{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 27 April to 3 May 2026 (week 18)","summary":"In the week of 27 April to 3 May 2026, 4 vulnerabilities were newly recorded as exploited in the wild, 4 of them critical. The technology hit most was Microsoft Windows (2), followed by ABB Ability Edgenius (1) and Amazon AWS (1).","url":"https://junglewise.ai/threats/exploited/2026-04-27","json_url":"https://junglewise.ai/threats/exploited/2026-04-27.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-04-27","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":4,"period":{"end":"2026-05-03","start":"2026-04-27"},"critical":4,"generated_at":"2026-10-02T20:07:00.213787+00:00","technologies":[{"hub":true,"name":"Microsoft Windows","slug":"windows-","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/windows-"},{"hub":false,"name":"ABB Ability Edgenius","slug":"ability-edgenius","vulnerabilities":1},{"hub":true,"name":"Amazon AWS","slug":"aws","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/aws"},{"hub":false,"name":"Amazon Deep Learning AMI","slug":"deep-learning-amis-dlami","vulnerabilities":1},{"hub":false,"name":"Amazon EKS-optimized AMI","slug":"eks-optimized-amis","vulnerabilities":1},{"hub":false,"name":"Amazon Elastic Container Service","slug":"ecs-on-ec2","vulnerabilities":1},{"hub":false,"name":"Amazon Linux","slug":"amazon-linux","vulnerabilities":1},{"hub":true,"name":"ConnectWise ScreenConnect","slug":"screenconnect","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/screenconnect"},{"hub":true,"name":"Linux Kernel","slug":"kernel","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/kernel"},{"hub":true,"name":"Microsoft Windows Shell","slug":"windows-shell","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/windows-shell"},{"hub":false,"name":"Siemens SIMATIC AX Runtime Core","slug":"simatic-ax-runtime-core","vulnerabilities":1},{"hub":true,"name":"Siemens SIMATIC CN 4100","slug":"simatic-cn-4100","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/simatic-cn-4100"},{"hub":false,"name":"Siemens SIMATIC HMI MTP1000 Unified Basic","slug":"simatic-hmi-mtp1000-unified-basic","vulnerabilities":1},{"hub":false,"name":"Siemens SIMATIC HMI MTP1000 Unified Comfort Panel","slug":"simatic-hmi-mtp1000-unified-comfort-panel","vulnerabilities":1},{"hub":false,"name":"Siemens SIMATIC HMI MTP1200 Comfort Pro","slug":"simatic-hmi-mtp1200-comfort-pro","vulnerabilities":1}],"vulnerabilities":[{"cve":"CVE-2026-31431","cvss":7.8,"epss":0.0257,"slug":"cve-2026-31431-linux-kernel-crypto-algif-aead-improper-memory-handling","title":"Linux Kernel crypto algif_aead improper memory handling","severity":"critical","exploited":true,"published_at":"2026-04-22T09:16:21.27+00:00","technologies":[{"hub":false,"name":"ABB Ability Edgenius","slug":"ability-edgenius","vendor":{"name":"ABB","slug":"abb"}},{"hub":false,"name":"Amazon Linux","slug":"amazon-linux","vendor":{"name":"Amazon","slug":"amazon"}},{"hub":true,"name":"Amazon AWS","slug":"aws","vendor":{"name":"Amazon","slug":"amazon"}},{"hub":false,"name":"Amazon Deep Learning AMI","slug":"deep-learning-amis-dlami","vendor":{"name":"Amazon","slug":"amazon"}},{"hub":false,"name":"Amazon Elastic Container Service","slug":"ecs-on-ec2","vendor":{"name":"Amazon","slug":"amazon"}},{"hub":false,"name":"Amazon EKS-optimized AMI","slug":"eks-optimized-amis","vendor":{"name":"Amazon","slug":"amazon"}}],"exploited_since":"2026-05-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-31431-linux-kernel-crypto-algif-aead-improper-memory-handling"},{"cve":"CVE-2026-41940","cvss":9.8,"epss":0.9853,"slug":"cve-2026-41940-webpros-cpanel-whm-authentication-bypass-in-login-flow","title":"cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote atta","severity":"critical","exploited":true,"published_at":"2026-04-29T16:16:25.037+00:00","technologies":[{"hub":true,"name":"WebPros cPanel","slug":"cpanel","vendor":{"name":"WebPros","slug":"webpros"}},{"hub":false,"name":"WebPros cPanel & WHM","slug":"cpanel-whm","vendor":{"name":"WebPros","slug":"webpros"}},{"hub":false,"name":"WebPros WHM","slug":"whm","vendor":{"name":"WebPros","slug":"webpros"}},{"hub":false,"name":"WebPros WP2","slug":"wp2","vendor":{"name":"WebPros","slug":"webpros"}},{"hub":false,"name":"WebPros Wordpress-Squared","slug":"wp2-wordpress-squared","vendor":{"name":"WebPros","slug":"webpros"}}],"exploited_since":"2026-04-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-41940-webpros-cpanel-whm-authentication-bypass-in-login-flow"},{"cve":"CVE-2024-1708","cvss":8.4,"epss":0.8527,"slug":"cve-2024-1708-connectwise-screenconnect-path-traversal","title":"ConnectWise ScreenConnect path traversal","severity":"critical","exploited":true,"published_at":"2026-04-28T00:00:00+00:00","technologies":[{"hub":true,"name":"ConnectWise ScreenConnect","slug":"screenconnect","vendor":{"name":"ConnectWise","slug":"connectwise"}},{"hub":true,"name":"Microsoft Windows","slug":"windows-","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-04-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-1708-connectwise-screenconnect-path-traversal"},{"cve":"CVE-2026-32202","cvss":4.3,"epss":0.1297,"slug":"cve-2026-32202-microsoft-windows-shell-protection-mechanism-failure-spoofing","title":"Microsoft Windows Shell protection mechanism failure spoofing","severity":"critical","exploited":true,"published_at":"2026-04-14T18:17:27.36+00:00","technologies":[{"hub":true,"name":"Microsoft Windows","slug":"windows-","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Microsoft Windows Shell","slug":"windows-shell","vendor":{"name":"Microsoft","slug":"microsoft"}}],"exploited_since":"2026-04-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-32202-microsoft-windows-shell-protection-mechanism-failure-spoofing"}],"previous":{"key":"2026-04-20","top":"Cisco Catalyst SD-WAN Manager","total":14,"period":{"end":"2026-04-26","start":"2026-04-20"},"critical":14,"url":"https://junglewise.ai/threats/exploited/2026-04-20"},"next":{"key":"2026-05-04","top":"Berriai LiteLLM","total":3,"period":{"end":"2026-05-10","start":"2026-05-04"},"critical":3,"url":"https://junglewise.ai/threats/exploited/2026-05-04"}}