012-1854Microsoft Visual Basic for Applications (VBA)due 2026-04-27
• CVE-2023-36424Microsoft Windowsdue 2026-04-27
• CVE-2026-20122Cisco Catalyst SD-WAN Mangerdue 2026-04-23

Claims are unverified leak-site posts (RansomLook, CC BY 4.0).