⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

🗓️ 13 Apr 2026 13:01:00Reported by The Hacker NewsType

Adobe Acrobat Reader zero-day in PDFs under exploit; emergency updates patch prototype pollution.

Reporter	Title	Published	Views	Family All 2039
Vulnrichment	CVE-2026-30815 OS Command Injection Vulnerability in OpenVPN Module in TP-Link AX53	8 Apr 202617:52	–	vulnrichment
Vulnrichment	CVE-2026-30818 OS Command Injection Vulnerability in dnsmasq Module in TP-Link AX53	8 Apr 202617:54	–	vulnrichment
Vulnrichment	CVE-2026-31790 Incorrect Failure Handling in RSA KEM RSASVE Encapsulation	7 Apr 202622:00	–	vulnrichment
Vulnrichment	CVE-2026-32922 OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate	29 Mar 202612:44	–	vulnrichment
Vulnrichment	CVE-2026-33579 OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval	31 Mar 202614:10	–	vulnrichment
Vulnrichment	CVE-2026-33784 JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access	9 Apr 202621:36	–	vulnrichment
Vulnrichment	CVE-2026-34040 Moby: AuthZ plugin bypass with oversized request body	31 Mar 202601:36	–	vulnrichment
Vulnrichment	CVE-2026-34078 Flatpak has a complete sandbox escape leading to host file access and code execution in the host context	7 Apr 202621:27	–	vulnrichment
Vulnrichment	CVE-2026-34197 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans	7 Apr 202607:50	–	vulnrichment
Vulnrichment	CVE-2026-34621 Acrobat Reader \| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)	11 Apr 202606:45	–	vulnrichment

14 Apr 2026 07:53Current

8High risk

Vulners AI Score8

CVSS 3.19.8 - 10

CVSS 49.4

CVSS 37.3

EPSS0.97408

SSVC