{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 13 to 19 April 2026 (week 16)","summary":"In the week of 13 to 19 April 2026, 10 vulnerabilities were newly recorded as exploited in the wild, 10 of them critical. The technology hit most was Adobe Acrobat (2), followed by Adobe AIR (2) and Adobe Flash Player (2).","url":"https://junglewise.ai/threats/exploited/2026-04-13","json_url":"https://junglewise.ai/threats/exploited/2026-04-13.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-04-13","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":10,"period":{"end":"2026-04-19","start":"2026-04-13"},"critical":10,"generated_at":"2026-10-02T20:07:00.213787+00:00","technologies":[{"hub":true,"name":"Adobe Acrobat","slug":"acrobat","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/acrobat"},{"hub":true,"name":"Adobe AIR","slug":"air","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/air"},{"hub":true,"name":"Adobe Flash Player","slug":"flash-player","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/flash-player"},{"hub":true,"name":"Adobe Reader","slug":"reader","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/reader"},{"hub":true,"name":"Microsoft Office","slug":"office","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/office"},{"hub":true,"name":"Microsoft Windows","slug":"windows-","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/windows-"},{"hub":true,"name":"Adobe Acrobat DC","slug":"acrobat-dc","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/acrobat-dc"},{"hub":true,"name":"Adobe Acrobat Reader","slug":"acrobat-reader","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/acrobat-reader"},{"hub":true,"name":"Adobe Acrobat Reader DC","slug":"acrobat-reader-dc","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/acrobat-reader-dc"},{"hub":true,"name":"Apache ActiveMQ","slug":"activemq","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/activemq"},{"hub":true,"name":"Apache ActiveMQ Broker","slug":"activemq-broker","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/activemq-broker"},{"hub":false,"name":"Apache ActiveMQ Classic","slug":"activemq-classic","vulnerabilities":1},{"hub":true,"name":"Fortinet FortiClient EMS","slug":"forticlient-ems","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/forticlient-ems"},{"hub":true,"name":"Microsoft Excel","slug":"excel","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/excel"},{"hub":false,"name":"Microsoft Excel Viewer","slug":"excel-viewer","vulnerabilities":1}],"vulnerabilities":[{"cve":"CVE-2026-34197","cvss":8.8,"epss":0.1549,"slug":"cve-2026-34197-apache-activemq-code-injection-in-jolokia-jmx-http-bridge","title":"Apache ActiveMQ code injection in Jolokia JMX-HTTP bridge","severity":"critical","exploited":true,"published_at":"2026-04-07T09:16:20.967+00:00","technologies":[{"hub":true,"name":"Apache ActiveMQ","slug":"activemq","vendor":{"name":"Apache","slug":"apache"}},{"hub":true,"name":"Apache ActiveMQ Broker","slug":"activemq-broker","vendor":{"name":"Apache","slug":"apache"}},{"hub":false,"name":"Apache ActiveMQ Classic","slug":"activemq-classic","vendor":{"name":"Apache","slug":"apache"}}],"exploited_since":"2026-04-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34197-apache-activemq-code-injection-in-jolokia-jmx-http-bridge"},{"cve":"CVE-2026-32201","cvss":6.5,"epss":0.0824,"slug":"cve-2026-32201-microsoft-sharepoint-server-improper-input-validation-spoofing","title":"Microsoft SharePoint Server improper input validation spoofing vulnerability","severity":"critical","exploited":true,"published_at":"2026-04-14T18:17:27.16+00:00","technologies":[{"hub":true,"name":"Microsoft Sharepoint-Server","slug":"sharepoint-server","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":false,"name":"Microsoft SharePoint Server 2016","slug":"sharepoint-server-2016","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft SharePoint Server 2016 Enterprise Edition","slug":"sharepoint-server-2016-enterprise-edition","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft SharePoint Server 2019","slug":"sharepoint-server-2019","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft SharePoint Server Subscription Edition","slug":"sharepoint-server-subscription-edition","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-04-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-32201-microsoft-sharepoint-server-improper-input-validation-spoofing"},{"cve":"CVE-2009-0238","cvss":9.3,"epss":0.7491,"slug":"cve-2009-0238-microsoft-excel-remote-code-execution-via-malformed-object","title":"Microsoft Excel remote code execution via malformed object","severity":"critical","exploited":true,"published_at":"2026-04-14T00:00:00+00:00","technologies":[{"hub":true,"name":"Microsoft Excel","slug":"excel","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":false,"name":"Microsoft Excel Viewer","slug":"excel-viewer","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Office","slug":"office","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":false,"name":"Microsoft Office Compatibility Pack","slug":"office-compatibility-pack-for-word-excel-and-powerpoint-2007-file-formats","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":false,"name":"Microsoft Office for