{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 20 to 26 April 2026 (week 17)","summary":"In the week of 20 to 26 April 2026, 14 vulnerabilities were newly recorded as exploited in the wild, 14 of them critical. The technology hit most was Cisco Catalyst SD-WAN Manager (3), followed by D-Link DIR-823X (2) and Simplehelp (2).","url":"https://junglewise.ai/threats/exploited/2026-04-20","json_url":"https://junglewise.ai/threats/exploited/2026-04-20.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-04-20","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":14,"period":{"end":"2026-04-26","start":"2026-04-20"},"critical":14,"generated_at":"2026-10-02T20:07:00.213787+00:00","technologies":[{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager"},{"hub":false,"name":"D-Link DIR-823X","slug":"dir-823x","vulnerabilities":2},{"hub":true,"name":"Simplehelp","slug":"simplehelp","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/simplehelp"},{"hub":false,"name":"SimpleHelp Remote Support Software","slug":"remote-support-software","vulnerabilities":2},{"hub":false,"name":"Cisco Catalyst Sd-Wan Manger","slug":"catalyst-sd-wan-manger","vulnerabilities":1},{"hub":false,"name":"D-Link DIR-823X firmware","slug":"dir-823x-firmware","vulnerabilities":1},{"hub":true,"name":"Jetbrains TeamCity","slug":"teamcity","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/teamcity"},{"hub":true,"name":"Kentico Xperience","slug":"xperience","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/xperience"},{"hub":true,"name":"Marimo","slug":"marimo","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/marimo"},{"hub":false,"name":"marimo (PyPI)","slug":"pypi-marimo","vulnerabilities":1},{"hub":true,"name":"Microsoft Defender","slug":"defender","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/defender"},{"hub":false,"name":"Microsoft Defender Antimalware Platform","slug":"defender-antimalware-platform","vulnerabilities":1},{"hub":true,"name":"PaperCut MF","slug":"mf","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/mf"},{"hub":true,"name":"PaperCut NG","slug":"ng","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/ng"},{"hub":true,"name":"Quest KACE Systems Management Appliance","slug":"kace-systems-management-appliance","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/kace-systems-management-appliance"}],"vulnerabilities":[{"cve":"CVE-2024-57726","cvss":9.9,"epss":0.4596,"slug":"cve-2024-57726-simplehelp-privilege-escalation-via-missing-authorization-in-api","title":"SimpleHelp privilege escalation via missing authorization in API key creation","severity":"critical","exploited":true,"published_at":"2026-04-24T00:00:00+00:00","technologies":[{"hub":false,"name":"SimpleHelp Remote Support Software","slug":"remote-support-software","vendor":{"name":"Simplehelp","slug":"simplehelp"}},{"hub":true,"name":"Simplehelp","slug":"simplehelp","vendor":{"name":"Simplehelp","slug":"simplehelp"}},{"hub":false,"name":"SimpleHelp Remote Support Software","slug":"remote-support-software","vendor":{"name":"Simplehelp","slug":"simplehelp"}}],"exploited_since":"2026-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-57726-simplehelp-privilege-escalation-via-missing-authorization-in-api"},{"cve":"CVE-2024-57728","cvss":7.2,"epss":0.5864,"slug":"cve-2024-57728-simplehelp-path-traversal-in-zip-file-upload","title":"SimpleHelp path traversal in ZIP file upload","severity":"critical","exploited":true,"published_at":"2026-04-24T00:00:00+00:00","technologies":[{"hub":true,"name":"Simplehelp","slug":"simplehelp","vendor":{"name":"Simplehelp","slug":"simplehelp"}}],"exploited_since":"2026-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-57728-simplehelp-path-traversal-in-zip-file-upload"},{"cve":"CVE-2024-7399","cvss":9.8,"epss":0.844,"slug":"cve-2024-7399-samsung-magicinfo-9-server-path-traversal","title":"Samsung MagicINFO 9 Server path