The CVE Watchtower: Weekly Threat Intelligence Briefing (April 20 – April 26, 2026)

Weekly vulnerability digest (Apr 20–26, 2026) reporting 1,267 new disclosures—100 critical—and 14 CISA KEV additions; highlights active exploitation of Breeze Cache (WordPress), LMDeploy AI toolkit (SSRF), D-Link routers (command injection), and multiple CVSS 10.0 flaws affecting AI orchestration and VPN plugins, and recommends urgent patching of remote access, CI/CD, and LLM deployment infrastructure.