# Newly exploited vulnerabilities: week of 6 to 12 April 2026 (week 15)

Source: https://junglewise.ai/threats/exploited/2026-04-06  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 October 2026, 21:07 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-04-06.json  
License: CC BY 4.0 with a link back

In the week of 6 to 12 April 2026, 2 vulnerabilities were newly recorded as exploited in the wild, 2 of them critical. The technology hit most was Fortinet FortiClient EMS (1), followed by Fortinet FortiClientEMS (1) and Ivanti Endpoint Manager Mobile (1).

## Newly exploited this week

- [CVE-2026-1340: Ivanti Endpoint Manager Mobile code injection](https://junglewise.ai/threats/cve-2026-1340-ivanti-endpoint-manager-mobile-code-injection) (critical, exploited in the wild, CVSS 9.8, exploited since 8 Apr 2026, published 8 Apr 2026)
- [CVE-2026-35616: Fortinet FortiClientEMS improper access control in API](https://junglewise.ai/threats/cve-2026-35616-fortinet-forticlientems-improper-access-control-in-api) (critical, exploited in the wild, CVSS 9.8, exploited since 6 Apr 2026, published 4 Apr 2026)

## Technologies hit most

1. [Fortinet FortiClient EMS](https://junglewise.ai/threats/technologies/forticlient-ems): 1 vulnerability
2. Fortinet FortiClientEMS: 1 vulnerability
3. [Ivanti Endpoint Manager Mobile](https://junglewise.ai/threats/technologies/endpoint-manager-mobile): 1 vulnerability
4. [Ivanti Endpoint Manager Mobile (EPMM)](https://junglewise.ai/threats/technologies/endpoint-manager-mobile-epmm): 1 vulnerability
5. [Ivanti MobileIron Core](https://junglewise.ai/threats/technologies/mobileiron-core): 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 6 to 12 April 2026 (week 15)", https://junglewise.ai/threats/exploited/2026-04-06, 2 October 2026.