traversal","severity":"critical","exploited":true,"published_at":"2026-04-24T00:00:00+00:00","technologies":[{"hub":false,"name":"D-Link DIR-823X","slug":"dir-823x","vendor":{"name":"D-Link","slug":"d-link"}},{"hub":false,"name":"Samsung MagicINFO","slug":"magicinfo","vendor":{"name":"Samsung","slug":"samsung"}},{"hub":true,"name":"Samsung MagicINFO 9 Server","slug":"magicinfo-9-server","vendor":{"name":"Samsung","slug":"samsung"}},{"hub":false,"name":"Samsung MagicINFO Server","slug":"magicinfo-server","vendor":{"name":"Samsung","slug":"samsung"}},{"hub":false,"name":"SimpleHelp Remote Support Software","slug":"remote-support-software","vendor":{"name":"Simplehelp","slug":"simplehelp"}}],"exploited_since":"2026-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-7399-samsung-magicinfo-9-server-path-traversal"},{"cve":"CVE-2025-29635","cvss":7.2,"epss":0.5812,"slug":"cve-2025-29635-d-link-dir-823x-command-injection-in-set-prohibiting","title":"D-Link DIR-823X command injection in set_prohibiting","severity":"critical","exploited":true,"published_at":"2026-04-24T00:00:00+00:00","technologies":[{"hub":false,"name":"D-Link DIR-823X","slug":"dir-823x","vendor":{"name":"D-Link","slug":"d-link"}},{"hub":false,"name":"D-Link DIR-823X firmware","slug":"dir-823x-firmware","vendor":{"name":"D-Link","slug":"d-link"}}],"exploited_since":"2026-04-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-29635-d-link-dir-823x-command-injection-in-set-prohibiting"},{"cve":"CVE-2026-39987","cvss":9.8,"epss":0.3787,"slug":"cve-2026-39987-marimo-pre-auth-remote-code-execution-via-terminal-websocket","title":"Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass","severity":"critical","exploited":true,"published_at":"2026-04-08T21:50:58+00:00","technologies":[{"hub":true,"name":"Marimo","slug":"marimo","vendor":{"name":"Marimo","slug":"marimo"}},{"hub":false,"name":"marimo (PyPI)","slug":"pypi-marimo","vendor":{"name":"PyPI","slug":"pypi"}}],"exploited_since":"2026-04-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-39987-marimo-pre-auth-remote-code-execution-via-terminal-websocket"},{"cve":"CVE-2026-33825","cvss":7.8,"epss":0.0675,"slug":"cve-2026-33825-microsoft-defender-privilege-escalation-in-antimalware-platform","title":"Microsoft Defender privilege escalation in Antimalware Platform","severity":"critical","exploited":true,"published_at":"2026-04-14T18:17:35.1+00:00","technologies":[{"hub":true,"name":"Microsoft Defender","slug":"defender","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":false,"name":"Microsoft Defender Antimalware Platform","slug":"defender-antimalware-platform","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-04-22T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-33825-microsoft-defender-privilege-escalation-in-antimalware-platform"},{"cve":"CVE-2023-27351","cvss":8.2,"epss":0.8696,"slug":"cve-2023-27351-papercut-ng-mf-authentication-bypass-in-securityrequestfilter","title":"PaperCut NG/MF authentication bypass in SecurityRequestFilter","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","technologies":[{"hub":true,"name":"PaperCut MF","slug":"mf","vendor":{"name":"PaperCut","slug":"papercut"}},{"hub":true,"name":"PaperCut NG","slug":"ng","vendor":{"name":"PaperCut","slug":"papercut"}},{"hub":true,"name":"PaperCut MF","slug":"mf","vendor":{"name":"PaperCut","slug":"papercut"}},{"hub":true,"name":"PaperCut NG","slug":"ng","vendor":{"name":"PaperCut","slug":"papercut"}}],"exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-27351-papercut-ng-mf-authentication-bypass-in-securityrequestfilter"},{"cve":"CVE-2024-27199","cvss":7.3,"epss":0.9093,"slug":"cve-2024-27199-jetbrains-teamcity-relative-path-traversal-in-admin-interface","title":"JetBrains TeamCity relative path traversal in admin interface","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","technologies":[{"hub":true,"name":"Jetbrains