CVE Vulnerabilities - 4 April 2026

Fortinet's FortiClientEMS versions 7.4.5 and 7.4.6 have a security weakness that lets hackers run unauthorized code or commands without needing a login. This could allow them to access or modify sensi...

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, SubprocessSandbox in all modes (BASIC, STRICT, NETWORK_ISOLATED) calls subprocess.run() with shell=True and relies solely on string-pa...

Electron apps that share video data between browser and Node.js environments are at risk of being compromised by an attacker who can inject malicious code. To fix, avoid sharing video frames directly ...

An unpatched plugin for WordPress allows anyone to change registration settings without permission. This means that anyone can modify how users register, even if they don't have permission to do so. U...