⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

🗓️ 13 Apr 2026 13:01:00Reported by The Hacker NewsType

Adobe Acrobat Reader zero-day in PDFs under exploit; emergency updates patch prototype pollution.

Reporter	Title	Published	Views	Family All 2042
Vulnrichment	CVE-2026-23696 Windmill < 1.603.3 File Ownership Handling SQLi RCE	7 Apr 202616:50	–	vulnrichment
Vulnrichment	CVE-2026-23869	8 Apr 202619:11	–	vulnrichment
Vulnrichment	CVE-2026-29059 Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly	6 Mar 202607:11	–	vulnrichment
Vulnrichment	CVE-2026-30815 OS Command Injection Vulnerability in OpenVPN Module in TP-Link AX53	8 Apr 202617:52	–	vulnrichment
Vulnrichment	CVE-2026-30818 OS Command Injection Vulnerability in dnsmasq Module in TP-Link AX53	8 Apr 202617:54	–	vulnrichment
Vulnrichment	CVE-2026-31790 Incorrect Failure Handling in RSA KEM RSASVE Encapsulation	7 Apr 202622:00	–	vulnrichment
Vulnrichment	CVE-2026-32922 OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate	29 Mar 202612:44	–	vulnrichment
Vulnrichment	CVE-2026-33579 OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval	31 Mar 202614:10	–	vulnrichment
Vulnrichment	CVE-2026-33784 JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access	9 Apr 202621:36	–	vulnrichment
Vulnrichment	CVE-2026-34040 Moby: AuthZ plugin bypass with oversized request body	31 Mar 202601:36	–	vulnrichment

14 Apr 2026 07:53Current

8High risk

Vulners AI Score8

CVSS 3.19.8 - 10

CVSS 49.4

CVSS 37.3

EPSS0.97408

SSVC