diff --git a/README.md b/README.md
index dbe3d03164..771f68e8c2 100644
--- a/README.md
+++ b/README.md
@@ -1 +1,26 @@
-# aboutcode-mirror-euvd
\ No newline at end of file
+# EUVD Mirror
+
+This repository hosts an **append-only mirror** of the [European Vulnerability Database (EUVD)](https://euvd.enisa.europa.eu/search).
+
+## Sync Frequency
+
+The mirror syncs every day, appending new advisories from EUVD.  
+See the sync pipeline [sync_catalog.py](sync_catalog.py) and workflow 
+[.github/workflows/sync.yml](.github/workflows/sync.yml).
+
+
+## Usage
+
+To use the mirror, clone this repository:
+
+```bash
+git clone https://github.com/aboutcode-org/aboutcode-mirror-euvd
+```
+
+Once cloned, the advisories will be available in the `advisories/` directory organized by `datePublished`.
+
+
+## License
+
+* **Code** is licensed under the [Apache License 2.0](http://www.apache.org/licenses/LICENSE-2.0).
+* **Data** is licensed under [CC-BY-SA 4.0](https://creativecommons.org/licenses/by-sa/4.0/).
diff --git a/advisories/2026/02/EUVD-2025-207365.json b/advisories/2026/02/EUVD-2025-207365.json
index 5cfdaf3b8a..29c9abb07f 100644
--- a/advisories/2026/02/EUVD-2025-207365.json
+++ b/advisories/2026/02/EUVD-2025-207365.json
@@ -2,15 +2,15 @@
   "id": "EUVD-2025-207365",
   "enisaUuid": "e9f8bb1c-ac51-3d2a-ac52-708fe5dbb57a",
   "description": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).",
-  "datePublished": "Feb 9, 2026, 3:30:31 PM",
-  "dateUpdated": "Feb 9, 2026, 3:30:31 PM",
+  "datePublished": "Feb 9, 2026, 2:51:32 PM",
+  "dateUpdated": "Apr 6, 2026, 7:24:51 AM",
   "baseScore": 5.3,
   "baseScoreVersion": "3.1",
   "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
-  "references": "https://access.redhat.com/security/cve/CVE-2025-14831\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2423177\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-14831\n",
+  "references": "https://access.redhat.com/security/cve/CVE-2025-14831\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2423177\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-14831\nhttps://access.redhat.com/errata/RHSA-2026:3477\nhttps://access.redhat.com/errata/RHSA-2026:4188\nhttps://access.redhat.com/errata/RHSA-2026:4655\nhttps://access.redhat.com/errata/RHSA-2026:4943\nhttps://access.redhat.com/errata/RHSA-2026:5585\nhttps://access.redhat.com/errata/RHSA-2026:5606\nhttps://access.redhat.com/errata/RHSA-2026:6630\nhttps://gitlab.com/gnutls/gnutls/-/issues/1773\n",
   "aliases": "GHSA-pm8w-jq9r-x5rp\nCVE-2025-14831\n",
   "assigner": "redhat",
-  "epss": 0.07,
+  "epss": 0.06,
   "enisaIdProduct": [
     {
       "id": "349175bc-977b-32b2-93ba-90f89133ab33",
@@ -33,6 +33,13 @@
       },
       "product_version": "patch: 0:3.8.3-10.el9_7"
     },
+    {
+      "id": "82a8bf55-089e-306f-ac2f-233c51671be8",
+      "product": {
+        "name": "Red Hat Enterprise Linux 9.6 Extended Update Support"
+      },
+      "product_version": "patch: 0:3.8.3-6.el9_6.3"
+    },
     {
       "id": "93bbe7b6-a7f4-39a4-af44-2e8ca10ad887",
       "product": {
@@ -61,6 +68,13 @@
       },
       "product_version": "patch: 0:3.6.16-8.el8_10.5"
     },
+    {
+      "id": "d3123fa6-2e8e-3927-8dd7-8a111d70b7a2",
+      "product": {
+        "name": "Red Hat Ceph Storage 8"
+      },
+      "product_version": "patch: sha256:1160569002c25d3d349bbe41b57eeffade438853d3419edca01813227440f414"
+    },
     {
       "id": "e92734b5-d598-36f4-96c8-c79c20cbfee7",
       "product": {
diff --git a/advisories/2026/03/EUVD-2024-55470.json b/advisories/2026/03/EUVD-2024-55470.json
index bca79a978a..580b0fb6da 100644
--- a/advisories/2026/03/EUVD-2024-55470.json
+++ b/advisories/2026/03/EUVD-2024-55470.json
@@ -2,10 +2,10 @@
   "id": "EUVD-2024-55470",
   "enisaUuid": "63b9c87a-f04c-3b99-89be-244dfb6fd763",
   "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/xattr: missing fdput() in fremovexattr error path\n\nIn the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a\nfile reference but returns early without calling fdput() when\nstrncpy_from_user() fails on the name argument. In multi-threaded processes\nwhere fdget() takes the slow path, this permanently leaks one\nfile reference per call, pinning the struct file and associated kernel\nobjects in memory. An unprivileged local user can exploit this to cause\nkernel memory exhaustion. The issue was inadvertently fixed by commit\na71874379ec8 (\"xattr: switch to CLASS(fd)\").",
-  "datePublished": "Mar 9, 2026, 6:31:43 PM",
-  "dateUpdated": "Mar 9, 2026, 6:31:43 PM",
+  "datePublished": "Mar 9, 2026, 3:51:12 PM",
+  "dateUpdated": "Apr 6, 2026, 8:01:13 AM",
   "baseScore": 0.0,
-  "references": "https://git.kernel.org/stable/c/a71874379ec8c6e788a61d71b3ad014a8d9a5c08\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-14027\n",
+  "references": "https://git.kernel.org/stable/c/a71874379ec8c6e788a61d71b3ad014a8d9a5c08\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-14027\nhttps://git.kernel.org/stable/c/9a3a2ae5efbbcaed37551218abed94e23c537157\nhttps://git.kernel.org/stable/c/d151b94967c8247005435b63fc60f8f4baa320da\n",
   "aliases": "CVE-2024-14027\nGHSA-h9jc-64qv-h9cg\n",
   "assigner": "Linux",
   "epss": 0.01,
@@ -24,6 +24,13 @@
       },
       "product_version": "patch: 6.13"
     },
+    {
+      "id": "7bf22de6-b246-320a-ae18-cf3483659b37",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.6.133"
+    },
     {
       "id": "7c5b039a-75e7-3691-97f1-ce5892d035c1",
       "product": {
@@ -31,6 +38,13 @@
       },
       "product_version": "patch: 6.12.77"
     },
+    {
+      "id": "83678d73-fca3-3a50-ba26-764a79430b61",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.6.131"
+    },
     {
       "id": "890f4be3-db4a-3273-b84e-ff4bbcba12d0",
       "product": {
@@ -52,6 +66,13 @@
       },
       "product_version": "c03185f4a23e7f89d84c9981091770e876e64480"
     },
+    {
+      "id": "9526fd79-a7bb-37fc-89e2-d4a5541e585c",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "c03185f4a23e7f89d84c9981091770e876e64480 <9a3a2ae5efbbcaed37551218abed94e23c537157"
+    },
     {
       "id": "9b4d37f3-a4b4-3c5a-bec1-f4a827909f3d",
       "product": {
@@ -59,6 +80,13 @@
       },
       "product_version": "8d5863cb33aa424fc27115ee945ad6b96ae2facb"
     },
+    {
+      "id": "c22c6809-1f2b-3593-99a9-7f395045c98e",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "c03185f4a23e7f89d84c9981091770e876e64480 <5a1e865e51063d6c56f673ec8ad4b6604321b455"
+    },
     {
       "id": "c588aa3a-d972-3a0a-bd62-2b4dbfe3395e",
       "product": {
diff --git a/advisories/2026/04/EUVD-2024-55535.json b/advisories/2026/04/EUVD-2024-55535.json
new file mode 100644
index 0000000000..c6ced70f72
--- /dev/null
+++ b/advisories/2026/04/EUVD-2024-55535.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2024-55535",
+  "enisaUuid": "cc753fa8-e271-3202-bd66-2edff3ab8187",
+  "description": "Twitch Studio version 0.114.8 and prior contain a privilege escalation vulnerability in its privileged helper tool that allows local attackers to execute arbitrary code as root by exploiting an unprotected XPC service. Attackers can invoke the installFromPath:toPath:withReply: method to overwrite system files and privileged binaries, achieving full system compromise. Twitch Studio was discontinued in May 2024.",
+  "datePublished": "Apr 6, 2026, 6:33:04 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:04 PM",
+  "baseScore": 8.5,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://www.iru.com/blog/twitch-privileged-helper\nhttps://help.twitch.tv/s/topic/0TO3a000000kZfYGAU/twitch-studio\nhttps://help.twitch.tv/s/article/recommended-software-for-broadcasting\nhttps://www.vulncheck.com/advisories/twitch-studio-launcherhelper-xpc-missing-authorization-to-root-file-write\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-14032\n",
+  "aliases": "CVE-2024-14032\nGHSA-pp7p-6p72-cqxg\n",
+  "assigner": "VulnCheck",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "6af3c53f-fef8-30e6-8533-56286117bbe7",
+      "product": {
+        "name": "Twitch Studio"
+      },
+      "product_version": "0 \u22640.114.8"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "9ce7de5a-6b09-3bdf-b13f-0df77d528f01",
+      "vendor": {
+        "name": "Twitch"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209222.json b/advisories/2026/04/EUVD-2025-209222.json
new file mode 100644
index 0000000000..ebd17d486d
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209222.json
@@ -0,0 +1,234 @@
+{
+  "id": "EUVD-2025-209222",
+  "enisaUuid": "3914ad6f-1120-34e1-9eb9-47133a24a5a9",
+  "description": "Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.",
+  "datePublished": "Apr 6, 2026, 6:33:04 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:04 PM",
+  "baseScore": 6.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-47374\n",
+  "aliases": "CVE-2025-47374\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "03530637-94e9-3f81-b37f-84461ae4c407",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SXR2250P"
+    },
+    {
+      "id": "101e6282-53ee-393a-a217-50be844751c8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SXR2230P"
+    },
+    {
+      "id": "14195977-f0b9-39b9-9cb4-d0f0cf6f56b0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "15632ab9-6e74-3c2a-be21-e438899204a5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1086"
+    },
+    {
+      "id": "177a82f7-8f9e-3254-8121-8e7fa252818a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7861"
+    },
+    {
+      "id": "199f8379-0784-378e-9fd7-7a209733aeff",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QPA1086BD"
+    },
+    {
+      "id": "33e8e2cd-b8f3-3ee2-b3c1-79c2aeca903a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SAR1165P"
+    },
+    {
+      "id": "455ff3a1-1b7b-3599-a6bd-9efcbff9d491",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QLN1086BD"
+    },
+    {
+      "id": "49756d43-ca8f-312f-bff8-35d2f275e0d1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7860"
+    },
+    {
+      "id": "4a13d3df-7531-357c-a7b4-9e3e3336fdba",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SAR2130P"
+    },
+    {
+      "id": "4d988a16-b168-32da-9d5f-539191d49ad6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QPA1083BD"
+    },
+    {
+      "id": "5ba37982-0509-3239-9d80-668b8677fa55",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "5ea2dcb8-3e00-3e28-8d00-6efba14f85bc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "5f9d5c46-4e44-3ff0-b1ec-0b2e4683e9c6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QLN1083BD"
+    },
+    {
+      "id": "63b56bd3-3dec-352b-be8a-e418aac7ff2d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1083"
+    },
+    {
+      "id": "74df8e04-74eb-3a81-a6d9-d3c10935b592",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1093"
+    },
+    {
+      "id": "7fec3ed5-1557-3384-b3f3-092ed493b5c4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1095"
+    },
+    {
+      "id": "9204da4d-2c30-3817-b9f2-c658b0647166",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "95205cce-4bae-3c98-94a7-6d05ec4dd48f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1096"
+    },
+    {
+      "id": "96619858-b9f3-3118-9b5d-ed53a4b1a5f3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1 Gen 1 Platform"
+    },
+    {
+      "id": "afdd7641-a13d-31fa-a0f2-48c84da3bc89",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Pandeiro"
+    },
+    {
+      "id": "bac05a00-f7fb-3fc3-bb9a-44cd9fc1eb21",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "bd9e9272-b1b3-3187-b9e4-6b953c3baa0e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SXR2330P"
+    },
+    {
+      "id": "c854cf9e-da41-3e21-853f-604b801d4884",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "cbc57750-6401-39d0-89a8-5ebcf14ee19f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "d70f4359-a33a-3f5a-96ac-74abac2ab942",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XRV9209"
+    },
+    {
+      "id": "de2fa3ea-5e45-36d5-ba16-727d4df18a15",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SXR2350P"
+    },
+    {
+      "id": "e2eb7244-8ad8-38f7-8f61-de809b707520",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1+ Gen 1 Platform"
+    },
+    {
+      "id": "e9e253b3-403c-3dc7-8a69-84a4d9eda633",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XRV7209"
+    },
+    {
+      "id": "fa1a589e-7d33-35ff-8b1a-713cbdd63784",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1094"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "713ff8e8-a4a2-3ba4-b542-622e04c9b56e",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209224.json b/advisories/2026/04/EUVD-2025-209224.json
new file mode 100644
index 0000000000..801c7dd39a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209224.json
@@ -0,0 +1,1277 @@
+{
+  "id": "EUVD-2025-209224",
+  "enisaUuid": "c243ad37-8dc1-3467-8439-5a260df1c06d",
+  "description": "Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.",
+  "datePublished": "Apr 6, 2026, 6:33:05 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:05 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-47389\n",
+  "aliases": "GHSA-34mx-45mg-p6wm\nCVE-2025-47389\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "013129e2-f9c2-3e85-81b8-d6e4a4683e8c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6224"
+    },
+    {
+      "id": "032b2afb-b912-382b-a29e-488b1afc8c29",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1094"
+    },
+    {
+      "id": "03414c22-453f-3900-b7c4-241b3930cbec",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QLN1083BD"
+    },
+    {
+      "id": "0416c16a-39cd-395d-89d4-68ca83ce8792",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "052d7471-abad-37fc-8554-c31c2eed76ac",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "07ace735-022a-3004-8f61-fee2eecfcfcc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9390"
+    },
+    {
+      "id": "089bd8ba-7fca-3c08-a3df-d2f679d15d6c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8150P"
+    },
+    {
+      "id": "09c4aa26-8f0f-3b28-b14d-ba10c7895d17",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Orne"
+    },
+    {
+      "id": "0da7f415-4c3d-3777-9305-8c0352d0c6ee",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6574AU"
+    },
+    {
+      "id": "0fb5bca9-6f53-3450-ad3d-81f486284474",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 888 5G Mobile Platform"
+    },
+    {
+      "id": "129fe814-ed61-365e-a235-864529340fff",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1 Gen 1 Platform"
+    },
+    {
+      "id": "14482046-98a6-380f-9cc5-3956865cc5c1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3910"
+    },
+    {
+      "id": "1481d437-6e07-3828-a97e-f73c9b1a7e6d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCS2290"
+    },
+    {
+      "id": "187f32a8-f71f-38b4-879f-5139686e0574",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QFW7114"
+    },
+    {
+      "id": "1957e400-0886-3583-9fca-0e28ef2375c7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1093"
+    },
+    {
+      "id": "1a6e07a5-b0f9-3b7a-9f04-f1c5db185280",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6574A"
+    },
+    {
+      "id": "1aa2c067-00f6-39aa-b4b7-e4c6f8ce7fbb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IQ6 Series Platform"
+    },
+    {
+      "id": "1abab490-7e5c-353d-88ac-0cead558ec66",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8815"
+    },
+    {
+      "id": "1f87c2cb-1d99-3591-84d2-31aef47a1a01",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "1fa44d2c-0e88-3177-a29a-a930cebc62f8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "21b6e2e0-3e09-3f96-8a96-2f614c3f58b4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6125"
+    },
+    {
+      "id": "22ada542-b52d-3342-9382-e626c68f1997",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QLN1086BD"
+    },
+    {
+      "id": "22f8e62f-0c71-38fe-aecf-17b7dee1ad8f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7675"
+    },
+    {
+      "id": "251dc046-526a-3e9d-a3fb-1d2b390ddb32",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Monaco_IOT"
+    },
+    {
+      "id": "252eae41-5736-36da-b1b8-bb75a2dce0ea",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7675P"
+    },
+    {
+      "id": "29a79e9c-6ab3-3013-ace7-698a09b97413",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "2a3d992a-5e9c-3e54-b901-6d53e92165ba",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6200"
+    },
+    {
+      "id": "2a5daf59-6ec6-333b-a058-51c33fb4ad0b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "2cdbade8-1ac3-3dad-8707-d7346ab7b2e9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1096"
+    },
+    {
+      "id": "2d07161f-74b7-33ed-b9c9-52adaedff312",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "2d53c50a-2e23-3710-b3e0-c1437f2f93b9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X75 5G Modem-RF System"
+    },
+    {
+      "id": "302f4d66-5440-3d69-b356-f5b8413b67d5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6698AQ"
+    },
+    {
+      "id": "303230f7-9402-3433-874a-c8eedffe61ca",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SRV1H"
+    },
+    {
+      "id": "35d43f0e-4298-3267-9d16-cd98d39a6d96",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "396d57f6-b18a-31c9-aad7-6c559c528c80",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8695AU"
+    },
+    {
+      "id": "398b7e21-d85c-3f4d-8539-b8e32d0f1a3d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6595AU"
+    },
+    {
+      "id": "39ce435b-93e2-38fe-9f6d-f23289f337e4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SXR2330P"
+    },
+    {
+      "id": "39d997d2-e7a6-3546-9ae4-1c56280b8e50",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8635"
+    },
+    {
+      "id": "3bc81509-9e68-38a0-a648-6e2d6364824f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8295P"
+    },
+    {
+      "id": "3c4f0f25-697e-3933-9bb5-6680bbfb26cd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6450"
+    },
+    {
