The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026)

This weekly vulnerability digest summarizes 1,134 newly disclosed vulnerabilities (94 critical), highlights four additions to CISA's Known Exploited Vulnerabilities — notably a critical cPanel/WHM authentication bypass — and reports multiple actively exploited flaws including unauthenticated RCE, SQL injection, and several CVSS 10.0 vulnerabilities; it urges urgent patching and AppSec review of framework/middleware interactions.