Statistiche CVE: aprile 2026

🌐 Scopri le cifre chiave delle vulnerabilità pubblicate a aprile 2026 su CVE Find.

🔎 Panoramica

• Numero totale di CVE pubblicate : 5,884 (-6.7% rispetto al mese precedente)
• Vulnerabilità aggiunte al catalogo CISA KEV : 31

📂 Distribuzione per categorie principali

• Authorization problems : 687
• Cross-site Scripting : 597
• Overflow : 497
• SQL Injection : 378
• Memory Corruption : 295
• Directory Traversal : 250

📈 Distribuzione per punteggio CVSS

• Low : 194
• Medium : 2555
• High : 2221
• Critical : 692

🏢 Fornitori più colpiti

1. linux : 523
2. microsoft : 385
3. apple : 190
4. openclaw : 171
5. google : 144

📦 Prodotti più colpiti

1. linux linux_kernel : 523
2. microsoft windows : 206
3. apple macos : 187
4. openclaw openclaw : 171
5. google chrome : 141

⚠️ CVE rilevanti del mese

• CVE-2026-39858 (10 CRITICAL) : Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass vulnerability in Traefik's ...
• CVE-2026-35051 (10 CRITICAL) : Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traefik's ForwardAuth m...
• CVE-2026-36767 (10 CRITICAL) : A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.
• CVE-2026-33453 (10 CRITICAL) : Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component. Apache Camel's camel-coap component is vulner...
• CVE-2026-42043 (10 CRITICAL) : Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any addres...

Esplora tutti i dati in dettaglio su CVE Find.