NVD disclosure day

Published threat advisories for April 4, 2026

CVE-2016-20052

Snews CMS 1.7 Unrestricted File Upload Leads to Remote Code Execution.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical vulnerability in Snews CMS allows unauthenticated attackers to upload and execute arbitrary files, including PHP executables, potentially leading to remote code execution. This issue impacts the content management system, and its relevance and exposure need to be assessed.

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2026-35616

FortiClient EMS allows attackers to run unauthorized code remotely.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Fortinet FortiClient EMS has a critical flaw allowing unauthenticated attackers to run unauthorized code remotely. This is a serious risk because it can be exploited from anywhere on the internet.

NVD modified: NVD date unavailable • CISA KEV