+      "id": "409ee4bb-ffad-3257-aea6-881ea6bbbdb2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6391"
+    },
+    {
+      "id": "42290c07-1c40-373c-bf7a-6b74635da954",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QAM8295P"
+    },
+    {
+      "id": "4248fa36-ff96-31e0-92af-e04338e1d2b5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QAMSRV1H"
+    },
+    {
+      "id": "44042b11-6e16-33ff-9326-6d2d88474078",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SD865 5G"
+    },
+    {
+      "id": "4414c6e7-5a7c-35e7-94af-ed2ffd0eabe6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC1 Platform"
+    },
+    {
+      "id": "444f2df0-9d2c-3506-b00c-0e440588fb29",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA6155P"
+    },
+    {
+      "id": "45400ad3-7e9c-35bb-88fc-3f90b8123a57",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM2290"
+    },
+    {
+      "id": "4a032910-1db1-3f33-83d3-83666913a421",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Pandeiro"
+    },
+    {
+      "id": "4b065ff5-3be4-3a1a-b28f-97e156447e67",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "4d114f85-e1f8-357b-a097-5f8f81e20df0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "4d1f75a2-ba11-3606-9955-a92da0754219",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 778G+ 5G Mobile Platform"
+    },
+    {
+      "id": "4d358116-ab85-3edd-a055-068b26cb3ca3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "LeMansAU"
+    },
+    {
+      "id": "4dd04cd7-79bb-3083-8de5-178e31d3b660",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6755"
+    },
+    {
+      "id": "4e65a9b9-4719-3cb6-92c1-d12c89bff9a9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Themisto"
+    },
+    {
+      "id": "5142fcbf-9970-39b5-88a0-a3e6aff0a26a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 3 Mobile Platform"
+    },
+    {
+      "id": "5255a066-104c-3e26-9781-fa01f1275efe",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "5369d9d2-ebaa-3edb-a4c2-25a45faaf3dc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6574"
+    },
+    {
+      "id": "54a9d928-560e-3b94-97f1-fec1ece578ce",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8770P"
+    },
+    {
+      "id": "54b3e2ef-162b-37a4-a954-932f629ca94f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6650P"
+    },
+    {
+      "id": "564b9cf6-2434-383c-9417-bea0716dd022",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 4 Gen 2 Mobile Platform"
+    },
+    {
+      "id": "570b6f97-b169-3720-a977-5bd88a9127be",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8635P"
+    },
+    {
+      "id": "5824e37a-117f-3ce8-9b5c-c50af0969220",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "59f59717-604f-30d1-9ca0-1022fe28f7c5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7s Gen 3 Mobile Platform"
+    },
+    {
+      "id": "5a481329-aa37-39ea-ada3-b2920ddb5c24",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378"
+    },
+    {
+      "id": "5bdd49ba-cb13-3ea8-8d51-998ab98eaca0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "5c7b2d1a-da75-3876-8e51-4eec4ad0b547",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Gen 3 Mobile Platform"
+    },
+    {
+      "id": "5fca5283-b3f5-3e2b-aaf4-d2b34df272d5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 778G 5G Mobile Platform"
+    },
+    {
+      "id": "62d1c70f-58ac-33fe-a0d2-c4dba2234485",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9340"
+    },
+    {
+      "id": "6304ab2f-5237-3708-a960-0e6c62cea4f4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FWA Gen 3 Ultra Platform"
+    },
+    {
+      "id": "650d82b7-cbc8-3d5c-b531-9c3a35c0925f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 460 Mobile Platform"
+    },
+    {
+      "id": "655f6b49-deb0-3976-98e1-08da614705ed",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IQ9 Series Platform"
+    },
+    {
+      "id": "66bdc76e-dd95-387c-959f-6026ade8a852",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon Auto 5G Modem-RF Gen 2"
+    },
+    {
+      "id": "670e2d21-0177-3ef1-a1e5-a5fc7a40d1d8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Elite Gen 5"
+    },
+    {
+      "id": "67698ebc-f39c-375c-89d1-bf5baab971c4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 4 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "67b9b2dc-680e-3411-9306-0fd65595971d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "682e00fc-5e49-3626-ac52-e1e41d24e9ee",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "G2 Gen 1"
+    },
+    {
+      "id": "68cc11ad-3dee-36ca-bc77-4ba7beed3185",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8810"
+    },
+    {
+      "id": "6bdc40d3-88c9-362d-8758-c5feb26d3890",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8650Q"
+    },
+    {
+      "id": "6c7925a5-104c-3eed-843e-7baecf58933a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6650"
+    },
+    {
+      "id": "6cfa9cd2-434a-30d9-82b6-00322e432381",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Palawan25"
+    },
+    {
+      "id": "715bf60a-07ec-3b5a-891c-867a0992442a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9335"
+    },
+    {
+      "id": "71d293e1-9f0e-35ab-bd9a-af7d85f7bc31",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7325P"
+    },
+    {
+      "id": "72c5d303-f33a-32c8-97ad-3e5b2b47a688",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "72e54756-fc5c-324f-8b5a-fb845ad8e6f9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCC710"
+    },
+    {
+      "id": "73c301b5-de92-327f-9779-a00b6e510019",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "CSRA6640"
+    },
+    {
+      "id": "76ac48fe-ac41-3fb6-9462-28506acbf49f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "78c58e42-2864-35b0-bdff-77921b07ed4a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7861"
+    },
+    {
+      "id": "78e905a2-829d-3d1e-bdfa-f846ee435c6a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QEP8111"
+    },
+    {
+      "id": "7d154ca1-4ef7-3593-9a56-1bb7560d8ea1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1086"
+    },
+    {
+      "id": "7fb33789-6995-3fbe-af17-65f6de18e1ae",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SRV1L"
+    },
+    {
+      "id": "7fee1894-c778-3587-b103-bfc2734e21d1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6678AQ"
+    },
+    {
+      "id": "804eba4d-a797-3ccb-9361-c2a1d56f141c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "81eb91a5-52a5-38ba-bd9c-ac8a53ffb959",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1+ Gen 1 Platform"
+    },
+    {
+      "id": "82f70599-312c-330d-a08e-1c84255169dd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 480+ 5G Mobile Platform"
+    },
+    {
+      "id": "83f933c2-0e25-3e1e-9838-053afd2de4ba",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "8447838c-e33c-3bbf-b95b-759f6794af4e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SW6100"
+    },
+    {
+      "id": "84d1d823-79e9-3510-9e2b-a064045e2cfb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XRV9209"
+    },
+    {
+      "id": "859cdd9d-fdc8-324a-964e-55f796abbc87",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8750P"
+    },
+    {
+      "id": "86038aac-6c6a-3b8c-8acb-f1a7c60338da",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QMP1000"
+    },
+    {
+      "id": "87fad08c-989a-311c-b402-528213793a70",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8155P"
+    },
+    {
+      "id": "8c747877-f6ea-38c0-83e9-c0e153f6372a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X35 5G Modem-RF System"
+    },
+    {
+      "id": "8efa22be-a172-3425-977e-1057820bb462",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8145P"
+    },
+    {
+      "id": "8f3ebb78-25b7-3889-94a2-4036f81fe40f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7881"
+    },
+    {
+      "id": "928284ef-036e-33b8-96f2-a0bb9f96b9be",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 888+ 5G Mobile Platform"
+    },
+    {
+      "id": "92a1a39a-f1f3-3757-b1a8-8e4373733000",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7880"
+    },
+    {
+      "id": "93ef4996-b6af-3b35-bb98-d8ad4baf128d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6174A"
+    },
+    {
+      "id": "9552e75e-10b9-3483-9e1b-ae21f42014a9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "987eb61e-5392-3149-812f-c3a49dc045c7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6274"
+    },
+    {
+      "id": "997c45de-f984-358a-bb93-32a00e6a503e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Robotics RB2 Platform"
+    },
+    {
+      "id": "9bcc5fbc-eef0-3841-91d0-f9c2816814b2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA7255P"
+    },
+    {
+      "id": "9dae7fca-db5b-3609-aa47-95b8dfbc7fb7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8540P"
+    },
+    {
+      "id": "9e1e5f9b-4aa3-30ff-b9a7-2405be9e80ae",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA6145P"
+    },
+    {
+      "id": "9ecfaea2-bbf1-3788-bbda-95efeb7e2f59",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8620P"
+    },
+    {
+      "id": "a1f80846-174f-3ca9-b836-5ad0f1f6872d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 480 5G Mobile Platform"
+    },
+    {
+      "id": "a266d4ce-eb6e-3c5a-aa20-96d3f8e5a9fb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Elite"
+    },
+    {
+      "id": "a305d224-2129-3583-b85e-1a2f20ef612f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IQ8 Series Platform"
+    },
+    {
+      "id": "a6c8d95e-6a0e-353f-825a-25d600de0404",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "ab639065-9a45-337f-90b8-87c8d9aad47c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 782G Mobile Platform"
+    },
+    {
+      "id": "ac4f8c93-43bc-3eb4-9ae4-3de26266670d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Milos"
+    },
+    {
+      "id": "b160fd87-1fc6-3766-9ffa-e0be843e6cb3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QFW7124"
+    },
+    {
+      "id": "b3383123-be66-38a4-936d-607305c0d61d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8195P"
+    },
+    {
+      "id": "b3b1371e-bab3-3933-93f9-3ccecb7492d1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "CSRA6620"
+    },
+    {
+      "id": "ba4205d8-0dc9-38f7-a74f-2e657ff1131b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 865+ 5G Mobile Platform"
+    },
+    {
+      "id": "ba5825b1-3893-3217-82e4-155fea9211d6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6800"
+    },
+    {
+      "id": "bbc0b188-6ae6-39e0-9f2a-c00bb3baa263",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6688AQ"
+    },
+    {
+      "id": "bbc824b1-d2d0-3ae6-bd3f-aea6e955831c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8255P"
+    },
+    {
+      "id": "bea394e7-e6d9-39ee-a88a-c5ac3d208533",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "c0348d26-df54-360c-b231-b7e688dad39f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9395"
+    },
+    {
+      "id": "c2c7de50-c5a5-3440-91bb-30126bb22fff",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6584AU"
+    },
+    {
+      "id": "c2f8441f-b905-35b2-a638-e0caef7343e7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SW6100P"
+    },
+    {
+      "id": "c39b5d84-6e2e-36fb-baed-cd943beb4bdf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SRV1M"
+    },
+    {
+      "id": "c3acad4e-156f-3f01-ae44-ed9babf53c3f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA7775P"
+    },
+    {
+      "id": "c3cd926e-e8d8-31b5-b88c-4bd36036ae9b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "c49b938b-c6c2-3780-9562-a74c56713643",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QAM8620P"
+    },
+    {
+      "id": "c5b7823e-817a-3a32-8f47-ed9eda699ca4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 690 5G Mobile Platform"
+    },
+    {
+      "id": "c87b6cff-b296-3c5a-bc46-e8d0f6cf1072",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA6150P"
+    },
+    {
+      "id": "c8d54f1f-f5f4-316d-8eb8-b569bebbf61f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6595"
+    },
+    {
+      "id": "c8e07668-7fd7-3226-a4aa-389875d649da",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6797AQ"
+    },
+    {
+      "id": "c9e4af93-c168-31bf-8642-d1c9427ac2ab",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8337"
+    },
+    {
+      "id": "cad9d619-1720-3003-ab83-3a97ef71c1fb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SXR2350P"
+    },
+    {
+      "id": "cfc0d741-7d4f-3a8e-b6ab-d51863957f92",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 4 Mobile Platform"
+    },
+    {
+      "id": "d667912b-3d41-3faa-8764-bba50a85d5a4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "d6f7a607-da9c-39fe-bc1d-b04938bc83cf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1083"
+    },
+    {
+      "id": "d7a7236a-b312-3492-8f8d-9e833bcbe056",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X32 5G Modem-RF System"
+    },
+    {
+      "id": "d7a854fd-cca6-3184-9ffb-8ea504c92589",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "d95072f1-62ea-3984-9e94-4a174fabf172",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "d9d1a4e9-49ef-314c-b789-0e214adf14d5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X55 5G Modem-RF System"
+    },
+    {
+      "id": "db6acd0d-7ae9-356e-9ab0-e05a02979d32",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "dbc217b7-d61c-3f97-a69a-66852efb0014",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7435"
+    },
+    {
+      "id": "dd5d3c9e-e9e9-3350-aa2a-e3973c62825b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QAM8397P"
+    },
+    {
+      "id": "df3be0fd-b0c0-3b77-86f0-12460713818f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X53 5G Modem-RF System"
+    },
+    {
+      "id": "dfc7ef67-17ff-320d-b45d-7c1b6d7aee30",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QAM8255P"
+    },
+    {
+      "id": "e04ab727-591f-3dd7-a64c-814a6dfec094",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 662 Mobile Platform"
+    },
+    {
+      "id": "e0abd4c6-2c7a-3998-8aa7-5b75802c4239",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X72 5G Modem-RF System"
+    },
+    {
+      "id": "e0b9cb93-44b7-32d1-b2cc-ef6ff4585de3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c+ Gen 3 Compute"
+    },
+    {
+      "id": "e1970626-7279-38cd-ab1d-a7c0e17206ee",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1095"
+    },
+    {
+      "id": "e1e08547-2e57-348e-a920-4493720b6531",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QPA1086BD"
+    },
+    {
+      "id": "e2b77f61-33a7-35db-bd10-dcab3e1d9faa",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "LeMans_AU_LGIT"
+    },
+    {
+      "id": "e69848ff-7125-3ba8-8dde-3affcd810544",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 870 5G Mobile Platform"
+    },
+    {
+      "id": "e6c6a998-549e-3b9c-b8a9-011940dbb272",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA9000P"
+    },
+    {
+      "id": "e95a393d-d01f-3097-be10-d26874868b1c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 865 5G Mobile Platform"
+    },
+    {
+      "id": "e98342a4-1d41-3786-92bd-a263de6c78ff",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3980"
+    },
+    {
+      "id": "e9fdceae-13d0-346a-93cd-55cd64509b5f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7635P"
+    },
+    {
+      "id": "eaac15c7-d940-34f2-a781-19e75218c289",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 695 5G Mobile Platform"
+    },
+    {
+      "id": "eb12fd75-e115-3daa-8740-982283d9f849",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon XR2 5G Platform"
+    },
+    {
+      "id": "eb4852da-35c3-302b-9071-db5c34a6ad9f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "AR8035"
+    },
+    {
+      "id": "ec1161e8-4e17-35f2-8278-6dc5b2d97b33",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SAR1165P"
+    },
+    {
+      "id": "ec6781b2-8b2d-36ae-8c0d-b7b7e1fb674c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7860"
+    },
+    {
+      "id": "ec9ebbf0-30b4-312b-b64d-5d5350affa0e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "f1bd77d8-0272-316f-b434-cb7de247681b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "f329c9d4-c4dc-387e-9148-905fbd2a2093",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8081"
+    },
+    {
+      "id": "f3737c11-1d6d-3a0e-a45e-ff5326c2d03e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XRV7209"
+    },
+    {
+      "id": "f46e2f4a-6968-3a1a-9767-115de96900b5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon XR2+ Gen 1 Platform"
+    },
+    {
+      "id": "f530ac1a-4da3-39ef-bcd1-91df900ffc31",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QPA1083BD"
+    },
+    {
+      "id": "f8dd90f8-2333-3493-8d0e-6528bba54527",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6696"
+    },
+    {
+      "id": "fa8d4439-3c25-3ee0-ae68-e373206a0023",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "fc5e90c1-fb0d-373e-92f2-aefa8506e89b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QAMSRV1M"
+    },
+    {
+      "id": "fcf8bd86-c619-337a-aa4a-83f20cf6ed93",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Netrani"
+    },
+    {
+      "id": "fe7372d2-7541-3ee4-8414-ac4fc572f5cd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "cba6fbd6-8c70-32af-87c0-8640c605bea9",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209225.json b/advisories/2026/04/EUVD-2025-209225.json
new file mode 100644
index 0000000000..8e9d701883
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209225.json
@@ -0,0 +1,227 @@
+{
+  "id": "EUVD-2025-209225",
+  "enisaUuid": "2b3edcc1-a841-336a-bc52-c272f4928842",
+  "description": "Memory corruption while preprocessing IOCTL request in JPEG driver.",
+  "datePublished": "Apr 6, 2026, 6:33:05 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:05 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-47390\n",