Mac","slug":"office-for-mac","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-04-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2009-0238-microsoft-excel-remote-code-execution-via-malformed-object"},{"cve":"CVE-2023-36424","cvss":7.8,"epss":0.1092,"slug":"cve-2023-36424-microsoft-windows-privilege-escalation-in-common-log-file-system","title":"Microsoft Windows privilege escalation in Common Log File System Driver","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","technologies":[{"hub":true,"name":"Microsoft Windows","slug":"windows-","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36424-microsoft-windows-privilege-escalation-in-common-log-file-system"},{"cve":"CVE-2025-60710","cvss":7.8,"epss":0.2987,"slug":"cve-2025-60710-microsoft-windows-privilege-escalation-in-host-process-for","title":"Microsoft Windows privilege escalation in Host Process for Windows Tasks","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","technologies":[{"hub":true,"name":"Microsoft Windows","slug":"windows-","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-60710-microsoft-windows-privilege-escalation-in-host-process-for"},{"cve":"CVE-2026-21643","cvss":9.8,"epss":0.6252,"slug":"cve-2026-21643-fortinet-forticlient-ems-sql-injection","title":"Fortinet FortiClient EMS SQL injection","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","technologies":[{"hub":true,"name":"Fortinet FortiClient EMS","slug":"forticlient-ems","vendor":{"name":"Fortinet","slug":"fortinet"}}],"exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21643-fortinet-forticlient-ems-sql-injection"},{"cve":"CVE-2023-21529","cvss":8.8,"epss":0.3178,"slug":"cve-2023-21529-microsoft-exchange-server-deserialization-remote-code-execution","title":"Microsoft Exchange Server deserialization remote code execution","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","technologies":[{"hub":true,"name":"Microsoft Exchange Server","slug":"exchange-server","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-21529-microsoft-exchange-server-deserialization-remote-code-execution"},{"cve":"CVE-2012-1854","cvss":7.8,"epss":0.0464,"slug":"cve-2012-1854-microsoft-visual-basic-for-applications-insecure-library-loading","title":"Microsoft Visual Basic for Applications insecure library loading in VBE6.dll","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","technologies":[{"hub":true,"name":"Microsoft Office","slug":"office","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Office","slug":"office","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Office","slug":"office","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":false,"name":"Microsoft Summit Visual Basic for Applications SDK","slug":"summit-visual-basic-for-applications-sdk","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":false,"name":"Microsoft Visual Basic for Applications","slug":"visual-basic-for-applications","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":false,"name":"Microsoft Visual Basic for Applications (VBA)","slug":"visual-basic-for-applications-vba","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-1854-microsoft-visual-basic-for-applications-insecure-library-loading"},{"cve":"CVE-2020-9715","cvss":7.8,"epss":0.775,"slug":"cve-2020-9715-adobe-acrobat-use-after-free-in-pdf-parsing","title":"Adobe Acrobat use-after-free in PDF parsing","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","technologies":[{"hub":true,"name":"Adobe Acrobat","slug":"acrobat","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Acrobat DC","slug":"acrobat-dc","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Acrobat Reader DC","slug":"acrobat-reader-dc","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe AIR","slug":"air","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Flash Player","slug":"flash-player","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Reader","slug":"reader","vendor":{"name":"Adobe","slug":"adobe"}}],"exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-9715-adobe-acrobat-use-after-free-in-pdf-parsing"},{"cve":"CVE-2026-34621","cvss":8.6,"epss":0.1216,"slug":"cve-2026-34621-adobe-acrobat-and-reader-prototype-pollution-in-javascript-engine","title":"Adobe Acrobat and Reader prototype pollution in JavaScript engine","severity":"critical","exploited":true,"published_at":"2026-04-11T07:16:03.633+00:00","technologies":[{"hub":true,"name":"Adobe Acrobat","slug":"acrobat","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Acrobat Reader","slug":"acrobat-reader","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe AIR","slug":"air","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Flash Player","slug":"flash-player","vendor":{"name":"Adobe","slug":"adobe"}},{"hub":true,"name":"Adobe Reader","slug":"reader","vendor":{"name":"Adobe","slug":"adobe"}}],"exploited_since":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34621-adobe-acrobat-and-reader-prototype-pollution-in-javascript-engine"}],"previous":{"key":"2026-04-06","top":"Fortinet FortiClient EMS","total":2,"period":{"end":"2026-04-12","start":"2026-04-06"},"critical":2,"url":"https://junglewise.ai/threats/exploited/2026-04-06"},"next":{"key":"2026-04-20","top":"Cisco Catalyst SD-WAN Manager","total":14,"period":{"end":"2026-04-26","start":"2026-04-20"},"critical":14,"url":"https://junglewise.ai/threats/exploited/2026-04-20"}}