{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 6 to 12 April 2026 (week 15)","summary":"In the week of 6 to 12 April 2026, 2 vulnerabilities were newly recorded as exploited in the wild, 2 of them critical. The technology hit most was Fortinet FortiClient EMS (1), followed by Fortinet FortiClientEMS (1) and Ivanti Endpoint Manager Mobile (1).","url":"https://junglewise.ai/threats/exploited/2026-04-06","json_url":"https://junglewise.ai/threats/exploited/2026-04-06.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-04-06","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":2,"period":{"end":"2026-04-12","start":"2026-04-06"},"critical":2,"generated_at":"2026-10-02T21:07:00.180862+00:00","technologies":[{"hub":true,"name":"Fortinet FortiClient EMS","slug":"forticlient-ems","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/forticlient-ems"},{"hub":false,"name":"Fortinet FortiClientEMS","slug":"forticlientems","vulnerabilities":1},{"hub":true,"name":"Ivanti Endpoint Manager Mobile","slug":"endpoint-manager-mobile","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/endpoint-manager-mobile"},{"hub":true,"name":"Ivanti Endpoint Manager Mobile (EPMM)","slug":"endpoint-manager-mobile-epmm","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/endpoint-manager-mobile-epmm"},{"hub":true,"name":"Ivanti MobileIron Core","slug":"mobileiron-core","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/mobileiron-core"}],"vulnerabilities":[{"cve":"CVE-2026-1340","cvss":9.8,"epss":0.6573,"slug":"cve-2026-1340-ivanti-endpoint-manager-mobile-code-injection","title":"Ivanti Endpoint Manager Mobile code injection","severity":"critical","exploited":true,"published_at":"2026-04-08T00:00:00+00:00","technologies":[{"hub":true,"name":"Ivanti Endpoint Manager Mobile","slug":"endpoint-manager-mobile","vendor":{"name":"Ivanti","slug":"ivanti"}},{"hub":true,"name":"Ivanti Endpoint Manager Mobile (EPMM)","slug":"endpoint-manager-mobile-epmm","vendor":{"name":"Ivanti","slug":"ivanti"}},{"hub":true,"name":"Ivanti MobileIron Core","slug":"mobileiron-core","vendor":{"name":"Ivanti","slug":"ivanti"}}],"exploited_since":"2026-04-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-1340-ivanti-endpoint-manager-mobile-code-injection"},{"cve":"CVE-2026-35616","cvss":9.8,"epss":0.8894,"slug":"cve-2026-35616-fortinet-forticlientems-improper-access-control-in-api","title":"Fortinet FortiClientEMS improper access control in API","severity":"critical","exploited":true,"published_at":"2026-04-04T01:16:39.72+00:00","technologies":[{"hub":true,"name":"Fortinet FortiClient EMS","slug":"forticlient-ems","vendor":{"name":"Fortinet","slug":"fortinet"}},{"hub":false,"name":"Fortinet FortiClientEMS","slug":"forticlientems","vendor":{"name":"Fortinet","slug":"fortinet"}}],"exploited_since":"2026-04-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-35616-fortinet-forticlientems-improper-access-control-in-api"}],"previous":{"key":"2026-03-30","top":"Apple macOS","total":3,"period":{"end":"2026-04-05","start":"2026-03-30"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-03-30"},"next":{"key":"2026-04-13","top":"Adobe Acrobat","total":10,"period":{"end":"2026-04-19","start":"2026-04-13"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-04-13"}}