+  "aliases": "CVE-2025-47390\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "1864d74c-82b9-374f-b76e-5c0e45acd8b9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "1916fb78-2703-3b70-91a6-2ba2a55471b2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "1c11cf13-b564-3c9b-89f8-4a70c0693604",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "289ba616-7925-34b1-b671-aa7c7cd6b58c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "2d6ecfa2-363f-34b7-a359-3c6e04af2bef",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "30696202-10f1-320b-bdbb-ef8526fa9c5c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "388bab95-57d9-33e3-985c-03a206ddc0e4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "3bf05e1a-0e7b-36bd-8c0b-6be4bdefa5d1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "3f3825e4-3c98-3a0c-91f4-3184352105d4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "42048770-4fbd-3081-8fcb-21a14d5a1796",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "425ecb58-770d-38ec-bb2c-18f1320869fd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "51257a34-69e2-3478-875b-0f564a204871",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "524ce2f2-f8da-371d-bce9-fb8b04a7da9c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "5b306965-a1be-3d21-9f6f-a60e0a245e93",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "5c6c6284-1664-34a2-a386-751502680921",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "6f075b2e-1ee0-3471-aaf4-5c6ca0437183",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "80252e4e-e81e-3237-bd2a-6cad1787fa83",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "862addd9-69ff-33fc-8a7b-1f1ec118a86c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c+ Gen 3 Compute"
+    },
+    {
+      "id": "90d17645-6de9-3880-95e8-1fef10bde77f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "9bdc0730-d385-3e9f-8398-ce179e7a01b7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA0000"
+    },
+    {
+      "id": "b17a2a9b-3b98-30e2-b2b1-d97cb75ac5ef",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 3 Compute Platform"
+    },
+    {
+      "id": "b37ba4e0-bce5-3fba-9ce3-5332db749a67",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "c11d687d-99a9-3b5e-a50c-5cceda8c632c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "c3c54493-d470-32d1-b6d8-963b0272bf15",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "c6fe7b39-9084-3520-bbdf-35c4b41a71a4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "d92c5b34-2f16-345c-96ab-a48ecd6d3f59",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "de144220-b32d-33bc-8508-9e5bfa2a481b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "ebe6676e-78f6-3a26-8a12-af5e3ad2ecf5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "f9eac333-afdb-3982-971e-8d8f6641c5a0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "192bac0b-030c-3d18-a035-d05c3bf6c71b",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209227.json b/advisories/2026/04/EUVD-2025-209227.json
new file mode 100644
index 0000000000..ad9f9ac201
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209227.json
@@ -0,0 +1,717 @@
+{
+  "id": "EUVD-2025-209227",
+  "enisaUuid": "b04125bd-e02c-3fd9-8d73-cf9c36757553",
+  "description": "Memory corruption while processing a frame request from user.",
+  "datePublished": "Apr 6, 2026, 6:33:05 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:05 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-47391\n",
+  "aliases": "CVE-2025-47391\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "00c7b3e4-fa70-3caa-a94e-2fe7690de1be",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "013a3442-f8b2-346f-b55c-a270643cb271",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "022c759b-fe68-3603-bdaf-c3f3cb2cec65",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "0b2e6a9b-719b-3480-9d99-4de3da6e7d1d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1 Gen 1 Platform"
+    },
+    {
+      "id": "0b9adf28-ef5b-3442-803c-3a9c592ab175",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Monaco_IOT"
+    },
+    {
+      "id": "0e24d0c9-77b0-36b8-9669-dc5404ca1b72",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7675P"
+    },
+    {
+      "id": "10da0524-bfe0-31c2-8096-689e918e8ff9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8620P"
+    },
+    {
+      "id": "126e1d58-2df8-37d5-a781-9ac79666a81b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "12ad9856-936f-3665-8a33-7c8c2eb59ac5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "1652b852-c819-32e1-96ae-efc9299a2030",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7635P"
+    },
+    {
+      "id": "1883e589-4392-3471-899e-f7eb18c22f84",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QAMSRV1M"
+    },
+    {
+      "id": "1c20ff47-f6a3-3346-bd4c-4fadce8ce620",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Gen 2 Mobile Platform"
+    },
+    {
+      "id": "20eceb9f-3154-31e0-a359-536e68605e80",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Gen 3 Mobile Platform"
+    },
+    {
+      "id": "2136adde-568d-3dfc-9936-56bb7d6ac3f2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9371"
+    },
+    {
+      "id": "2317ccdb-24e5-3af0-86ae-b8f1d1aa96fc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCS4490"
+    },
+    {
+      "id": "2623be5b-c374-3610-ad63-7e160115c2eb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "2da5319e-07a7-3b00-889c-b4a724cc3a58",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8475P"
+    },
+    {
+      "id": "33122e5e-f5cc-39fb-b83b-8a10c9775b71",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6678AQ"
+    },
+    {
+      "id": "36d3ce95-f717-380b-85a7-bf67b903adec",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "LeMansAU"
+    },
+    {
+      "id": "385d952b-0a31-310a-bfb9-73cd7d3c6125",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6450"
+    },
+    {
+      "id": "38bf2e3d-e8aa-3985-8c6c-38b69d0cf734",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SRV1M"
+    },
+    {
+      "id": "3d561734-6ee4-30cb-b75f-52459f8763f6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IQ6 Series Platform"
+    },
+    {
+      "id": "4336e28b-c57c-30bd-9e82-6e7352fae81c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9390"
+    },
+    {
+      "id": "44745375-3730-388f-a45e-2035ec35964b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "521d4356-8c87-35fc-8c25-bcf41c8c3e7f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Milos"
+    },
+    {
+      "id": "526e73d8-582d-3b89-997f-cbf3c6523a00",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "5773b941-c79b-3e48-90d3-0cf3621aa0e9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Orne"
+    },
+    {
+      "id": "5d6939ac-ab49-36eb-97be-1bc23f2d404b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8255P"
+    },
+    {
+      "id": "629d8cdd-20ac-3f08-a75c-f83c64bab665",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "674391da-1058-39d2-a0c3-7348eb4d6c42",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6200"
+    },
+    {
+      "id": "6980b869-230a-3ab0-924e-0b759d5a74c4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QAMSRV1H"
+    },
+    {
+      "id": "69fed5e0-602d-33b8-a07e-df390bf33017",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "6a1dac02-5eab-3570-934a-af0f7b9657d2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7s Gen 3 Mobile Platform"
+    },
+    {
+      "id": "71b662d9-f8b9-3ce1-90a9-22b5d7876ef1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6595"
+    },
+    {
+      "id": "73b58879-1281-3d82-9464-5f909de6056d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "74d40f1a-1991-3910-a7c3-c59faa6763a1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Pandeiro"
+    },
+    {
+      "id": "77a7a0fc-d20d-3811-9d88-02c3527da74f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QAM8255P"
+    },
+    {
+      "id": "793ba677-caaf-3916-9893-ee2a24216183",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Elite"
+    },
+    {
+      "id": "7fb5dafa-884a-3f6c-8109-aafbf73f7a17",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA7775P"
+    },
+    {
+      "id": "81340ce9-c53a-3a04-b9f4-3333cf7860de",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 4 Gen 2 Mobile Platform"
+    },
+    {
+      "id": "85c9e413-f2a2-385a-867d-a00afbd1d0ba",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8810"
+    },
+    {
+      "id": "8b213ae2-6617-366e-ad5b-9da577db226a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6595AU"
+    },
+    {
+      "id": "8b563564-3fa9-3678-bf45-2f92225c9095",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7861"
+    },
+    {
+      "id": "9139bcbe-bc96-3e92-a7d1-6d9284fbcb4a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 4 Mobile Platform"
+    },
+    {
+      "id": "943aa5c4-4acc-37b7-8e8e-3b1179f88a2d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "95296555-2355-3134-a6c0-3cc3074383c9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8750P"
+    },
+    {
+      "id": "9a6f973e-7e91-3b8e-9a6a-ac46ecb507f7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7550"
+    },
+    {
+      "id": "9ad079cc-aea4-318e-895e-f82ee99dffcc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "9b0cf75c-47e2-3472-9a3c-020e06d7cad0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SRV1H"
+    },
+    {
+      "id": "9fbb7797-dc91-3442-ac87-0ebcac0fcc2f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7880"
+    },
+    {
+      "id": "a1ff2f16-ef86-3b00-92b7-24f762e33624",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IQ9 Series Platform"
+    },
+    {
+      "id": "a22a6a3b-bef3-3af2-bb3c-b87f79ad14d7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "a31de534-7285-36d0-94d0-3323e6ed9c28",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8635"
+    },
+    {
+      "id": "a3f9ce12-d85a-33af-9c4c-2bb970c1435b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6797AQ"
+    },
+    {
+      "id": "a4897364-a9ea-3aa7-994a-29013c7b821e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Netrani"
+    },
+    {
+      "id": "a7795534-946c-356b-b715-e439d51d16e9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "a8dfbdda-dc87-36be-8db2-f268d3c52680",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6650P"
+    },
+    {
+      "id": "a8f20772-4bd8-39c5-a23f-f3761784db52",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6755"
+    },
+    {
+      "id": "ab2fb3f5-962e-3c5f-aa8d-42193eb08490",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8695AU"
+    },
+    {
+      "id": "ab328fcc-d010-3d5d-a434-f91a566eab4c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QAM8397P"
+    },
+    {
+      "id": "acedf9f9-b417-340e-8d1d-2759ce7710bd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8815"
+    },
+    {
+      "id": "af519a05-4ac1-3035-bce0-6ea7f51d3a09",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "af8f8d2a-c348-3396-8621-bb6d2a2da85b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6698AQ"
+    },
+    {
+      "id": "b01a2182-316f-36f7-9023-0f151a49754c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "b1db185e-9aa6-331a-8be9-0e289668d79c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "b3e07d3f-0036-3954-9b3b-6cfba91eabab",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6698AU"
+    },
+    {
+      "id": "b533e2be-c0dd-3614-90cb-fdb36edf03ce",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7881"
+    },
+    {
+      "id": "b5450654-0cbf-333e-a3b8-45328ab5783d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6650"
+    },
+    {
+      "id": "b58bbf8c-daba-3b40-ac46-8b01d323d558",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA8770P"
+    },
+    {
+      "id": "bbba7768-de06-369d-93d5-cb704f11b44f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA7255P"
+    },
+    {
+      "id": "bea7ef0f-3d28-39b8-a382-f46f50779be9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "G2 Gen 1"
+    },
+    {
+      "id": "c02c6add-1d2f-3b90-aa5b-6dffb2bb60d8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6391"
+    },
+    {
+      "id": "c543087f-b610-3eac-b26b-487c02c08dbb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 3 Mobile Platform"
+    },
+    {
+      "id": "c54fdea2-7fd0-3ade-83b5-ed8f8c0aaa79",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SA9000P"
+    },
+    {
+      "id": "c601433e-aa2c-31fc-8fc2-61749d67cef3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7860"
+    },
+    {
+      "id": "c98c33f0-2ed9-3d9c-955e-e12ba3288467",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "c9f6a701-0e33-3d10-8d81-baba9bac6662",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7+ Gen 2 Mobile Platform"
+    },
+    {
+      "id": "ccae6e6f-caf1-3244-9011-6a67f3d24eec",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9012"
+    },
+    {
+      "id": "cf456931-0c1b-3982-baff-987c849dfd23",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7675"
+    },
+    {
+      "id": "cf5a3d19-f4d4-36f0-bc6d-00bb17fcbb64",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SD 8 Gen1 5G"
+    },
+    {
+      "id": "d04884af-345e-344f-b2d6-7a269675ae41",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8+ Gen 2 Mobile Platform"
+    },
+    {
+      "id": "d04fd055-ceb7-3f92-a55e-5acbc75bb90b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCS8550"
+    },
+    {
+      "id": "d1a7a3c5-22d1-350b-9e3e-4990d4bc4b69",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM4490"
+    },
+    {
+      "id": "d5910c3f-e948-3edd-b961-14f4e0a282d7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "d78f429b-a93f-3b7f-bfa0-173648b50151",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IQ8 Series Platform"
+    },
+    {
+      "id": "e331c037-c2f0-331f-905a-aa3fc2457a79",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8635P"
+    },
+    {
+      "id": "e4e70fc6-e78a-3f6e-a16b-3d7574119e1b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7435"
+    },
+    {
+      "id": "e6e5e5cd-534e-340c-bdf2-2b06e3b07480",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9395"
+    },
+    {
+      "id": "e74731ea-5527-3c4f-97fd-5bac2c348470",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "e771cfdf-01d8-3dac-bdb7-92158747f1f2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "LeMans_AU_LGIT"
+    },
+    {
+      "id": "e7bcb2a3-5e43-320c-a466-c2a6471e2453",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Elite Gen 5"
+    },
+    {
+      "id": "e80e7f72-c12c-301c-bbfa-7ca1cb401443",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9011"
+    },
+    {
+      "id": "ea23f7d2-8bf7-3969-a944-2d022f270354",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378"
+    },
+    {
+      "id": "f08952a1-6b29-3499-92ad-504a37c0580b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Palawan25"
+    },
+    {
+      "id": "f4d2a20f-6484-39b1-88af-78d42b9db177",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8550P"
+    },
+    {
+      "id": "f53e195e-de7b-392b-8a46-9202aa16b346",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7550P"
+    },
+    {
+      "id": "f9b05272-a6fb-3c41-900f-bbce4d90702c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QMP1000"
+    },
+    {
+      "id": "f9f44297-c90f-344a-be43-6daa9bb7d9ad",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8650Q"
+    },
+    {
+      "id": "fb5403d8-5b02-35f5-9495-1aa9e6c141a2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8+ Gen 1 Mobile Platform"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "cd37abe5-d007-3f41-82ee-54007051339a",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209230.json b/advisories/2026/04/EUVD-2025-209230.json
new file mode 100644
index 0000000000..fbdd28eed8
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209230.json
@@ -0,0 +1,1102 @@
+{
+  "id": "EUVD-2025-209230",
+  "enisaUuid": "00f3693c-fcae-3d42-bc24-2c3bd50e4f08",
+  "description": "Memory corruption when decoding corrupted satellite data files with invalid signature offsets.",
+  "datePublished": "Apr 6, 2026, 6:33:05 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:05 PM",
+  "baseScore": 8.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-47392\n",
+  "aliases": "CVE-2025-47392\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "00687ce4-f311-3ddd-b97f-9ca69cfa6ada",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "052c2d54-ca30-3592-aa33-a028bf605e99",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7860"
+    },
+    {
+      "id": "0a2177a1-f86a-36c5-a477-7b88736bfe86",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM2290"
+    },
+    {
+      "id": "0c18d93b-c3a5-3aa5-a5fb-b58470b62263",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6678AQ"
+    },
+    {
+      "id": "0d1be147-5158-3b4c-94f9-df0e383ed227",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "0e5643e1-366b-3e99-9172-93ae2e283790",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378"
+    },
+    {
+      "id": "0f56491e-c000-321d-babe-4d1905d6c9b7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8810"
+    },
+    {
+      "id": "111ef652-71ff-3120-b1b3-0251857b586e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6797AQ"
+    },
+    {
+      "id": "11c9cc64-adbd-38ca-a04a-29d24367f2ee",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "1383206d-7971-3d9b-b21f-428bfd76dada",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Compute Platform"
+    },
+    {
+      "id": "13a63e3f-b037-36cb-af8f-66ba9a41cbd0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SDX61"
+    },
+    {
+      "id": "19433167-6269-3d5e-9aab-dc4c484e8a5f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FSM20055"
+    },
+    {
+      "id": "1b2c4c8c-a8b3-3dec-a985-2f9cd65e2674",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 870 5G Mobile Platform"
+    },
+    {
+      "id": "1c6fcb64-1957-31a2-9623-60befbb4848b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X32 5G Modem-RF System"
+    },
+    {
+      "id": "1cda0e7b-9d13-3a0b-a9f0-7063644c1308",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Palawan25"
+    },
+    {
+      "id": "1d331101-b25d-3eed-a68c-15996d942cef",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Themisto"
