Monitor vulnerabilities that affect your stack.
Sign up free to get alerts when software you use is affected.
CVE Vulnerabilities - 8 April 2026
RSS704 vulnerabilities published on 8 April 2026
Severity:
Adobe Acrobat and Reader: Unauthorized File Access via Malicious PDF
MINI-mcpw-9g8q-vc62
Adobe Acrobat and Reader may allow an attacker to access sensitive files on your computer if they trick you into opening a malicious PDF. This could potentially lead to data theft or unauthorized chan...
MINI-j33r-r6cc-8q8r
MINI-j33r-r6cc-8q8r
Joomla Content Management System: Unauthorized File Access
MINI-x9cj-p95q-9gc3
A vulnerability in Joomla's Content Management System allows attackers to access files on the server without permission. This can lead to sensitive information being stolen or modified. To fix the iss...
MINI-2g4v-jmmf-2wc5
MINI-2g4v-jmmf-2wc5
MINI-73hr-2h4q-8735
MINI-73hr-2h4q-8735
MINI-p3qw-g7x6-58qr
MINI-p3qw-g7x6-58qr
MINI-j2p8-348f-7cp4
MINI-j2p8-348f-7cp4
Linux Kernel Update Fixes Multiple Security Risks in SUSE Linux Enterprise 15 SP5
SUSE-SU-2026:1222-1
This update addresses six security risks in the Linux Kernel for SUSE Linux Enterprise 15 SP5. If left unpatched, these vulnerabilities could allow attackers to disrupt network services, gain unauthor...
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Microsoft Office PowerPoint has a security issue that could allow an attacker to take control of your computer. This could happen if you open a maliciously crafted .ppt or .pptx file. To stay safe, ma...
CGA-8pp2-pqph-8rg4
CGA-8pp2-pqph-8rg4
IframeConsent element allows malicious JavaScript to run
DRUPAL-CONTRIB-2026-032
The IframeConsent element in a certain software has a security flaw that could allow an attacker to inject malicious JavaScript code if they have the right permissions. This could potentially allow th...
SUSE Linux Enterprise 12 SP5 Kernel Update Fixes Multiple Security Risks
SUSE-SU-2026:1221-1
This update fixes 7 security issues in the SUSE Linux Enterprise 12 SP5 kernel. These issues, if left unaddressed, could allow an attacker to take control of or disrupt Linux system services. To ensur...
python-poetry allows malicious wheel files to write to disk
SUSE-SU-2026:1220-1
A security update for python-poetry fixes a vulnerability that could let an attacker write malicious files to your computer if they trick you into installing a specially crafted software package. This...
Ubuntu and Debian Linux Systems: Unauthenticated File Access Risk
DEBIAN-CVE-2026-31411
A weakness in the Debian and Ubuntu package managers allows an attacker to gain access to sensitive files without a password. This could be exploited by an attacker to steal or modify important system...
CGA-p88r-6hfx-gqr6
CGA-p88r-6hfx-gqr6
CGA-p88r-6hfx-gqr6
Adobe Acrobat Used to Open Malicious PDF Files
CGA-hxf2-mqr8-f3qr
Adobe Acrobat has a vulnerability that allows attackers to execute code when a user opens a specially crafted PDF file. This means that users who open these files could have their computers taken over...
CGA-hxf2-mqr8-f3qr
CGA-3jhq-x26v-672q
CGA-3jhq-x26v-672q
CGA-3jhq-x26v-672q
Linux Kernel: Malicious Code Can Crash System via ATM
CVE-2026-31411
A security issue in the Linux kernel's ATM handling code could allow a malicious program to crash the system. This can happen if a program tricks the kernel into using a fake address. To fix this, the...
Old Vim versions let hackers control your files through a connected server
DEBIAN-CVE-2026-39881
Using older versions of Vim, a hacker could access and manipulate your files if they control the server you're connected to. This is fixed in Vim version 9.2.0316, so update to the latest version to s...
CVE Removed by Mistake: No Security Issue Exists
CVE-2026-4402
This entry was mistakenly created and has been removed. No security issue actually exists. No action is needed.
Rootio-glibc on Debian 13: Remote Code Execution Risk
ROOT-OS-DEBIAN-13-CVE-2026-4437
A patch has been released for a vulnerability in the rootio-glibc package on Debian 13. If left unpatched, an attacker could potentially take control of the system. Update to a fixed version of rootio...
rootio-glibc: Potential Data Exposure on Root Devices
ROOT-OS-DEBIAN-13-CVE-2026-4046
A vulnerability in the rootio-glibc package on Root devices could allow unauthorized access to sensitive data. This issue has been fixed in updated versions of the software, so it's essential to apply...