April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More

2026-04-15

1 min read

by info@thehackernews.com (The Hacker News)

Receive daily AI-curated summaries of engineering articles from top tech companies worldwide.

This article covers critical security vulnerabilities patched in April 2026.

•SAP Business Planning vulnerability (CVE-2026-27681, CVSS 9.9) enables SQL injection with arbitrary database execution.
•Adobe Acrobat Reader RCE (CVE-2026-34621, CVSS 8.6) actively exploited, plus five ColdFusion critical flaws.
•FortiSandbox vulnerabilities enable authentication bypass (CVE-2026-39813) and OS command injection (CVE-2026-39808), both CVSS 9.1.
•Microsoft patched 169 defects including SharePoint spoofing (CVE-2026-32201) actively exploited.
•Patches from 60+ vendors including AWS, Google, Cisco, and Mozilla.

This summary was automatically generated by AI based on the original article and may not be fully accurate.

Related Articles