+    },
+    {
+      "id": "1d4b7383-f671-3bb2-a686-9828883e1d30",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 480 5G Mobile Platform"
+    },
+    {
+      "id": "1d9cef97-e95d-3bbe-8d1b-b88bb59f26ff",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "1ffb2bf0-960a-3f7a-a035-14701ed67cec",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 888 5G Mobile Platform"
+    },
+    {
+      "id": "204acdb1-b9b0-3036-a2d7-13f200591f19",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 778G 5G Mobile Platform"
+    },
+    {
+      "id": "20e57815-086d-3766-8727-554a8c925de0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QFW7124"
+    },
+    {
+      "id": "22f5a5ac-93e4-3a71-ac41-4579561e05b0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9340"
+    },
+    {
+      "id": "26ede6ea-36b5-37f0-8e27-16512ac58b2c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7s Gen 3 Mobile Platform"
+    },
+    {
+      "id": "27d363c7-9a32-38e3-89d4-8e774cf0480c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6800"
+    },
+    {
+      "id": "29d9abf2-83c8-3718-b5c3-fd63868e37bf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 685 4G Mobile Platform"
+    },
+    {
+      "id": "2e032a59-aeeb-3901-8f91-fdf9983f0e0c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SD 8 Gen1 5G"
+    },
+    {
+      "id": "2e7058b3-3510-37e3-b572-1660f27a1999",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6024"
+    },
+    {
+      "id": "302d3cbb-4d15-3a23-9f25-077845096619",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "34ea191c-7e49-3d06-b4f1-ed29b6024f62",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7550P"
+    },
+    {
+      "id": "38ce9c57-be48-397a-9942-039021eb98ba",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "38e181ef-7a12-3448-a309-245ff2f417a6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 680 4G Mobile Platform"
+    },
+    {
+      "id": "3a00b264-bc17-3d15-b59a-0e8a34788509",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "3aa93be1-3e52-359e-a143-003c2d7fceb8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6574AU"
+    },
+    {
+      "id": "3ad2bbc5-99df-37c2-bbc4-30ddb41c49cf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6696"
+    },
+    {
+      "id": "3c2d50ae-49b2-32bb-9f83-0e87f3de88cb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "3e04b313-1944-3526-8e4c-6246a3a2aa46",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8081"
+    },
+    {
+      "id": "3e4efa09-28c3-309f-96fc-1dd8fb59459e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SW6100"
+    },
+    {
+      "id": "40947cf7-e521-3d80-b8b5-bd5d51250a58",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Gen 2 Mobile Platform"
+    },
+    {
+      "id": "4770ea83-8d54-352a-9977-a3aa4ea12215",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "481f0d0e-abeb-3c23-a07a-e70678663822",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 888+ 5G Mobile Platform"
+    },
+    {
+      "id": "4af8049a-ebcc-3133-9f0d-3160a956dbc7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6595AU"
+    },
+    {
+      "id": "4de10ad7-c398-39a2-9248-d2c250e1220e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FSM200 Platform"
+    },
+    {
+      "id": "4de4031d-e1d5-32fa-8c3c-e79f663fa6a7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9335"
+    },
+    {
+      "id": "4f821e68-c3f0-39c9-be81-f162cff2a05b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3910"
+    },
+    {
+      "id": "52987c51-be56-34e3-a1ef-089316c90cb4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X72 5G Modem-RF System"
+    },
+    {
+      "id": "54f403df-5e82-3b8b-a91b-52819edecde2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8+ Gen 1 Mobile Platform"
+    },
+    {
+      "id": "55500d4c-f925-3197-8e90-1d2e8911fdad",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6698AQ"
+    },
+    {
+      "id": "57614257-4ac6-36e2-bd20-fbe7de5d85a5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X35 5G Modem-RF System"
+    },
+    {
+      "id": "5912880b-44de-3757-a910-c8edb85c5c41",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8635P"
+    },
+    {
+      "id": "59d4a203-cb44-3723-bb5d-ffc1f090093b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Milos"
+    },
+    {
+      "id": "5a57e98f-019f-3630-9b77-6ac2dbf17231",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 662 Mobile Platform"
+    },
+    {
+      "id": "5bd65738-1144-3b51-888a-5462fd52f218",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7675P"
+    },
+    {
+      "id": "5fad620d-80f2-3bb8-a182-172fb4ade7f7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7861"
+    },
+    {
+      "id": "67426842-f664-3334-8e4e-106b02a8a1b2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X53 5G Modem-RF System"
+    },
+    {
+      "id": "674e03f1-35f9-3eba-9518-8b231a3b812c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM4325"
+    },
+    {
+      "id": "67b42fc9-e384-3e3a-9baa-d38a6fb11d81",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7435"
+    },
+    {
+      "id": "683e7faf-8ed1-390d-b7fd-d6d14a10e020",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9012"
+    },
+    {
+      "id": "697c3ef8-2aa8-3344-b467-7d1ec05a876d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCS8550"
+    },
+    {
+      "id": "6d4936d6-fce1-3363-967d-8f7cbfb11914",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "AR8035"
+    },
+    {
+      "id": "6dd459db-2295-36d2-9173-b446e1553f14",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "CSRA6640"
+    },
+    {
+      "id": "705c4c26-4fc2-312f-8537-47c38a57fe09",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X75 5G Modem-RF System"
+    },
+    {
+      "id": "7534f661-209c-3f08-9f16-6bc8c94cea4e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8475P"
+    },
+    {
+      "id": "75b0852b-bb70-3bbf-8e1c-cfbd7980e97e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 480+ 5G Mobile Platform"
+    },
+    {
+      "id": "75e27a0b-6708-3c54-9984-69517c5e8ac5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon Auto 5G Modem-RF Gen 2"
+    },
+    {
+      "id": "773a1585-3dc7-386a-8f7c-d55af8f5e994",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "77abce0a-f3fd-3eac-b53a-a09e748efa3d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QMP1000"
+    },
+    {
+      "id": "77d5d6ad-977a-321b-9b4c-929144a9fd3b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SDX57M"
+    },
+    {
+      "id": "77d939d9-b346-370a-9c8e-d6c70971f2b2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 4 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "788a0892-b284-37c4-bc3c-49bec08f2db8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6755"
+    },
+    {
+      "id": "79984707-2975-38ee-8248-9be3dcc5729a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "CSRA6620"
+    },
+    {
+      "id": "7a3f52ab-5f2f-3986-aef4-2ed0d7f3cd93",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8750P"
+    },
+    {
+      "id": "7c316a54-3924-3aa3-8509-b3d4db61faf4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCC710"
+    },
+    {
+      "id": "7cfb3724-a082-3613-a4dd-6a5dd505c413",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCS2290"
+    },
+    {
+      "id": "7f027ea5-f241-32fe-96d2-ba2bc28042e0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8815"
+    },
+    {
+      "id": "82f83c24-3b4d-38fa-b501-a59db1f16bfe",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Orne"
+    },
+    {
+      "id": "83bba652-4a48-3cc6-ab33-c7a8a6632a51",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6650P"
+    },
+    {
+      "id": "83cff788-7396-3f89-b4b2-89070be73990",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 778G+ 5G Mobile Platform"
+    },
+    {
+      "id": "84bf5290-94c2-3f3b-8732-2d69e77fddb5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8635"
+    },
+    {
+      "id": "860ceb44-0991-3206-82fd-d6c1388a184d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "G1 Gen 1"
+    },
+    {
+      "id": "870f76da-932f-3495-a4c4-f3aadd601d70",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "8745ab18-5398-3123-955e-ee81dfef2785",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X55 5G Modem-RF System"
+    },
+    {
+      "id": "8aa87a43-9af1-3e65-8d7f-4f0678b03eea",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8337"
+    },
+    {
+      "id": "8d331020-c31c-346d-957d-df367680c7da",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon W5+ Gen 1 Wearable Platform"
+    },
+    {
+      "id": "8fbc9630-7a6e-3106-a546-71bd46233323",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6225P"
+    },
+    {
+      "id": "8fd40071-fe14-3cf8-8670-0b5864b2c066",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 865+ 5G Mobile Platform"
+    },
+    {
+      "id": "90f07b75-aca6-3c97-9fc9-f0ef6626145a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9371"
+    },
+    {
+      "id": "9357503b-042c-3704-ac36-58305474ae0d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SD662"
+    },
+    {
+      "id": "94278833-a6c1-3e62-b15a-0c65be7754e4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9341"
+    },
+    {
+      "id": "97b37143-a57d-35a3-b0a9-6581b92cca46",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6174A"
+    },
+    {
+      "id": "97b6cad2-aeb2-3b3f-892d-c5c11acacfb3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7881"
+    },
+    {
+      "id": "995bd3f3-b01f-3542-80cd-0c23793976a4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 690 5G Mobile Platform"
+    },
+    {
+      "id": "9a59cc69-7333-323d-bcf9-7cd105939371",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X70 Modem-RF System"
+    },
+    {
+      "id": "9d6c5f88-7ab1-3a4a-ac00-36c2330ebf0c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9360"
+    },
+    {
+      "id": "9e7e6461-5a4d-3534-9f1e-8143316da2f0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QEP8111"
+    },
+    {
+      "id": "a2054ac2-d119-3af2-854e-17d5ea6d0ca6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "a31e385a-e9a4-35b5-8730-315a3b1f872f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 4 Gen 2 Mobile Platform"
+    },
+    {
+      "id": "a39993bd-8257-3007-b3ce-fed0d3310c0c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7675"
+    },
+    {
+      "id": "a3a3c2d9-19fd-3b00-8fc7-e1fc23b3f5e8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "a4b07282-c6b9-3962-beb3-088abfc762a7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6688AQ"
+    },
+    {
+      "id": "a61c0e5a-14d0-3803-99f8-55a5c10d993a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 4 Mobile Platform"
+    },
+    {
+      "id": "a687cbd3-c302-396b-b00c-96f89e5b44b3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8650Q"
+    },
+    {
+      "id": "a6c0ef55-fb2d-3c51-915d-3a42ff330895",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 460 Mobile Platform"
+    },
+    {
+      "id": "a8f1ed7c-65e0-3868-9a36-2c3550da717d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8+ Gen 2 Mobile Platform"
+    },
+    {
+      "id": "aa26dd0c-6a1c-3694-a99e-12c2784f5899",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "af420725-823a-3afd-9771-3cf65369e7a7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6584AU"
+    },
+    {
+      "id": "b0d3399a-5976-3a6d-8c5e-bc80fca9dcf3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Netrani"
+    },
+    {
+      "id": "b1b74f95-96e1-3b8b-8b28-289483aa6879",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X65 5G Modem-RF System"
+    },
+    {
+      "id": "b1c8009d-c42d-3054-8e8b-5b65215e5cda",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X80 5G Modem-RF System"
+    },
+    {
+      "id": "b32b3900-c6a2-3ba3-a5d4-dbba38beadf9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "b33e5727-7004-3a67-b040-0d5d436b8dbc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SW6100P"
+    },
+    {
+      "id": "b7e7ad30-d745-3736-b590-90c214bea9cf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "b9a08cb1-5d04-3f7e-bdd4-a99c026d47ae",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 695 5G Mobile Platform"
+    },
+    {
+      "id": "ba6f56fa-52ec-356f-9cc6-46221c2f9c94",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Gen 3 Mobile Platform"
+    },
+    {
+      "id": "bc460990-b5ff-3407-b99c-ab4af66f05a3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SW5100P"
+    },
+    {
+      "id": "bc582145-b338-3605-bf45-0ce64c5d21f4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7635P"
+    },
+    {
+      "id": "bf83ec2b-1892-30c5-ae0b-8968a1ece1a2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCS4490"
+    },
+    {
+      "id": "bfbf8adc-c40c-38fe-a149-9285205709fa",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "c0398544-af56-35a8-8bc0-31c2d7c38611",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6250"
+    },
+    {
+      "id": "c0b12262-40d9-3f64-90d8-d215c255a0bd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Robotics RB2 Platform"
+    },
+    {
+      "id": "c5b6761f-e3ec-3fb2-ad8e-567c08de15ed",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7550"
+    },
+    {
+      "id": "c6419be0-dfcb-3119-a562-510aa95ffee5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SW5100"
+    },
+    {
+      "id": "c7129a4e-6404-38fd-9c30-55e7107a79c6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7325P"
+    },
+    {
+      "id": "c8353248-cf70-3687-9378-e86372157610",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7880"
+    },
+    {
+      "id": "cb7f29af-a524-34ab-a62b-0fac0ef8d2cd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FWA Gen 3 Ultra Platform"
+    },
+    {
+      "id": "cb964f32-1199-3434-8e50-c64dd057e69f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Gen 2 Compute Platform \"Rennell Pro\""
+    },
+    {
+      "id": "cebcdefc-5ce8-3e05-b1fa-ec1ef7237483",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6224"
+    },
+    {
+      "id": "d01b9925-402e-3888-b097-2238bdcf10cd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6650"
+    },
+    {
+      "id": "d8331f1a-20b4-3111-bb74-d8b01a35ded6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon Auto 5G Modem-RF"
+    },
+    {
+      "id": "d86987a0-6a72-3b6b-a14b-4b9fdc74807e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6391"
+    },
+    {
+      "id": "dbfd4597-d893-30e5-aa98-7cb53da38c21",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SDX71M"
+    },
+    {
+      "id": "dcdc7e32-3849-3ea9-a264-0d194c2a9b23",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "dfa741af-9737-3af7-abdc-cd0ec54122ab",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 865 5G Mobile Platform"
+    },
+    {
+      "id": "dfeebcff-5c11-312b-9e26-c8e389162f55",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6574A"
+    },
+    {
+      "id": "e1e1d40b-0dec-3b89-a6ba-b2da7047cd0f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9395"
+    },
+    {
+      "id": "e3687240-bb58-3f3b-a0e0-ea73ef77e11c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6274"
+    },
+    {
+      "id": "e54ccb93-0879-36dc-bf44-f084fb38d8de",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3980"
+    },
+    {
+      "id": "e5a9d7f5-892d-3fba-a7b5-dc1772e98aa1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c+ Gen 3 Compute"
+    },
+    {
+      "id": "e5dcfeda-9791-39e3-a2fc-6e150aba4cb3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Elite"
+    },
+    {
+      "id": "e6ffe6a1-db13-3e4f-b699-7a9eedd8745c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QFW7114"
+    },
+    {
+      "id": "e726ec14-4573-3821-8cdb-1a93653f99ea",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9011"
+    },
+    {
+      "id": "ea10af0c-7c89-37be-8257-4d16a405cf2c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 782G Mobile Platform"
+    },
+    {
+      "id": "ea855166-2dd5-3372-ba96-50a9a7954884",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "eafd4126-62e1-3738-a985-a50f84dc9b2b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9024"
+    },
+    {
+      "id": "ebfc7d9f-caaa-3c56-a7da-32f666774b60",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7+ Gen 2 Mobile Platform"
+    },
+    {
+      "id": "ed274774-4433-3152-b318-3d6a3ae85579",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "edbf4f7b-b7e6-38ae-813e-7f5889d0b3a5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6200"
+    },
+    {
+      "id": "eec79f99-654c-34c9-8adb-2eb748a5e85c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM4490"
+    },
+    {
+      "id": "ef923cee-76de-3b59-8732-8026a57dee96",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 3 Mobile Platform"
+    },
+    {
+      "id": "f048b0db-5ebe-3c66-8996-4d132ed58a9a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8550P"
+    },
+    {
+      "id": "f6d62c8c-b7c7-31d1-907c-f54f35d50b9f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "5G Fixed Wireless Access Platform"
+    },
+    {
+      "id": "f82b694d-ae03-3fb8-8b1a-1eb63eaa2a79",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "f85f4b30-6ff2-3ea2-bfd7-ea406e641c55",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9390"
+    },
+    {
+      "id": "fa55645c-2d55-3a5e-b3f4-9c9b871e6b0a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCS4290"
+    },
+    {
+      "id": "fe8750fe-324b-3b04-9a20-05d83ef11781",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6698AU"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "90b3eb93-d786-3186-87c9-9c09ceff379c",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209231.json b/advisories/2026/04/EUVD-2025-209231.json
new file mode 100644
index 0000000000..65a2f84c42
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209231.json
@@ -0,0 +1,101 @@
+{
+  "id": "EUVD-2025-209231",
+  "enisaUuid": "347e28c5-5f6d-3627-a4d1-a08e8a944c69",
+  "description": "Cryptographic issue while copying data to a destination buffer without validating its size.",
+  "datePublished": "Apr 6, 2026, 6:33:05 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:05 PM",
