CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

UEFI Secure Boot Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix

Missing cryptographic step in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

UEFI Secure Boot Security Feature Bypass Vulnerability

Improper access control in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

April 14, 2026—KB5082126 (Monthly Rollup)

None None...

April 14, 2026—KB5082123 (OS Build 17763.8644)

None None...

April 14, 2026—KB5082200 (OS Builds 19045.7184 and 19044.7184)

None None...

April 14, 2026—KB5082198 (OS Build 14393.9060)

None None...

KB5082806: Cumulative security update for Internet Explorer: April 14, 2026

None None...

April 14, 2026—KB5082060 (OS Build 25398.2274)

None None...

April 14, 2026—KB5082063(OS Build 26100.32690)

None None...

April 14, 2026—KB5082127 (Monthly Rollup)

None None...

April 14, 2026—KB5082142 (OS Build 20348.5020)

None None...

April 14, 2026—KB5083768 (OS Build 28000.1836)

None None...

April 14, 2026—KB5083769 (OS Builds 26200.8246 and 26100.8246)

None None...

April 14, 2026—KB5082052 (OS Build 22631.6936)

None None...

PoC

Fabricked: Breaking AMD SEV-SNP via Infinity Fabric !CVE-20...

Malicious code in cjs-biginteger (npm)

big.js typosquat campaign - SSH backdoor implantation, credential and crypto wallet theft --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad18a38aa59b5edbd05dbdf229f4d013446f970fe18b41e54ffc1c24a926d2bd The package cjs-biginteger was found to contain malicious...

Malicious code in bjs-lint-builders (npm)

big.js typosquat campaign - SSH backdoor implantation, credential and crypto wallet theft --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ff31ee3bf86e4aecefc3ed40ae1647028f7fd482df4c617731ebfd75cad027 The package bjs-lint-builders was found to contain maliciou...

MAL-2026-2880 Malicious code in bjs-lint-builder (npm)

big.js typosquat campaign - SSH backdoor implantation, credential and crypto wallet theft --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4578f36842f930e2a5e6a4129c10eb87bf1005fe8cbdf05ffb9fdc2fe43ad8 The package bjs-lint-builder was found to contain malicious...