TeamCity","slug":"teamcity","vendor":{"name":"Jetbrains","slug":"jetbrains"}}],"exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27199-jetbrains-teamcity-relative-path-traversal-in-admin-interface"},{"cve":"CVE-2025-2749","cvss":7.2,"epss":0.049,"slug":"cve-2025-2749-kentico-xperience-path-traversal-and-rce-in-staging-sync-server","title":"Kentico Xperience path traversal and RCE in Staging Sync Server","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","technologies":[{"hub":true,"name":"Kentico Xperience","slug":"xperience","vendor":{"name":"Kentico","slug":"kentico"}},{"hub":true,"name":"Kentico Xperience","slug":"xperience","vendor":{"name":"Kentico","slug":"kentico"}}],"exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-2749-kentico-xperience-path-traversal-and-rce-in-staging-sync-server"},{"cve":"CVE-2025-32975","cvss":10,"epss":0.465,"slug":"cve-2025-32975-quest-kace-systems-management-appliance-authentication-bypass-in","title":"Quest KACE Systems Management Appliance authentication bypass in SSO","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","technologies":[{"hub":true,"name":"Quest KACE Systems Management Appliance","slug":"kace-systems-management-appliance","vendor":{"name":"Quest","slug":"quest"}},{"hub":true,"name":"Quest KACE Systems Management Appliance (SMA)","slug":"kace-systems-management-appliance-sma","vendor":{"name":"Quest","slug":"quest"}}],"exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32975-quest-kace-systems-management-appliance-authentication-bypass-in"},{"cve":"CVE-2025-48700","cvss":6.1,"epss":0.1876,"slug":"cve-2025-48700-synacor-zimbra-collaboration-suite-xss-in-classic-ui","title":"Synacor Zimbra Collaboration Suite XSS in Classic UI","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","technologies":[{"hub":true,"name":"Synacor Zimbra Collaboration Suite","slug":"zimbra-collaboration-suite","vendor":{"name":"Synacor","slug":"synacor"}},{"hub":true,"name":"Synacor Zimbra Collaboration Suite (ZCS)","slug":"zimbra-collaboration-suite-zcs","vendor":{"name":"Synacor","slug":"synacor"}}],"exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-48700-synacor-zimbra-collaboration-suite-xss-in-classic-ui"},{"cve":"CVE-2026-20122","cvss":5.4,"epss":0.0174,"slug":"cve-2026-20122-cisco-catalyst-sd-wan-manager-arbitrary-file-overwrite-via-api","title":"Cisco Catalyst SD-WAN Manager arbitrary file overwrite via API","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","technologies":[{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vendor":{"name":"Cisco","slug":"cisco"}},{"hub":false,"name":"Cisco Catalyst Sd-Wan Manger","slug":"catalyst-sd-wan-manger","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20122-cisco-catalyst-sd-wan-manager-arbitrary-file-overwrite-via-api"},{"cve":"CVE-2026-20128","cvss":7.5,"epss":0.0009,"slug":"cve-2026-20128-cisco-catalyst-sd-wan-manager-recoverable-password-storage-in-dca","title":"Cisco Catalyst SD-WAN Manager recoverable password storage in DCA","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","technologies":[{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20128-cisco-catalyst-sd-wan-manager-recoverable-password-storage-in-dca"},{"cve":"CVE-2026-20133","cvss":7.5,"epss":0.0136,"slug":"cve-2026-20133-cisco-catalyst-sd-wan-manager-information-disclosure","title":"Cisco Catalyst SD-WAN Manager information disclosure","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","technologies":[{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20133-cisco-catalyst-sd-wan-manager-information-disclosure"}],"previous":{"key":"2026-04-13","top":"Adobe Acrobat","total":10,"period":{"end":"2026-04-19","start":"2026-04-13"},"critical":10,"url":"https://junglewise.ai/threats/exploited/2026-04-13"},"next":{"key":"2026-04-27","top":"Microsoft Windows","total":4,"period":{"end":"2026-05-03","start":"2026-04-27"},"critical":4,"url":"https://junglewise.ai/threats/exploited/2026-04-27"}}