+  "baseScore": 7.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-47400\n",
+  "aliases": "GHSA-m6mr-p6rr-qvh3\nCVE-2025-47400\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0ea33ffb-5304-39b6-9dbf-a722fe3840ce",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SW6100"
+    },
+    {
+      "id": "16d7b3ce-c9c3-3781-94e5-acdc9a7f5cfc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "1b9f641a-c0bf-377a-bf25-ca6e59f57473",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Elite Gen 5"
+    },
+    {
+      "id": "1c81d0b4-bdaa-3d87-93f4-37a1483dcc3f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Pandeiro"
+    },
+    {
+      "id": "39639f8d-ab35-3d85-80bb-547dd74a42a1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "5c778fc8-1577-3468-a29f-f71d94e0bdd1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9395"
+    },
+    {
+      "id": "5cfc5372-9f68-31f5-b41f-437f53d69f10",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7861"
+    },
+    {
+      "id": "e9675a84-f1bd-3bf9-a187-15d0144e67a2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SW6100P"
+    },
+    {
+      "id": "e977991b-dc37-3c2d-97b5-616b1f09ddc5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "ee6f71e6-c18a-3285-af29-21fe328f99d3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7860"
+    },
+    {
+      "id": "fdd92025-008c-3bae-91ba-06f04431ad9c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Themisto"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "85a8be59-2b5f-3c12-ba6a-2cac75e9c605",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209233.json b/advisories/2026/04/EUVD-2025-209233.json
new file mode 100644
index 0000000000..130b769a33
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209233.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2025-209233",
+  "enisaUuid": "5c5d8c51-9040-3595-9e69-069f58475310",
+  "description": "An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.",
+  "datePublished": "Apr 6, 2026, 6:33:09 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:09 PM",
+  "baseScore": 0.0,
+  "references": "https://linkedin.com/in/thakur-nikhil\nhttps://medium.com/@rajput.thakur/malicious-open-redirection-cve-2025-61166-bf5d708cd241\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-61166\n",
+  "aliases": "CVE-2025-61166\nGHSA-j58g-5hhr-9qhv\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ced06a11-99fc-3525-8125-f35ffd472cfe",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "3a971fb1-7e7a-316b-b1d1-93b7b908b24d",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209235.json b/advisories/2026/04/EUVD-2025-209235.json
new file mode 100644
index 0000000000..6dccb89ae9
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209235.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2025-209235",
+  "enisaUuid": "54439de9-fc39-3989-9d9a-dd1e427216c7",
+  "description": "N/A",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 0.0,
+  "references": "https://source.android.com/security/bulletin/2026-04-01\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-48651\nhttps://source.android.com/docs/security/bulletin/2026/2026-04-01\n",
+  "aliases": "CVE-2025-48651\nGHSA-9wq4-qr6w-vc44\n",
+  "assigner": "google_android",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c39bc1b5-0f18-3d5a-940e-b1e3dfbf603f",
+      "product": {
+        "name": "Android"
+      },
+      "product_version": "Android SoC"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "ae6c8948-48ee-3d7c-be71-cb4493129831",
+      "vendor": {
+        "name": "Google"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209237.json b/advisories/2026/04/EUVD-2025-209237.json
new file mode 100644
index 0000000000..93003835df
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209237.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2025-209237",
+  "enisaUuid": "461456d4-a182-322a-aa0a-d1e77b88bc86",
+  "description": "An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory access, causing a system crash via a malformed RRCReconfiguration message.",
+  "datePublished": "Apr 6, 2026, 6:33:09 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:09 PM",
+  "baseScore": 0.0,
+  "references": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/\nhttps://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-57835/\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-57835\n",
+  "aliases": "CVE-2025-57835\nGHSA-r58x-6wq2-782p\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c9a83808-97b9-37d4-8179-c49e4a89e801",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "246d461d-55ae-3cd6-8a46-199df067bc35",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209239.json b/advisories/2026/04/EUVD-2025-209239.json
new file mode 100644
index 0000000000..e6cbcfe44a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209239.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2025-209239",
+  "enisaUuid": "d0c753fd-2851-3971-91ab-a35cb52eab84",
+  "description": "An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.",
+  "datePublished": "Apr 6, 2026, 6:33:09 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:09 PM",
+  "baseScore": 0.0,
+  "references": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/\nhttps://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-59440/\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-59440\n",
+  "aliases": "CVE-2025-59440\nGHSA-pp8m-48hh-xvpx\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "5d26820d-11ac-3015-8889-cbb031b9017f",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "def29e12-484b-30fc-8fa2-30250e26e3ee",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209241.json b/advisories/2026/04/EUVD-2025-209241.json
new file mode 100644
index 0000000000..a898760c7c
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209241.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2025-209241",
+  "enisaUuid": "21984ea9-9b4a-3bb1-ba6a-a17c22733b06",
+  "description": "An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect Handling of a DL NAS Transport packet leads to a Denial of Service.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 0.0,
+  "references": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/\nhttps://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54324/\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-54324\n",
+  "aliases": "CVE-2025-54324\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "764020b1-6cfd-30ae-9ef8-03c3538cedbd",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "19c9c2d6-cc19-3711-b4f7-c492e81fde43",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209243.json b/advisories/2026/04/EUVD-2025-209243.json
new file mode 100644
index 0000000000..21e5b5ff73
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209243.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2025-209243",
+  "enisaUuid": "51315224-eaba-34c4-96a5-a7bd8b013960",
+  "description": "An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 0.0,
+  "references": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/\nhttps://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54328/\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-54328\n",
+  "aliases": "GHSA-3p7h-7569-cp4p\nCVE-2025-54328\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "34ef710e-74fd-32a6-b375-e0544fa0a923",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "b7eecd23-72b9-37c9-8fc7-7f53fcb3bd60",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209245.json b/advisories/2026/04/EUVD-2025-209245.json
new file mode 100644
index 0000000000..43f40bb59d
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209245.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2025-209245",
+  "enisaUuid": "9744f400-6a7e-34d4-aa06-b0dc460bf172",
+  "description": "An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 0.0,
+  "references": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/\nhttps://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54602/\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-54602\n",
+  "aliases": "CVE-2025-54602\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "a3984339-c76a-3ffd-9045-d175114d49d6",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "5d8fdf80-cdfb-30e2-802c-227c1a49d7c3",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209247.json b/advisories/2026/04/EUVD-2025-209247.json
new file mode 100644
index 0000000000..1fdf671927
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209247.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2025-209247",
+  "enisaUuid": "c71b7d97-fd91-3a63-b3b1-d5e33061e557",
+  "description": "An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) leads to baseband crashes.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 0.0,
+  "references": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/\nhttps://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-58349/\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-58349\n",
+  "aliases": "CVE-2025-58349\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "529ecad1-1777-3852-9c1b-97bd00b0d8a3",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "18d05910-80cb-368a-90c3-eec801c26eae",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209249.json b/advisories/2026/04/EUVD-2025-209249.json
new file mode 100644
index 0000000000..a4eb2ec48c
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209249.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2025-209249",
+  "enisaUuid": "19604ec7-191f-3209-b10e-09255b00015a",
+  "description": "An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.",
+  "datePublished": "Apr 6, 2026, 9:31:35 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:35 PM",
+  "baseScore": 0.0,
+  "references": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/\nhttps://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54601/\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-54601\n",
+  "aliases": "GHSA-q6xr-vv6x-m5gj\nCVE-2025-54601\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "802d073c-2397-366d-8ea5-6959b6b7b0a1",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "c9d7fdb4-63c3-37fb-8855-e67ff135229c",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-209251.json b/advisories/2026/04/EUVD-2025-209251.json
new file mode 100644
index 0000000000..fab6a639e4
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-209251.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2025-209251",
+  "enisaUuid": "5ede6841-50d7-34fe-b726-34ed01061e24",
+  "description": "An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400, and Modem 5410). The absence of proper input validation leads to a Denial of Service.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 7.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+  "references": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/\nhttps://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54328/\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-57834\n",
+  "aliases": "GHSA-pwpp-jvrh-rhmv\nCVE-2025-57834\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "f8131373-bd22-33f4-b71a-48637dcf6155",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "20e5e221-f15d-3e0a-b142-dccfc62b97bd",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-50826.json b/advisories/2026/04/EUVD-2025-50826.json
new file mode 100644
index 0000000000..4d9fe92810
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-50826.json
@@ -0,0 +1,45 @@
+{
+  "id": "EUVD-2025-50826",
+  "enisaUuid": "5ec882c3-9d2a-3090-936c-aa958c397723",
+  "description": "OpenEXR has use after free in PyObject_StealAttrString",
+  "datePublished": "Apr 6, 2026, 5:51:23 PM",
+  "dateUpdated": "Apr 6, 2026, 5:51:23 PM",
+  "baseScore": 5.5,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-57cw-j6vp-2p9m\nhttps://github.com/AcademySoftwareFoundation/openexr/blob/b3a19903db0672c63055023aa788e592b16ec3c5/src/wrappers/python/PyOpenEXR_old.cpp#L109-L115\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-64183\n",
+  "aliases": "CVE-2025-64183\nGHSA-57cw-j6vp-2p9m\n",
+  "assigner": "GitHub_M",
+  "epss": 0.08,
+  "enisaIdProduct": [
+    {
+      "id": "29e95994-c618-36cf-9012-8ace3ffb8712",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.4.0, < 3.4.3"
+    },
+    {
+      "id": "3ad29ab2-1a0f-373b-81a4-7e7c0a0fd5ff",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.3.0, < 3.3.6"
+    },
+    {
+      "id": "99639372-0c3c-3022-9e9d-cacfe75d3d27",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.2.0, < 3.2.5"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "c7aa0351-782d-315a-a190-73f61605c007",
+      "vendor": {
+        "name": "AcademySoftwareFoundation"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-50827.json b/advisories/2026/04/EUVD-2025-50827.json
new file mode 100644
index 0000000000..111043bc94
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-50827.json
@@ -0,0 +1,45 @@
+{
+  "id": "EUVD-2025-50827",
+  "enisaUuid": "16c1676b-9d1d-3a41-b0a5-93290dcb5389",
+  "description": "OpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel()",
+  "datePublished": "Apr 6, 2026, 5:51:19 PM",
+  "dateUpdated": "Apr 6, 2026, 5:51:19 PM",
+  "baseScore": 5.5,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-vh63-9mqx-wmjr\nhttps://github.com/AcademySoftwareFoundation/openexr/blob/b3a19903db0672c63055023aa788e592b16ec3c5/src/wrappers/python/PyOpenEXR_old.cpp#L528-L536\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-64182\n",
+  "aliases": "GHSA-vh63-9mqx-wmjr\nCVE-2025-64182\n",
+  "assigner": "GitHub_M",
+  "epss": 0.03,
+  "enisaIdProduct": [
+    {
+      "id": "13fb147e-84a1-3b61-8502-16b616863b07",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.4.0, < 3.4.3"
+    },
+    {
+      "id": "4f21c108-f71a-3d05-9b18-9ec0d477b649",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.2.0, < 3.2.5"
+    },
+    {
+      "id": "801207d4-d082-3b85-b7f9-4fa2829f95df",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.3.0, < 3.3.6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d8fe6470-9dfb-32f8-affa-b98d653d6331",
+      "vendor": {
+        "name": "AcademySoftwareFoundation"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2025-50828.json b/advisories/2026/04/EUVD-2025-50828.json
new file mode 100644
index 0000000000..813b0077ba
--- /dev/null
+++ b/advisories/2026/04/EUVD-2025-50828.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2025-50828",
+  "enisaUuid": "0a9c4db0-0854-3d56-8b00-a1aed91ca494",
+  "description": "OpenEXR Makes Use of Uninitialized Memory",
+  "datePublished": "Apr 6, 2026, 5:51:11 PM",
+  "dateUpdated": "Apr 6, 2026, 5:51:11 PM",
+  "baseScore": 2.0,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-3h9h-qfvw-98hq\nhttps://github.com/user-attachments/files/23024726/archive0.zip\nhttps://github.com/user-attachments/files/23024736/archive1.zip\nhttps://github.com/user-attachments/files/23024740/archive2.zip\nhttps://github.com/user-attachments/files/23024744/archive3.zip\nhttps://github.com/user-attachments/files/23024746/archive4.zip\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-64181\n",
+  "aliases": "GHSA-3h9h-qfvw-98hq\nCVE-2025-64181\n",
+  "assigner": "GitHub_M",
+  "epss": 0.11,
+  "enisaIdProduct": [
+    {
+      "id": "01802410-d8bb-3189-aad1-28b4410abac0",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.4.0, < 3.4.3"
+    },
+    {
+      "id": "0343912f-f997-3156-b74b-7fcafe7cb293",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.3.0, < 3.3.6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "1bd2aee7-e8ed-3526-a5d3-a090c437ef0d",
+      "vendor": {
+        "name": "AcademySoftwareFoundation"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-17879.json b/advisories/2026/04/EUVD-2026-17879.json
index 1c7da2fcfa..7e6967a473 100644
--- a/advisories/2026/04/EUVD-2026-17879.json
+++ b/advisories/2026/04/EUVD-2026-17879.json
@@ -2,15 +2,15 @@
   "id": "EUVD-2026-17879",
   "enisaUuid": "9d73b2d6-7833-3093-ac99-e770339b09c1",
   "description": "A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.",
-  "datePublished": "Apr 1, 2026, 3:31:15 PM",
-  "dateUpdated": "Apr 1, 2026, 3:31:15 PM",
+  "datePublished": "Apr 1, 2026, 1:18:53 PM",
+  "dateUpdated": "Apr 6, 2026, 7:32:08 AM",
   "baseScore": 8.2,
   "baseScoreVersion": "3.1",
   "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
   "references": "https://access.redhat.com/security/cve/CVE-2026-35091\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2453169\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2453813\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35091\n",
   "aliases": "CVE-2026-35091\n",
   "assigner": "redhat",
-  "epss": 0.0,
+  "epss": 0.08,
   "enisaIdProduct": [],
   "enisaIdVendor": [
     {
diff --git a/advisories/2026/04/EUVD-2026-17881.json b/advisories/2026/04/EUVD-2026-17881.json
index 40a6996cbe..a5b246d10a 100644
--- a/advisories/2026/04/EUVD-2026-17881.json
+++ b/advisories/2026/04/EUVD-2026-17881.json
@@ -2,15 +2,15 @@
   "id": "EUVD-2026-17881",
   "enisaUuid": "588e712f-472a-31dd-b8c4-2004ef618921",
   "description": "A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.",
-  "datePublished": "Apr 1, 2026, 3:31:15 PM",
-  "dateUpdated": "Apr 1, 2026, 3:31:15 PM",
+  "datePublished": "Apr 1, 2026, 1:18:55 PM",
+  "dateUpdated": "Apr 6, 2026, 7:32:19 AM",
   "baseScore": 7.5,
   "baseScoreVersion": "3.1",
   "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
   "references": "https://access.redhat.com/security/cve/CVE-2026-35092\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2453169\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2453814\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35092\n",
   "aliases": "CVE-2026-35092\nGHSA-g4g9-h6f9-v5x2\n",
   "assigner": "redhat",
-  "epss": 0.0,
+  "epss": 0.06,
   "enisaIdProduct": [],
   "enisaIdVendor": [
     {
diff --git a/advisories/2026/04/EUVD-2026-18490.json b/advisories/2026/04/EUVD-2026-18490.json
index 4736c0f52b..ad1c928bbc 100644
--- a/advisories/2026/04/EUVD-2026-18490.json
