April 2026 CVE LandscapeRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2026-33032CVE-2026-39987CVE-2009-0238+30 CVEs160
Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server TakeoverThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-33032CVE-2026-27944CVE-2026-27825+1 CVEs60
CVE-2026-33032: severe nginx-ui bug grants unauthenticated server accessSecurity Affairs·Apr 15, 18:17 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-3303260
⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & MoreThe Hacker News·Apr 21, 04:29 UTC · Apr 21, 2026Phishing & fraud55
Critical Nginx-ui MCP Flaw Actively Exploited in the WildInfosecurity Magazine·Apr 15, 13:00 UTC · Apr 15, 2026Exploit / PoC in the wildCVE-2026-3303260