MalwarecriticalExploited in the wild

⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More

The Hacker Newsby @TheHackersNewsApr 6, 2026 · 12:46 UTC (Apr 6, 2026)13 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-5281 CVE-2026-3502 CVE-2026-35616 CVE-2026-21643

Tags: cve-2026-21643 cve-2026-3502 cve-2026-35616 cve-2026-5281 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-21643	Unauthenticated SQL Injection to Code Execution in Fortinet FortiClient EMS 7.4.4	9.8	98%	KEVPoC	Feb 6, 2026 KEV Apr 13, 2026
CVE-2026-3502	Arbitrary Code Execution via Unverified Updates in TrueConf Client	7.8	6%	KEV	Mar 30, 2026 KEV Apr 2, 2026
CVE-2026-35616	Unauthenticated Code Execution in Fortinet FortiClient EMS 7.4.5–7.4.6	9.8	94%	KEVPoC	Apr 4, 2026 KEV Apr 6, 2026
CVE-2026-5281	Use-After-Free in Google Chrome's Dawn (WebGPU) Component Enables Arbitrary Code Execution	8.8	14%	KEV	Apr 1, 2026 KEV Apr 1, 2026

From the original article

13 min read at thehackernews.com

This week had real hits. The key software got tampered with. Active bugs showed up in the tools people use every day.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.