+++ b/advisories/2026/04/EUVD-2026-18490.json
@@ -1,16 +1,16 @@
 {
   "id": "EUVD-2026-18490",
   "enisaUuid": "b3441fb8-e8a7-3e96-8937-72941c1128c1",
-  "description": "OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attackers can craft commands such as piped execution, command substitution, or subshell invocation to bypass the validateScriptFileForShellBleed() validation checks and execute arbitrary script content that would otherwise be blocked.",
-  "datePublished": "Apr 2, 2026, 9:32:52 PM",
-  "dateUpdated": "Apr 2, 2026, 9:32:53 PM",
+  "description": "OpenClaw's complex interpreter pipelines could skip exec script preflight validation",
+  "datePublished": "Apr 6, 2026, 10:53:48 PM",
+  "dateUpdated": "Apr 6, 2026, 10:53:48 PM",
   "baseScore": 5.3,
   "baseScoreVersion": "4.0",
   "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
   "references": "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvx6-pj3r-5q4q\nhttps://github.com/openclaw/openclaw/commit/8aceaf5d0f0ec552b75a792f7f0a3bfa5b091513\nhttps://www.vulncheck.com/advisories/openclaw-shell-bleed-protection-preflight-validation-bypass\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34425\n",
-  "aliases": "GHSA-rf75-g96h-j3rm\nCVE-2026-34425\n",
+  "aliases": "GHSA-rf75-g96h-j3rm\nCVE-2026-34425\nGHSA-fvx6-pj3r-5q4q\n",
   "assigner": "VulnCheck",
-  "epss": 0.0,
+  "epss": 0.05,
   "enisaIdProduct": [
     {
       "id": "bc374d20-7438-3b6f-9617-b5e354656cf0",
diff --git a/advisories/2026/04/EUVD-2026-18736.json b/advisories/2026/04/EUVD-2026-18736.json
index eb1daac598..141f93cbb8 100644
--- a/advisories/2026/04/EUVD-2026-18736.json
+++ b/advisories/2026/04/EUVD-2026-18736.json
@@ -2,14 +2,21 @@
   "id": "EUVD-2026-18736",
   "enisaUuid": "653aa0cb-457f-3970-9c63-12bd16b6873b",
   "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Limit BO list entry count to prevent resource exhaustion\n\nUserspace can pass an arbitrary number of BO list entries via the\nbo_number field. Although the previous multiplication overflow check\nprevents out-of-bounds allocation, a large number of entries could still\ncause excessive memory allocation (up to potentially gigabytes) and\nunnecessarily long list processing times.\n\nIntroduce a hard limit of 128k entries per BO list, which is more than\nsufficient for any realistic use case (e.g., a single list containing all\nbuffers in a large scene). This prevents memory exhaustion attacks and\nensures predictable performance.\n\nReturn -EINVAL if the requested entry count exceeds the limit\n\n(cherry picked from commit 688b87d39e0aa8135105b40dc167d74b5ada5332)",
-  "datePublished": "Apr 3, 2026, 6:31:22 PM",
-  "dateUpdated": "Apr 3, 2026, 6:31:22 PM",
+  "datePublished": "Apr 3, 2026, 3:15:47 PM",
+  "dateUpdated": "Apr 6, 2026, 6:59:47 AM",
   "baseScore": 0.0,
   "references": "https://git.kernel.org/stable/c/5ce4a38e6c2488949e373d5066303f9c128db614\nhttps://git.kernel.org/stable/c/f462624a6e4b5f1ec2664c2c53e408b2f4fb53e9\nhttps://git.kernel.org/stable/c/6270b1a5dab94665d7adce3dc78bc9066ed28bdd\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23468\n",
   "aliases": "CVE-2026-23468\n",
   "assigner": "Linux",
-  "epss": 0.0,
+  "epss": 0.02,
   "enisaIdProduct": [
+    {
+      "id": "019f1063-014a-3b4b-8424-b198cafec17f",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "4.2"
+    },
     {
       "id": "2991a660-0408-3171-a8f1-6521d0c23913",
       "product": {
@@ -31,6 +38,13 @@
       },
       "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <f462624a6e4b5f1ec2664c2c53e408b2f4fb53e9"
     },
+    {
+      "id": "7725521c-e505-39ba-87a5-a403d5af46f1",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21 <6270b1a5dab94665d7adce3dc78bc9066ed28bdd"
+    },
     {
       "id": "93035473-8385-37ce-bc20-41a57334b6fc",
       "product": {
@@ -38,6 +52,20 @@
       },
       "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <5ce4a38e6c2488949e373d5066303f9c128db614"
     },
+    {
+      "id": "af10a7fc-74d8-3e96-8038-8b58e9cb7b01",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21 <5ce4a38e6c2488949e373d5066303f9c128db614"
+    },
+    {
+      "id": "c5ca393a-a3b4-3d95-88b9-eab14b895923",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21 <f462624a6e4b5f1ec2664c2c53e408b2f4fb53e9"
+    },
     {
       "id": "c85c4a17-04ca-3447-9b9d-efcf4a610cc8",
       "product": {
@@ -51,6 +79,13 @@
         "name": "Linux"
       },
       "product_version": "patch: 7.0-rc5"
+    },
+    {
+      "id": "fd7f15e8-b1c7-334a-9ff0-0fb1f4d6f8fc",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 0"
     }
   ],
   "enisaIdVendor": [
diff --git a/advisories/2026/04/EUVD-2026-18745.json b/advisories/2026/04/EUVD-2026-18745.json
index 48a4fc4dfe..5546473b57 100644
--- a/advisories/2026/04/EUVD-2026-18745.json
+++ b/advisories/2026/04/EUVD-2026-18745.json
@@ -2,14 +2,21 @@
   "id": "EUVD-2026-18745",
   "enisaUuid": "d606eb31-d1f1-3e17-8d2b-664bf41408e9",
   "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN\n\nuart_write_room() and uart_write() behave inconsistently when\nxmit_buf is NULL (which happens for PORT_UNKNOWN ports that were\nnever properly initialized):\n\n- uart_write_room() returns kfifo_avail() which can be > 0\n- uart_write() checks xmit_buf and returns 0 if NULL\n\nThis inconsistency causes an infinite loop in drivers that rely on\ntty_write_room() to determine if they can write:\n\n  while (tty_write_room(tty) > 0) {\n      written = tty->ops->write(...);\n      // written is always 0, loop never exits\n  }\n\nFor example, caif_serial's handle_tx() enters an infinite loop when\nused with PORT_UNKNOWN serial ports, causing system hangs.\n\nFix by making uart_write_room() also check xmit_buf and return 0 if\nit's NULL, consistent with uart_write().\n\nReproducer: https://gist.github.com/mrpre/d9a694cc0e19828ee3bc3b37983fde13",
-  "datePublished": "Apr 3, 2026, 6:31:22 PM",
-  "dateUpdated": "Apr 3, 2026, 6:31:22 PM",
+  "datePublished": "Apr 3, 2026, 3:15:51 PM",
+  "dateUpdated": "Apr 6, 2026, 6:59:49 AM",
   "baseScore": 0.0,
   "references": "https://git.kernel.org/stable/c/efe85a557186b7fe915572ae93a8f3f78bfd9a22\nhttps://git.kernel.org/stable/c/bc70f2b36cf474d5cc8ecbcaf57f3e326fdec67c\nhttps://git.kernel.org/stable/c/455ce986fa356ff43a43c0d363ba95fa152f21d5\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23472\n",
   "aliases": "CVE-2026-23472\n",
   "assigner": "Linux",
-  "epss": 0.0,
+  "epss": 0.02,
   "enisaIdProduct": [
+    {
+      "id": "05977b0b-98a8-32dd-b6f2-c4b4599b393e",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "2.6.12"
+    },
     {
       "id": "426f841d-1f72-305d-9a34-7c8f09766dbd",
       "product": {
@@ -17,6 +24,13 @@
       },
       "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <455ce986fa356ff43a43c0d363ba95fa152f21d5"
     },
+    {
+      "id": "5ca46600-682d-345a-8ca4-2879610efaac",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 0"
+    },
     {
       "id": "678dc1b5-b362-3f2c-b8ce-bae4ca991432",
       "product": {
diff --git a/advisories/2026/04/EUVD-2026-18766.json b/advisories/2026/04/EUVD-2026-18766.json
index eb1288aff7..b8970c0680 100644
--- a/advisories/2026/04/EUVD-2026-18766.json
+++ b/advisories/2026/04/EUVD-2026-18766.json
@@ -2,13 +2,13 @@
   "id": "EUVD-2026-18766",
   "enisaUuid": "846c3795-fccb-3434-9aad-8447e9c4a2a2",
   "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix krb5 mount with username option\n\nCustomer reported that some of their krb5 mounts were failing against\na single server as the client was trying to mount the shares with\nwrong credentials.  It turned out the client was reusing SMB session\nfrom first mount to try mounting the other shares, even though a\ndifferent username= option had been specified to the other mounts.\n\nBy using username mount option along with sec=krb5 to search for\nprincipals from keytab is supported by cifs.upcall(8) since\ncifs-utils-4.8.  So fix this by matching username mount option in\nmatch_session() even with Kerberos.\n\nFor example, the second mount below should fail with -ENOKEY as there\nis no 'foobar' principal in keytab (/etc/krb5.keytab).  The client\nends up reusing SMB session from first mount to perform the second\none, which is wrong.\n\n```\n$ ktutil\nktutil:  add_entry -password -p testuser -k 1 -e aes256-cts\nPassword for testuser@ZELDA.TEST:\nktutil:  write_kt /etc/krb5.keytab\nktutil:  quit\n$ klist -ke\nKeytab name: FILE:/etc/krb5.keytab\nKVNO Principal\n ---- ----------------------------------------------------------------\n   1 testuser@ZELDA.TEST (aes256-cts-hmac-sha1-96)\n$ mount.cifs //w22-root2/scratch /mnt/1 -o sec=krb5,username=testuser\n$ mount.cifs //w22-root2/scratch /mnt/2 -o sec=krb5,username=foobar\n$ mount -t cifs | grep -Po 'username=\\K\\w+'\ntestuser\ntestuser\n```",
-  "datePublished": "Apr 3, 2026, 6:31:23 PM",
-  "dateUpdated": "Apr 3, 2026, 6:31:23 PM",
+  "datePublished": "Apr 3, 2026, 3:15:57 PM",
+  "dateUpdated": "Apr 6, 2026, 6:59:50 AM",
   "baseScore": 0.0,
   "references": "https://git.kernel.org/stable/c/fd4547830720647d4af02ee50f883c4b1cca06e4\nhttps://git.kernel.org/stable/c/9229709ec8bf85ae7ca53aeee9aa14814cdc1bd2\nhttps://git.kernel.org/stable/c/d33cbf0bf8979d779900da9be2505d68d9d8da25\nhttps://git.kernel.org/stable/c/9ee803bfdba0cf739038dbdabdd4c02582c8f2b2\nhttps://git.kernel.org/stable/c/6e9ff1eb7feedcf46ff2d0503759960ab58e7775\nhttps://git.kernel.org/stable/c/12b4c5d98cd7ca46d5035a57bcd995df614c14e1\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31392\n",
   "aliases": "CVE-2026-31392\nGHSA-h833-487p-56g8\n",
   "assigner": "Linux",
-  "epss": 0.0,
+  "epss": 0.02,
   "enisaIdProduct": [
     {
       "id": "1209e159-81d7-341a-819b-fd648685ee36",
@@ -31,6 +31,13 @@
       },
       "product_version": "patch: 6.18.20"
     },
+    {
+      "id": "2f1c355a-fca4-39d5-85c8-836a01ee14ae",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "4ff67b720c02c36e54d55b88c2931879b7db1cd2 <fd4547830720647d4af02ee50f883c4b1cca06e4"
+    },
     {
       "id": "44e4bc45-728a-3f94-aca7-8bbff5b3fc06",
       "product": {
@@ -38,6 +45,20 @@
       },
       "product_version": "patch: 6.1.167"
     },
+    {
+      "id": "4f3a37e9-9aad-3540-aeb6-0dd9fdda5ad3",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "4ff67b720c02c36e54d55b88c2931879b7db1cd2 <6e9ff1eb7feedcf46ff2d0503759960ab58e7775"
+    },
+    {
+      "id": "532fd464-959d-38d5-b23b-ffda189cb4e7",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 0"
+    },
     {
       "id": "604120c9-43cb-3842-a210-23ecc210f3f8",
       "product": {
@@ -52,6 +73,27 @@
       },
       "product_version": "patch: 6.6.130"
     },
+    {
+      "id": "7bd2cd45-2291-39b1-a04b-4f9847f7bdab",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "223c7f082d2836ac719b3b228bdcfab35e5e5330"
+    },
+    {
+      "id": "7bfb740c-2808-337e-9b40-3384e8e79fe2",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "2.6.36"
+    },
+    {
+      "id": "7cebfcc7-2377-3cc3-82f5-83e4f9d1f99b",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "4ff67b720c02c36e54d55b88c2931879b7db1cd2 <d33cbf0bf8979d779900da9be2505d68d9d8da25"
+    },
     {
       "id": "88edf4d8-af3a-33d7-aa9b-0c86b0858837",
       "product": {
@@ -59,6 +101,13 @@
       },
       "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <6e9ff1eb7feedcf46ff2d0503759960ab58e7775"
     },
+    {
+      "id": "a919031d-8419-33cb-a91a-8a96fa258852",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "4ff67b720c02c36e54d55b88c2931879b7db1cd2 <12b4c5d98cd7ca46d5035a57bcd995df614c14e1"
+    },
     {
       "id": "ad95a621-a14b-3ef8-bbc3-0962dee8cf43",
       "product": {
@@ -66,6 +115,13 @@
       },
       "product_version": "patch: 6.12.78"
     },
+    {
+      "id": "af487196-f54d-38d5-9574-731bc480e8c7",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "4ff67b720c02c36e54d55b88c2931879b7db1cd2 <9229709ec8bf85ae7ca53aeee9aa14814cdc1bd2"
+    },
     {
       "id": "b317215b-d266-3428-ab79-c1632c58248d",
       "product": {
@@ -93,6 +149,20 @@
         "name": "Linux"
       },
       "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <9ee803bfdba0cf739038dbdabdd4c02582c8f2b2"
+    },
+    {
+      "id": "dcfcb60c-0336-378d-85c2-7be28e566287",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "4ff67b720c02c36e54d55b88c2931879b7db1cd2 <9ee803bfdba0cf739038dbdabdd4c02582c8f2b2"
+    },
+    {
+      "id": "ff716fc1-1fa4-3bfb-bfeb-49e93919159d",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "88720224330a655ab6268e20109b65b11cfd7f6a"
     }
   ],
   "enisaIdVendor": [
diff --git a/advisories/2026/04/EUVD-2026-18770.json b/advisories/2026/04/EUVD-2026-18770.json
index 2787df4c93..004c1d1f4c 100644
--- a/advisories/2026/04/EUVD-2026-18770.json
+++ b/advisories/2026/04/EUVD-2026-18770.json
@@ -2,14 +2,35 @@
   "id": "EUVD-2026-18770",
   "enisaUuid": "addeb522-f4dc-35cb-9f04-0f5ef29ea210",
   "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations\n\nieee80211_chan_bw_change() iterates all stations and accesses\nlink->reserved.oper via sta->sdata->link[link_id]. For stations on\nAP_VLAN interfaces (e.g. 4addr WDS clients), sta->sdata points to\nthe VLAN sdata, whose link never participates in chanctx reservations.\nThis leaves link->reserved.oper zero-initialized with chan == NULL,\ncausing a NULL pointer dereference in __ieee80211_sta_cap_rx_bw()\nwhen accessing chandef->chan->band during CSA.\n\nResolve the VLAN sdata to its parent AP sdata using get_bss_sdata()\nbefore accessing link data.\n\n[also change sta->sdata in ARRAY_SIZE even if it doesn't matter]",
-  "datePublished": "Apr 3, 2026, 6:31:23 PM",
-  "dateUpdated": "Apr 3, 2026, 6:31:23 PM",
+  "datePublished": "Apr 3, 2026, 3:15:58 PM",
+  "dateUpdated": "Apr 6, 2026, 6:59:51 AM",
   "baseScore": 0.0,
   "references": "https://git.kernel.org/stable/c/65c25b588994dd422fea73fa322de56e1ae4a33b\nhttps://git.kernel.org/stable/c/5a86d4e920d9783a198e39cf53f0e410fba5fbd6\nhttps://git.kernel.org/stable/c/3c6629e859a2211a1fbb4868f915413f80001ca5\nhttps://git.kernel.org/stable/c/672e5229e1ecfc2a3509b53adcb914d8b024a853\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31394\n",
   "aliases": "CVE-2026-31394\n",
   "assigner": "Linux",
-  "epss": 0.0,
+  "epss": 0.02,
   "enisaIdProduct": [
+    {
+      "id": "06c614b1-82a6-3fd0-9108-a5b66491a02c",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "b27512368591fc959768df1f7dacf2a96b1bd036 <3c6629e859a2211a1fbb4868f915413f80001ca5"
+    },
+    {
+      "id": "1d148eef-ad08-3964-98e7-c0b3df5a0646",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 0"
+    },
+    {
+      "id": "1f75afa9-09f0-3d5a-8806-712f8a0f20a8",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "b27512368591fc959768df1f7dacf2a96b1bd036 <65c25b588994dd422fea73fa322de56e1ae4a33b"
+    },
     {
       "id": "22b65060-ccc4-31fb-96c2-86f3e1189cb5",
       "product": {
@@ -52,6 +73,13 @@
       },
       "product_version": "patch: 7.0-rc5"
     },
+    {
+      "id": "714e6bb1-4b9c-381c-ab0d-bb6f4062c4cc",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "b27512368591fc959768df1f7dacf2a96b1bd036 <5a86d4e920d9783a198e39cf53f0e410fba5fbd6"
+    },
     {
       "id": "a39e3788-c239-320b-be36-d0964fe6a3e2",
       "product": {
@@ -59,6 +87,20 @@
       },
       "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <65c25b588994dd422fea73fa322de56e1ae4a33b"
     },
+    {
+      "id": "e58d2745-54a0-344b-8315-b9adea03a300",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "b27512368591fc959768df1f7dacf2a96b1bd036 <672e5229e1ecfc2a3509b53adcb914d8b024a853"
+    },
+    {
+      "id": "fd6eee81-2e75-3544-ab9c-7bd938f9110a",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "6.11"
+    },
     {
       "id": "fd83d6a7-d1be-3b10-9a37-53b14ba95c61",
       "product": {
diff --git a/advisories/2026/04/EUVD-2026-19126.json b/advisories/2026/04/EUVD-2026-19126.json
index 05e20843c0..2314e9760e 100644
--- a/advisories/2026/04/EUVD-2026-19126.json
+++ b/advisories/2026/04/EUVD-2026-19126.json
@@ -2,12 +2,12 @@
   "id": "EUVD-2026-19126",
   "enisaUuid": "38715b71-4d96-30b5-ad8c-1c83dbeacc90",
   "description": "Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout pool. It was sometimes not verifying Sprout proofs.",
-  "datePublished": "Apr 5, 2026, 9:26:58 PM",
-  "dateUpdated": "Apr 5, 2026, 9:31:46 PM",
+  "datePublished": "Apr 6, 2026, 12:30:24 AM",
+  "dateUpdated": "Apr 6, 2026, 12:30:24 AM",
   "baseScore": 3.5,
   "baseScoreVersion": "3.1",
   "baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",
-  "references": "https://github.com/zcash/zcash/releases/tag/v6.12.0\nhttps://github.com/zcash/zcash/commit/db969c63f48f0f9fc518112ed0b7ace1af78b9d0\n",
+  "references": "https://github.com/zcash/zcash/releases/tag/v6.12.0\nhttps://github.com/zcash/zcash/commit/db969c63f48f0f9fc518112ed0b7ace1af78b9d0\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35679\n",
   "aliases": "CVE-2026-35679\n",
   "assigner": "mitre",
   "epss": 0.0,
diff --git a/advisories/2026/04/EUVD-2026-19128.json b/advisories/2026/04/EUVD-2026-19128.json
index 5d2e98c89d..48092c9d5e 100644
--- a/advisories/2026/04/EUVD-2026-19128.json
+++ b/advisories/2026/04/EUVD-2026-19128.json
@@ -2,8 +2,8 @@
   "id": "EUVD-2026-19128",
   "enisaUuid": "564904e3-7d68-3e6f-9a92-2f47ce090109",
   "description": "Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Base(Ingenic x1000) before GK000432BAA, from D1 Base(Ingenic x1600) before HE000085BAA, from A1/B1 Base(IMX25) before BK000763BAA_BK000765BAA_CU000101BAA.\n\nThis vulnerability could allow a remote attacker within Bluetooth range of the scanner's base station has the capability to remotely execute system commands on the host connected to the base station without authentication. This issue has been assigned\u00a0 CVE-2026-4272 https://nvd.nist.gov/vuln/detail/CVE-2026-4272  and rated with a severity of High. Honeywell strongly recommends that users upgrade to the latest version identified to resolve the vulnerability.",
