{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 30 March to 5 April 2026 (week 14)","summary":"In the week of 30 March to 5 April 2026, 3 vulnerabilities were newly recorded as exploited in the wild, 3 of them critical. The technology hit most was Apple macOS (1), followed by Citrix NetScaler (1) and Citrix NetScaler ADC (1).","url":"https://junglewise.ai/threats/exploited/2026-03-30","json_url":"https://junglewise.ai/threats/exploited/2026-03-30.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-03-30","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":3,"period":{"end":"2026-04-05","start":"2026-03-30"},"critical":3,"generated_at":"2026-10-02T21:07:00.180862+00:00","technologies":[{"hub":true,"name":"Apple macOS","slug":"macos-tahoe","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/macos-tahoe"},{"hub":true,"name":"Citrix NetScaler","slug":"netscaler","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/netscaler"},{"hub":true,"name":"Citrix NetScaler ADC","slug":"netscaler-adc","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/netscaler-adc"},{"hub":true,"name":"Citrix NetScaler Gateway","slug":"gateway","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/gateway"},{"hub":true,"name":"Google Chrome","slug":"chrome","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/chrome"},{"hub":false,"name":"Google Dawn","slug":"dawn","vulnerabilities":1},{"hub":true,"name":"Linux Kernel","slug":"kernel","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":true,"name":"Microsoft Edge","slug":"edge-chromium-based","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/edge-chromium-based"},{"hub":true,"name":"Microsoft Windows","slug":"windows-","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-"},{"hub":true,"name":"Opera Software Opera-Browser","slug":"opera","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/opera"},{"hub":true,"name":"TrueConf Client","slug":"client","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/client"}],"vulnerabilities":[{"cve":"CVE-2026-3502","cvss":7.8,"epss":0.0258,"slug":"cve-2026-3502-trueconf-client-download-of-code-without-integrity-check","title":"TrueConf Client download of code without integrity check","severity":"critical","exploited":true,"published_at":"2026-04-02T00:00:00+00:00","technologies":[{"hub":true,"name":"TrueConf Client","slug":"client","vendor":{"name":"Trueconf","slug":"trueconf"}}],"exploited_since":"2026-04-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3502-trueconf-client-download-of-code-without-integrity-check"},{"cve":"CVE-2026-5281","cvss":8.8,"epss":0.0504,"slug":"cve-2026-5281-google-chrome-use-after-free-in-dawn","title":"Google Chrome use after free in Dawn","severity":"critical","exploited":true,"published_at":"2026-04-01T05:16:01.44+00:00","technologies":[{"hub":true,"name":"Google Chrome","slug":"chrome","vendor":{"name":"Google","slug":"google"}},{"hub":false,"name":"Google Dawn","slug":"dawn","vendor":{"name":"Google","slug":"google"}},{"hub":true,"name":"Microsoft Edge","slug":"edge-chromium-based","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Linux Kernel","slug":"kernel","vendor":{"name":"Linux","slug":"linux"}},{"hub":true,"name":"Apple macOS","slug":"macos-tahoe","vendor":{"name":"Apple","slug":"apple"}},{"hub":true,"name":"Opera Software Opera-Browser","slug":"opera","vendor":{"name":"Opera Software","slug":"opera-software"}}],"exploited_since":"2026-04-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-5281-google-chrome-use-after-free-in-dawn"},{"cve":"CVE-2026-3055","cvss":9.8,"epss":0.7409,"slug":"cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp","title":"Citrix NetScaler out-of-bounds read in SAML IdP","severity":"critical","exploited":true,"published_at":"2026-03-30T00:00:00+00:00","technologies":[{"hub":true,"name":"Citrix NetScaler","slug":"netscaler","vendor":{"name":"Citrix","slug":"citrix"}},{"hub":true,"name":"Citrix NetScaler ADC","slug":"netscaler-adc","vendor":{"name":"Citrix","slug":"citrix"}},{"hub":true,"name":"Citrix NetScaler Gateway","slug":"gateway","vendor":{"name":"Citrix","slug":"citrix"}}],"exploited_since":"2026-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp"}],"previous":null,"next":{"key":"2026-04-06","top":"Fortinet FortiClient EMS","total":2,"period":{"end":"2026-04-12","start":"2026-04-06"},"critical":2,"url":"https://junglewise.ai/threats/exploited/2026-04-06"}}