// day
Apr 1, 2026
3 new incidents, 0 with updates.
## started
- criticalclosedpatchedclosed Apr 30, 2026
FortiClient EMS CVE-2026-35616 exploited (CVSS 9.1)
› Fortinet FortiClient EMS
In April 2026 Fortinet observed in-the-wild exploitation of CVE-2026-35616 in FortiClient EMS, a critical privilege-escalation / unauthenticated code-execution flaw (CVSS 9.1), and released an emergency weekend hotfix for EMS 7.4.5 and 7.4.6.
CVE-2026-35616 - highclosedpatchedclosed Apr 30, 2026
Chrome zero-day CVE-2026-5281 (Dawn / WebGPU UAF)
› Google Chrome / Chromium Dawn
April 2026 Chrome patch for CVE-2026-5281, a use-after-free in Dawn (WebGPU), actively exploited in the wild.
CVE-2026-5281 - unknownclosedno fix neededclosed Apr 30, 2026
Anthropic investigates unauthorized access to Claude Mythos Preview via vendor
› Anthropic Claude Mythos Preview (vendor environment)
In April 2026 Anthropic said it was investigating reports that unauthorized users accessed its unreleased vulnerability-discovery tool Claude Mythos Preview through a third-party vendor environment rather than a direct Anthropic system compromise (Bloomberg / CRN reporting).