-  "datePublished": "Apr 5, 2026, 10:00:27 PM",
-  "dateUpdated": "Apr 5, 2026, 10:00:27 PM",
+  "datePublished": "Apr 6, 2026, 12:30:24 AM",
+  "dateUpdated": "Apr 6, 2026, 12:30:24 AM",
   "baseScore": 8.1,
   "baseScoreVersion": "3.1",
   "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
diff --git a/advisories/2026/04/EUVD-2026-19130.json b/advisories/2026/04/EUVD-2026-19130.json
index cb6aebef73..45771cfe4f 100644
--- a/advisories/2026/04/EUVD-2026-19130.json
+++ b/advisories/2026/04/EUVD-2026-19130.json
@@ -2,13 +2,13 @@
   "id": "EUVD-2026-19130",
   "enisaUuid": "86a72e73-7036-3b33-a8f6-20f4cb81c43f",
   "description": "A flaw has been found in griptape-ai griptape 0.19.4. This affects an unknown part of the file griptape\\tools\\computer\\tool.py of the component ComputerTool. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
-  "datePublished": "Apr 5, 2026, 9:15:11 PM",
-  "dateUpdated": "Apr 5, 2026, 9:15:11 PM",
+  "datePublished": "Apr 6, 2026, 12:30:24 AM",
+  "dateUpdated": "Apr 6, 2026, 12:30:24 AM",
   "baseScore": 5.3,
   "baseScoreVersion": "4.0",
   "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
-  "references": "https://vuldb.com/vuln/355391\nhttps://vuldb.com/vuln/355391/cti\nhttps://vuldb.com/submit/784465\nhttps://github.com/Ka7arotto/cve/blob/main/griptape/SaveCodeTool/computeTool.md\n",
-  "aliases": "CVE-2026-5597\n",
+  "references": "https://vuldb.com/vuln/355391\nhttps://vuldb.com/vuln/355391/cti\nhttps://vuldb.com/submit/784465\nhttps://github.com/Ka7arotto/cve/blob/main/griptape/SaveCodeTool/computeTool.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5597\n",
+  "aliases": "CVE-2026-5597\nGHSA-42pc-3px2-cj2r\n",
   "assigner": "VulDB",
   "epss": 0.0,
   "enisaIdProduct": [
diff --git a/advisories/2026/04/EUVD-2026-19132.json b/advisories/2026/04/EUVD-2026-19132.json
index 97d6877bc8..223b904a0e 100644
--- a/advisories/2026/04/EUVD-2026-19132.json
+++ b/advisories/2026/04/EUVD-2026-19132.json
@@ -2,13 +2,13 @@
   "id": "EUVD-2026-19132",
   "enisaUuid": "309effad-5537-3de7-895d-6bdefccc6a57",
   "description": "A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0. This issue affects some unknown processing of the file /bin.rar of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.",
-  "datePublished": "Apr 5, 2026, 10:00:14 PM",
-  "dateUpdated": "Apr 5, 2026, 10:00:14 PM",
+  "datePublished": "Apr 6, 2026, 12:30:24 AM",
+  "dateUpdated": "Apr 6, 2026, 12:30:24 AM",
   "baseScore": 6.9,
   "baseScoreVersion": "4.0",
   "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
-  "references": "https://vuldb.com/vuln/355393\nhttps://vuldb.com/vuln/355393/cti\nhttps://vuldb.com/submit/784693\nhttps://github.com/3223892355/CVE/blob/main/001/report.md\n",
-  "aliases": "CVE-2026-5601\n",
+  "references": "https://vuldb.com/vuln/355393\nhttps://vuldb.com/vuln/355393/cti\nhttps://vuldb.com/submit/784693\nhttps://github.com/3223892355/CVE/blob/main/001/report.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5601\n",
+  "aliases": "GHSA-ccgx-m3fq-gwcq\nCVE-2026-5601\n",
   "assigner": "VulDB",
   "epss": 0.0,
   "enisaIdProduct": [
diff --git a/advisories/2026/04/EUVD-2026-19134.json b/advisories/2026/04/EUVD-2026-19134.json
index 761b846302..0db8b79a03 100644
--- a/advisories/2026/04/EUVD-2026-19134.json
+++ b/advisories/2026/04/EUVD-2026-19134.json
@@ -2,13 +2,13 @@
   "id": "EUVD-2026-19134",
   "enisaUuid": "1f672313-2a7e-3b6a-a5ad-9d821ff0816e",
   "description": "A vulnerability was determined in Nor2-io heim-mcp up to 0.1.3. Impacted is the function registerTools of the file src/tools.ts of the component new_heim_application/deploy_heim_application/deploy_heim_application_to_cloud. This manipulation causes os command injection. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Patch name: c321d8af25f77668781e6ccb43a1336f9185df37. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.",
-  "datePublished": "Apr 5, 2026, 10:15:15 PM",
-  "dateUpdated": "Apr 5, 2026, 10:15:15 PM",
+  "datePublished": "Apr 6, 2026, 12:30:24 AM",
+  "dateUpdated": "Apr 6, 2026, 12:30:24 AM",
   "baseScore": 4.8,
   "baseScoreVersion": "4.0",
   "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
-  "references": "https://vuldb.com/vuln/355394\nhttps://vuldb.com/vuln/355394/cti\nhttps://vuldb.com/submit/784862\nhttps://github.com/Nor2-io/heim-mcp/issues/1\nhttps://github.com/Nor2-io/heim-mcp/pull/2\nhttps://github.com/user-attachments/files/25889482/heim-mcp_bug.pdf\nhttps://github.com/Nor2-io/heim-mcp/commit/c321d8af25f77668781e6ccb43a1336f9185df37\nhttps://github.com/Nor2-io/heim-mcp/\n",
-  "aliases": "CVE-2026-5602\n",
+  "references": "https://vuldb.com/vuln/355394\nhttps://vuldb.com/vuln/355394/cti\nhttps://vuldb.com/submit/784862\nhttps://github.com/Nor2-io/heim-mcp/issues/1\nhttps://github.com/Nor2-io/heim-mcp/pull/2\nhttps://github.com/user-attachments/files/25889482/heim-mcp_bug.pdf\nhttps://github.com/Nor2-io/heim-mcp/commit/c321d8af25f77668781e6ccb43a1336f9185df37\nhttps://github.com/Nor2-io/heim-mcp/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5602\n",
+  "aliases": "GHSA-wx4p-jr66-jfp9\nCVE-2026-5602\n",
   "assigner": "VulDB",
   "epss": 0.0,
   "enisaIdProduct": [
diff --git a/advisories/2026/04/EUVD-2026-19136.json b/advisories/2026/04/EUVD-2026-19136.json
index 9b38d3d8a0..0f3e78f830 100644
--- a/advisories/2026/04/EUVD-2026-19136.json
+++ b/advisories/2026/04/EUVD-2026-19136.json
@@ -2,13 +2,13 @@
   "id": "EUVD-2026-19136",
   "enisaUuid": "400d5489-5652-3e60-8839-55dd5c8f41f8",
   "description": "A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2. The affected element is the function executeMagerun2Command of the file src/index.ts. Such manipulation leads to os command injection. An attack has to be approached locally. The exploit is publicly available and might be used. The name of the patch is aa1ffcc0aea1b212c69787391783af27df15ae9d. A patch should be applied to remediate this issue.",
-  "datePublished": "Apr 5, 2026, 10:30:16 PM",
-  "dateUpdated": "Apr 5, 2026, 10:30:16 PM",
+  "datePublished": "Apr 6, 2026, 12:30:24 AM",
+  "dateUpdated": "Apr 6, 2026, 12:30:24 AM",
   "baseScore": 4.8,
   "baseScoreVersion": "4.0",
   "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
-  "references": "https://vuldb.com/vuln/355395\nhttps://vuldb.com/vuln/355395/cti\nhttps://vuldb.com/submit/784864\nhttps://github.com/elgentos/magento2-dev-mcp/issues/4\nhttps://github.com/elgentos/magento2-dev-mcp/pull/5\nhttps://github.com/user-attachments/files/25895777/magento2-dev-mcp_bug.pdf\nhttps://github.com/elgentos/magento2-dev-mcp/commit/aa1ffcc0aea1b212c69787391783af27df15ae9d\nhttps://github.com/elgentos/magento2-dev-mcp/\n",
-  "aliases": "CVE-2026-5603\n",
+  "references": "https://vuldb.com/vuln/355395\nhttps://vuldb.com/vuln/355395/cti\nhttps://vuldb.com/submit/784864\nhttps://github.com/elgentos/magento2-dev-mcp/issues/4\nhttps://github.com/elgentos/magento2-dev-mcp/pull/5\nhttps://github.com/user-attachments/files/25895777/magento2-dev-mcp_bug.pdf\nhttps://github.com/elgentos/magento2-dev-mcp/commit/aa1ffcc0aea1b212c69787391783af27df15ae9d\nhttps://github.com/elgentos/magento2-dev-mcp/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5603\n",
+  "aliases": "CVE-2026-5603\nGHSA-xqv9-qr76-hfq2\n",
   "assigner": "VulDB",
   "epss": 0.0,
   "enisaIdProduct": [
diff --git a/advisories/2026/04/EUVD-2026-19138.json b/advisories/2026/04/EUVD-2026-19138.json
index 6c9dfdbee0..d7c91d5974 100644
--- a/advisories/2026/04/EUVD-2026-19138.json
+++ b/advisories/2026/04/EUVD-2026-19138.json
@@ -2,13 +2,13 @@
   "id": "EUVD-2026-19138",
   "enisaUuid": "67d2c8c2-24bb-37b4-8a1e-f314ca78baa1",
   "description": "A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.",
-  "datePublished": "Apr 5, 2026, 10:45:12 PM",
-  "dateUpdated": "Apr 5, 2026, 10:45:12 PM",
+  "datePublished": "Apr 6, 2026, 12:30:24 AM",
+  "dateUpdated": "Apr 6, 2026, 12:30:24 AM",
   "baseScore": 8.7,
   "baseScoreVersion": "4.0",
   "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
-  "references": "https://vuldb.com/vuln/355396\nhttps://vuldb.com/vuln/355396/cti\nhttps://vuldb.com/submit/785032\nhttps://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_52/README.md\nhttps://www.tenda.com.cn/\n",
-  "aliases": "CVE-2026-5604\n",
+  "references": "https://vuldb.com/vuln/355396\nhttps://vuldb.com/vuln/355396/cti\nhttps://vuldb.com/submit/785032\nhttps://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_52/README.md\nhttps://www.tenda.com.cn/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5604\n",
+  "aliases": "CVE-2026-5604\nGHSA-cxp5-wp2v-64xx\n",
   "assigner": "VulDB",
   "epss": 0.0,
   "enisaIdProduct": [
diff --git a/advisories/2026/04/EUVD-2026-19140.json b/advisories/2026/04/EUVD-2026-19140.json
new file mode 100644
index 0000000000..99b56948b0
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19140.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19140",
+  "enisaUuid": "8aeaeaf0-6f3b-3d45-ba0c-a639443e5d9e",
+  "description": "A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.",
+  "datePublished": "Apr 6, 2026, 12:30:24 AM",
+  "dateUpdated": "Apr 6, 2026, 12:30:24 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355397\nhttps://vuldb.com/vuln/355397/cti\nhttps://vuldb.com/submit/785052\nhttps://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_54/README.md\nhttps://www.tenda.com.cn/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5605\n",
+  "aliases": "CVE-2026-5605\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "785ad98e-7c62-3737-804c-85874c3c7556",
+      "product": {
+        "name": "CH22"
+      },
+      "product_version": "1.0.0.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "a65d642a-fdf2-3dc9-88f3-024386519af5",
+      "vendor": {
+        "name": "Tenda"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19142.json b/advisories/2026/04/EUVD-2026-19142.json
new file mode 100644
index 0000000000..dd2783c231
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19142.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19142",
+  "enisaUuid": "36a203c9-11b5-3d21-b595-e0577375dfd0",
+  "description": "A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /order-details.php of the component Parameter Handler. The manipulation of the argument orderid results in sql injection. It is possible to launch the attack remotely.",
+  "datePublished": "Apr 6, 2026, 12:30:24 AM",
+  "dateUpdated": "Apr 6, 2026, 12:30:24 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
+  "references": "https://vuldb.com/vuln/355351\nhttps://vuldb.com/vuln/355351/cti\nhttps://vuldb.com/submit/784009\nhttps://github.com/f1rstb100d/CVE/issues/13\nhttps://phpgurukul.com/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5606\n",
+  "aliases": "CVE-2026-5606\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0155d1ea-d116-3d02-8b05-7faa62ebc627",
+      "product": {
+        "name": "Online Shopping Portal Project"
+      },
+      "product_version": "2.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "eed42366-aee1-3569-b2c7-f93759a874bb",
+      "vendor": {
+        "name": "PHPGurukul"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19144.json b/advisories/2026/04/EUVD-2026-19144.json
new file mode 100644
index 0000000000..9d07919364
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19144.json
@@ -0,0 +1,80 @@
+{
+  "id": "EUVD-2026-19144",
+  "enisaUuid": "e91d7b16-0764-30f3-912b-315fa07fb97e",
+  "description": "A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0. This impacts the function CallToolRequestSchema of the file src/handlers.ts of the component URL Parameter Handler. The manipulation of the argument request.params.name/request.params.arguments leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 3:30:18 AM",
+  "dateUpdated": "Apr 6, 2026, 3:30:18 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355398\nhttps://vuldb.com/vuln/355398/cti\nhttps://vuldb.com/submit/785034\nhttps://github.com/wing3e/public_exp/issues/25\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5607\n",
+  "aliases": "CVE-2026-5607\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "05e26662-6c62-36d2-98c5-b30faa38c678",
+      "product": {
+        "name": "mcp-browser-agent"
+      },
+      "product_version": "0.3"
+    },
+    {
+      "id": "0c03941d-0083-31cd-b86c-5de5d9cc01d3",
+      "product": {
+        "name": "mcp-browser-agent"
+      },
+      "product_version": "0.1"
+    },
+    {
+      "id": "31f116d3-efe3-3bb6-88dd-929f21f9a4d0",
+      "product": {
+        "name": "mcp-browser-agent"
+      },
+      "product_version": "0.6"
+    },
+    {
+      "id": "570ad3d0-0bf1-31e5-8686-eb86c5334fe3",
+      "product": {
+        "name": "mcp-browser-agent"
+      },
+      "product_version": "0.7"
+    },
+    {
+      "id": "94dd7233-67cf-3dda-a30d-0c9ffa195bcf",
+      "product": {
+        "name": "mcp-browser-agent"
+      },
+      "product_version": "0.4"
+    },
+    {
+      "id": "b0a1aae8-f82e-3baf-a7af-0e2f4932ae07",
+      "product": {
+        "name": "mcp-browser-agent"
+      },
+      "product_version": "0.5"
+    },
+    {
+      "id": "c03a658a-7d5e-3791-8a06-e37393ce360e",
+      "product": {
+        "name": "mcp-browser-agent"
+      },
+      "product_version": "0.2"
+    },
+    {
+      "id": "dd738f86-2096-34dd-b597-b70c2899ef55",
+      "product": {
+        "name": "mcp-browser-agent"
+      },
+      "product_version": "0.8.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "259e9c08-05a1-3dec-a351-3addb9b85063",
+      "vendor": {
+        "name": "imprvhub"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19146.json b/advisories/2026/04/EUVD-2026-19146.json
new file mode 100644
index 0000000000..928c83018f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19146.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19146",
+  "enisaUuid": "d76ade79-d302-3c61-bdcb-a932c6ab30a0",
+  "description": "A vulnerability was detected in Belkin F9K1122 1.00.33. Affected is the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument webpage results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 3:30:18 AM",
+  "dateUpdated": "Apr 6, 2026, 3:30:18 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355399\nhttps://vuldb.com/vuln/355399/cti\nhttps://vuldb.com/submit/785315\nhttps://github.com/Litengzheng/vul_db/blob/main/Belkin/vul_80/README.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5608\n",
+  "aliases": "GHSA-jrwh-p54q-29xf\nCVE-2026-5608\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "49ccf7cb-6f85-3de8-bef1-c8ba440b96bc",
+      "product": {
+        "name": "F9K1122"
+      },
+      "product_version": "1.00.33"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "08b510f6-63a3-3a13-9add-9f43778ded09",
+      "vendor": {
+        "name": "Belkin"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19148.json b/advisories/2026/04/EUVD-2026-19148.json
new file mode 100644
index 0000000000..586328bd78
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19148.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19148",
+  "enisaUuid": "4e914406-5a53-3ac8-83e0-7b82a6bf3622",
+  "description": "A flaw has been found in Tenda i12 1.0.0.11(3862). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component Parameter Handler. This manipulation of the argument index/wl_radio causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.",
+  "datePublished": "Apr 6, 2026, 3:30:19 AM",
+  "dateUpdated": "Apr 6, 2026, 3:30:19 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355400\nhttps://vuldb.com/vuln/355400/cti\nhttps://vuldb.com/submit/785337\nhttps://github.com/Litengzheng/vuldb_new/blob/main/i12/vul_107/README.md\nhttps://www.tenda.com.cn/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5609\n",
+  "aliases": "CVE-2026-5609\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "9d7510df-f41f-3cc4-8d4c-c3355445d093",
+      "product": {
+        "name": "i12"
+      },
+      "product_version": "1.0.0.11(3862)"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "f9c22d51-fd58-3518-9602-ff1dcf315593",
+      "vendor": {
+        "name": "Tenda"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19150.json b/advisories/2026/04/EUVD-2026-19150.json
new file mode 100644
index 0000000000..5d8fec65bf
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19150.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19150",
+  "enisaUuid": "d7ae7b70-d146-3168-b02b-0f90552d7848",
+  "description": "A vulnerability has been found in Belkin F9K1015 1.00.10. Affected by this issue is the function formWISP5G of the file /goform/formWISP5G. Such manipulation of the argument webpage leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 3:30:19 AM",
+  "dateUpdated": "Apr 6, 2026, 3:30:19 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355401\nhttps://vuldb.com/vuln/355401/cti\nhttps://vuldb.com/submit/785537\nhttps://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_3/README.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5610\n",
+  "aliases": "GHSA-8phh-65xx-646j\nCVE-2026-5610\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "17e5d8a7-1343-3341-b502-a2c55a09ec31",
+      "product": {
+        "name": "F9K1015"
+      },
+      "product_version": "1.00.10"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "783e9649-f0af-3cab-b8da-53a585dea8ab",
+      "vendor": {
+        "name": "Belkin"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19152.json b/advisories/2026/04/EUVD-2026-19152.json
new file mode 100644
index 0000000000..f322b7c973
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19152.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19152",
+  "enisaUuid": "4101378b-5465-3422-9510-8bf2fbb1b03d",
+  "description": "A vulnerability was found in Belkin F9K1015 1.00.10. This affects the function formCrossBandSwitch of the file /goform/formCrossBandSwitch. Performing a manipulation of the argument webpage results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 3:30:19 AM",
