The CVE Watchtower: Weekly Threat Intelligence Briefing (April 13 – April 19, 2026)

**Executive Summary:** This weekly vulnerability digest reports 1,214 new disclosures (98 critical), 10 new CISA KEV entries, and active exploitation targeting legacy Microsoft Office, enterprise products (FortiClientEMS, Apache ActiveMQ, Microsoft components) and emerging AI infrastructure (MCP/Nginx UI and MCP adapters with CVSS 9.8–10.0); immediate patching, audits for legacy endpoints, and hardening of AI model integrations are recommended.