# Newly exploited vulnerabilities: week of 30 March to 5 April 2026 (week 14)

Source: https://junglewise.ai/threats/exploited/2026-03-30  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 October 2026, 21:07 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-03-30.json  
License: CC BY 4.0 with a link back

In the week of 30 March to 5 April 2026, 3 vulnerabilities were newly recorded as exploited in the wild, 3 of them critical. The technology hit most was Apple macOS (1), followed by Citrix NetScaler (1) and Citrix NetScaler ADC (1).

## Newly exploited this week

- [CVE-2026-3502: TrueConf Client download of code without integrity check](https://junglewise.ai/threats/cve-2026-3502-trueconf-client-download-of-code-without-integrity-check) (critical, exploited in the wild, CVSS 7.8, exploited since 2 Apr 2026, published 2 Apr 2026)
- [CVE-2026-5281: Google Chrome use after free in Dawn](https://junglewise.ai/threats/cve-2026-5281-google-chrome-use-after-free-in-dawn) (critical, exploited in the wild, CVSS 8.8, exploited since 1 Apr 2026, published 1 Apr 2026)
- [CVE-2026-3055: Citrix NetScaler out-of-bounds read in SAML IdP](https://junglewise.ai/threats/cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp) (critical, exploited in the wild, CVSS 9.8, exploited since 30 Mar 2026, published 30 Mar 2026)

## Technologies hit most

1. [Apple macOS](https://junglewise.ai/threats/technologies/macos-tahoe): 1 vulnerability
2. [Citrix NetScaler](https://junglewise.ai/threats/technologies/netscaler): 1 vulnerability
3. [Citrix NetScaler ADC](https://junglewise.ai/threats/technologies/netscaler-adc): 1 vulnerability
4. [Citrix NetScaler Gateway](https://junglewise.ai/threats/technologies/gateway): 1 vulnerability
5. [Google Chrome](https://junglewise.ai/threats/technologies/chrome): 1 vulnerability
6. Google Dawn: 1 vulnerability
7. [Linux Kernel](https://junglewise.ai/threats/technologies/kernel): 1 vulnerability
8. [Microsoft Edge](https://junglewise.ai/threats/technologies/edge-chromium-based): 1 vulnerability
9. [Microsoft Windows](https://junglewise.ai/threats/technologies/windows-): 1 vulnerability
10. [Opera Software Opera-Browser](https://junglewise.ai/threats/technologies/opera): 1 vulnerability
11. [TrueConf Client](https://junglewise.ai/threats/technologies/client): 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 30 March to 5 April 2026 (week 14)", https://junglewise.ai/threats/exploited/2026-03-30, 2 October 2026.