+  "dateUpdated": "Apr 6, 2026, 3:30:19 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355402\nhttps://vuldb.com/vuln/355402/cti\nhttps://vuldb.com/submit/785538\nhttps://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_5/README.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5611\n",
+  "aliases": "CVE-2026-5611\nGHSA-7rxh-cwgm-8354\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "98d98d1c-5776-3aeb-af2b-46965e3edc3d",
+      "product": {
+        "name": "F9K1015"
+      },
+      "product_version": "1.00.10"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "dccd2754-a5f9-3e5a-8f4a-ad8b12697439",
+      "vendor": {
+        "name": "Belkin"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19153.json b/advisories/2026/04/EUVD-2026-19153.json
new file mode 100644
index 0000000000..d337997090
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19153.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19153",
+  "enisaUuid": "8eb1c876-4161-33ef-bb34-d148be7d1261",
+  "description": "A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability affects the function formWlEncrypt of the file /goform/formWlEncrypt. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 3:30:19 AM",
+  "dateUpdated": "Apr 6, 2026, 3:30:19 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355403\nhttps://vuldb.com/vuln/355403/cti\nhttps://vuldb.com/submit/785551\nhttps://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_7/README.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5612\n",
+  "aliases": "CVE-2026-5612\nGHSA-9pcp-3g8w-6g9h\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "31b29784-a229-3d5e-b788-5125433cc560",
+      "product": {
+        "name": "F9K1015"
+      },
+      "product_version": "1.00.10"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "37460a14-1fdd-3d2a-9013-6d95cf3accf1",
+      "vendor": {
+        "name": "Belkin"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19154.json b/advisories/2026/04/EUVD-2026-19154.json
new file mode 100644
index 0000000000..6828c8e003
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19154.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19154",
+  "enisaUuid": "b559e35a-a1df-35b0-a1ea-04751a34b123",
+  "description": "A vulnerability was identified in Belkin F9K1015 1.00.10. This issue affects the function formReboot of the file /goform/formReboot. The manipulation of the argument webpage leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 3:30:20 AM",
+  "dateUpdated": "Apr 6, 2026, 3:30:20 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355404\nhttps://vuldb.com/vuln/355404/cti\nhttps://vuldb.com/submit/785552\nhttps://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_10/README.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5613\n",
+  "aliases": "GHSA-r63g-w8j9-9fqc\nCVE-2026-5613\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "e784b972-e84d-30cd-8d1d-58bb8c32b8cd",
+      "product": {
+        "name": "F9K1015"
+      },
+      "product_version": "1.00.10"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "0aa4340e-c9ed-3c8d-af7d-93542868f7a7",
+      "vendor": {
+        "name": "Belkin"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19158.json b/advisories/2026/04/EUVD-2026-19158.json
new file mode 100644
index 0000000000..01b051efc0
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19158.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19158",
+  "enisaUuid": "4b1e43fc-37b4-30f8-8660-d5a4fe54df36",
+  "description": "A security flaw has been discovered in Belkin F9K1015 1.00.10. Impacted is the function formSetPassword of the file /goform/formSetPassword. The manipulation of the argument webpage results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 6:30:28 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:28 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355405\nhttps://vuldb.com/vuln/355405/cti\nhttps://vuldb.com/submit/785554\nhttps://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_11/README.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5614\n",
+  "aliases": "GHSA-9grv-gr5x-p4v6\nCVE-2026-5614\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0ede89bf-6786-3616-8b04-ab72be6da3c0",
+      "product": {
+        "name": "F9K1015"
+      },
+      "product_version": "1.00.10"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "9a4ae600-276f-3311-b4f7-981ca673bc14",
+      "vendor": {
+        "name": "Belkin"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19160.json b/advisories/2026/04/EUVD-2026-19160.json
new file mode 100644
index 0000000000..0bc6b5dfc8
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19160.json
@@ -0,0 +1,66 @@
+{
+  "id": "EUVD-2026-19160",
+  "enisaUuid": "650bf344-8c85-3fc2-b956-ed3c27537be3",
+  "description": "A weakness has been identified in givanz Vvvebjs up to 2.0.5. The affected element is an unknown function of the file upload.php of the component File Upload Endpoint. This manipulation of the argument uploadAllowExtensions causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. Patch name: 8cac22cff99b8bc701c408aa8e887fa702755336. Applying a patch is the recommended action to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.",
+  "datePublished": "Apr 6, 2026, 6:30:29 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:29 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355406\nhttps://vuldb.com/vuln/355406/cti\nhttps://vuldb.com/submit/785563\nhttps://tcn60zf28jhk.feishu.cn/wiki/Cr4KwMPiMi65fFkI9Vyc3oX2n0f?from=from_copylink\nhttps://github.com/givanz/VvvebJs/commit/8cac22cff99b8bc701c408aa8e887fa702755336\nhttps://github.com/givanz/VvvebJs/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5615\n",
+  "aliases": "CVE-2026-5615\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0485c647-4f55-3509-8eff-69fd3227f867",
+      "product": {
+        "name": "Vvvebjs"
+      },
+      "product_version": "2.0.1"
+    },
+    {
+      "id": "2b2ac381-f825-3532-ba5d-5083f0614a89",
+      "product": {
+        "name": "Vvvebjs"
+      },
+      "product_version": "2.0.3"
+    },
+    {
+      "id": "4f23ddeb-0c33-3030-a046-f55e0293cdcd",
+      "product": {
+        "name": "Vvvebjs"
+      },
+      "product_version": "2.0.4"
+    },
+    {
+      "id": "5430a6c6-4fb8-3040-b9e7-3a42ae421058",
+      "product": {
+        "name": "Vvvebjs"
+      },
+      "product_version": "2.0.5"
+    },
+    {
+      "id": "609ff4fd-4db8-3bcc-a46f-2073ff97ca3c",
+      "product": {
+        "name": "Vvvebjs"
+      },
+      "product_version": "2.0.2"
+    },
+    {
+      "id": "fec752d3-b9d2-3c18-89d7-6da7c73174a2",
+      "product": {
+        "name": "Vvvebjs"
+      },
+      "product_version": "2.0.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "ee8c868a-2886-397e-9012-61f28809686c",
+      "vendor": {
+        "name": "givanz"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19162.json b/advisories/2026/04/EUVD-2026-19162.json
new file mode 100644
index 0000000000..48b48d9fc0
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19162.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-19162",
+  "enisaUuid": "15fedfef-f636-3f2a-a30c-e67394b47a15",
+  "description": "A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to missing authentication. The attack can be executed remotely. The name of the patch is b7c9aeba7aefda9e008ea8fe4fc3daf08d0c5b39/2c1cc88b8d983868df8c520a343d6ff4369d9e59. It is best practice to apply a patch to resolve this issue. The project fixed the issue with a commit which shall be part of the next official release.",
+  "datePublished": "Apr 6, 2026, 6:30:29 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:29 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
+  "references": "https://vuldb.com/vuln/355407\nhttps://vuldb.com/vuln/355407/cti\nhttps://vuldb.com/submit/785570\nhttps://github.com/jeecgboot/JeecgBoot/issues/9464\nhttps://github.com/jeecgboot/JeecgBoot/pull/9463\nhttps://github.com/jeecgboot/JeecgBoot/commit/b7c9aeba7aefda9e008ea8fe4fc3daf08d0c5b39\nhttps://github.com/jeecgboot/JeecgBoot/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5616\n",
+  "aliases": "CVE-2026-5616\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "51be3f57-ff67-3fa3-a8cf-7d26733b8329",
+      "product": {
+        "name": "JeecgBoot"
+      },
+      "product_version": "3.9.1"
+    },
+    {
+      "id": "fe1b071b-d91e-3949-aea3-48d9d0673821",
+      "product": {
+        "name": "JeecgBoot"
+      },
+      "product_version": "3.9.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "ac41cafc-f4ca-37f3-a221-7c2a7141f5a0",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19164.json b/advisories/2026/04/EUVD-2026-19164.json
new file mode 100644
index 0000000000..6e52d6ebb9
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19164.json
@@ -0,0 +1,479 @@
+{
+  "id": "EUVD-2026-19164",
+  "enisaUuid": "bba36f31-6996-3aa6-9d31-48c2a32dca63",
+  "description": "A vulnerability was detected in kalcaddle kodbox up to 1.64. This affects an unknown function of the component shareMake/shareCheck. Performing a manipulation of the argument siteFrom/siteTo results in server-side request forgery. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 6:30:29 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:29 AM",
+  "baseScore": 6.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355408\nhttps://vuldb.com/vuln/355408/cti\nhttps://vuldb.com/submit/785572\nhttps://vulnplus-note.wetolink.com/share/3VtzyzYgcS4b\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5618\n",
+  "aliases": "CVE-2026-5618\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "028b2d3b-732e-3684-8697-5ecc6897c9ea",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.8"
+    },
+    {
+      "id": "02a25208-9bd5-33eb-a15b-7ccb87c8ff90",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.60"
+    },
+    {
+      "id": "03363d5b-c84b-3f77-bdeb-ed0b93563a08",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.4"
+    },
+    {
+      "id": "09080490-69ce-3909-8151-57188ce66871",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.57"
+    },
+    {
+      "id": "101b88d4-b54a-3309-bbed-1aef64f5e70c",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.47"
+    },
+    {
+      "id": "11f7b36e-bece-3acf-8a54-2fe7cdb63c5b",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.23"
+    },
+    {
+      "id": "161c28fc-ae5d-3ccb-8e69-8c95bf53b84d",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.45"
+    },
+    {
+      "id": "167de3be-a1e6-3f5f-8917-3b561c81bf09",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.11"
+    },
+    {
+      "id": "1939c704-b907-382f-9ad2-97c105c67755",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.17"
+    },
+    {
+      "id": "1e0e7683-cde8-3753-be79-42c0720676a6",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.10"
+    },
+    {
+      "id": "2115ceda-fcbb-3460-9eef-0e012c0273d6",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.28"
+    },
+    {
+      "id": "2898b7f8-f356-3e4f-be40-f2e206d1a865",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.52"
+    },
+    {
+      "id": "35e11df9-7909-3aff-8752-548e56da870f",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.32"
+    },
+    {
+      "id": "43e751a0-c9d9-30cb-9bf6-9242b7ff22d5",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.59"
+    },
+    {
+      "id": "46157fb4-73f1-37cb-85d3-24e5c78d6bf7",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.63"
+    },
+    {
+      "id": "4a16c98f-a00d-3d81-9bb1-f56588ee1ce6",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.48"
+    },
+    {
+      "id": "5661e5f0-6fed-399d-982b-15fa85f870c7",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.18"
+    },
+    {
+      "id": "5affdcfb-e801-31f8-9679-0c4eb00211f8",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.19"
+    },
+    {
+      "id": "5e69bab7-55f8-3089-bab3-246d3c49d829",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.22"
+    },
+    {
+      "id": "621ba866-b346-3706-9ce5-8ef6e5f96e9f",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.14"
+    },
+    {
+      "id": "66db9290-3175-307e-8bfc-b6d92cc2f900",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.12"
+    },
+    {
+      "id": "67319322-d43a-3951-b76a-869e762c56d8",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.44"
+    },
+    {
+      "id": "6bf9f279-eaf0-3a36-a018-bf586e5e2b27",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.38"
+    },
+    {
+      "id": "7454b342-016b-38e4-a73a-472a9c9744fb",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.36"
+    },
+    {
+      "id": "7c24dfc5-d6de-3de0-8bd6-cc98d71b7526",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.61"
+    },
+    {
+      "id": "7e5b66f2-22d1-31df-9f6c-372a141d0d47",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.21"
+    },
+    {
+      "id": "82c136f8-b277-3b86-b906-49111dcac78e",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.34"
+    },
+    {
+      "id": "82f7d737-3cf5-3d8a-bdc7-987ca26761e6",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.6"
+    },
+    {
+      "id": "89172e9e-8562-33cd-b7ce-0d08d04f552c",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.26"
+    },
+    {
+      "id": "8a5f1092-7950-3e26-8bc2-d4fbf8858185",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.53"
+    },
+    {
+      "id": "8d89b2cb-631f-3944-904b-71e56d95664b",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.30"
+    },
+    {
+      "id": "8f870ba1-503b-314a-b7c2-27b5ab7e218b",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.24"
+    },
+    {
+      "id": "90298bbb-266f-3a38-bb05-d3392499ffa8",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.64"
+    },
+    {
+      "id": "90a88d77-067f-3859-88be-c5c197fdd4bd",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.3"
+    },
+    {
+      "id": "98fc0e37-8e99-309b-8624-d96ad7db7b8d",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.49"
+    },
+    {
+      "id": "9cb52293-1c6a-3f8a-8f56-de0781fc5e24",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.33"
+    },
+    {
+      "id": "9e4b29b0-76da-3ec3-ae2d-772c69a6911a",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.5"
+    },
+    {
+      "id": "a279cb35-d630-3dc4-a4c8-501822f1f8cb",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.15"
+    },
+    {
+      "id": "aa08c214-514c-309f-9e0d-f0bd78c0daa1",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.0"
+    },
+    {
+      "id": "acf1d0ee-6c6c-3f7a-90c3-ca1dccbb5b67",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.46"
+    },
+    {
+      "id": "bfa9d65d-6cf1-3450-b270-73db15bc0397",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.35"
+    },
+    {
+      "id": "c4c1a458-7c5a-3943-9299-513d3968510b",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.2"
+    },
+    {
+      "id": "c69074d3-1811-33ef-8c7f-d09f70be599d",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.40"
+    },
+    {
+      "id": "ca26e563-fbb2-3f3a-95c6-28dedff5dc36",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.50"
+    },
+    {
+      "id": "cb65c0ea-3611-3b4f-b944-b2499d14a896",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.39"
+    },
+    {
+      "id": "cb8c410c-89cb-31f9-95f9-83c13ed390ff",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.41"
+    },
+    {
+      "id": "d078249b-6613-3e9d-8203-442e9ac5566a",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.20"
+    },
+    {
+      "id": "d0ae4b44-6898-3945-89b0-0f07169330dd",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.62"
+    },
+    {
+      "id": "d12be743-d503-347f-9cf2-02c3ce3b1413",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.7"
+    },
+    {
+      "id": "dae7ad31-2427-3b71-998f-86b3eac4d6b8",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.54"
+    },
+    {
+      "id": "db7a98dc-cf8b-3b10-8bd7-3956f6156915",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.29"
+    },
+    {
+      "id": "dbad2c06-4cd3-34f4-836d-8ba8ce9c02ef",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.42"
+    },
+    {
+      "id": "dbba62f5-5e2e-36c4-9774-b1a7b16a2fe8",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.43"
+    },
+    {
+      "id": "dd1a59d3-f1e4-39cc-9869-28d3ef77c039",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.31"
+    },
+    {
+      "id": "e2e78197-6978-38b2-bd76-f3109cd31678",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.58"
+    },
+    {
+      "id": "e316015e-a53b-3b69-b166-128ec2e89def",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.13"
+    },
+    {
+      "id": "e8555338-8c44-3022-a796-da527b6097b5",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.25"
+    },
+    {
+      "id": "eb89bb5c-12a5-326a-892d-bc293719742b",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.1"
+    },
+    {
+      "id": "ec4b6256-0c33-3b6a-84b6-ec57d2483efa",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.55"
+    },
+    {
+      "id": "f58aeae1-84ac-34b3-8d8f-e13f356e5ca4",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.56"
+    },
+    {
+      "id": "fa3c3712-41f2-3c49-a26f-2f741ddaf9cc",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.27"
+    },
+    {
+      "id": "fa64d6e3-0d9e-3ee5-ba21-7a6245109f4b",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.51"
+    },
+    {
+      "id": "fde50b8b-af27-3926-8907-6bedb60efde6",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.16"
+    },
+    {
+      "id": "ff0f3cec-8823-3048-ad48-7da4d8e1897f",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.37"
+    },
+    {
+      "id": "ffbea9b6-e695-3bb8-b008-9b1ce4ca3a1e",
+      "product": {
+        "name": "kodbox"
+      },
+      "product_version": "1.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "89434b06-0ca5-3682-9613-90d09b70da57",
+      "vendor": {
+        "name": "kalcaddle"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19166.json b/advisories/2026/04/EUVD-2026-19166.json
new file mode 100644
index 0000000000..c5b326b092
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19166.json
@@ -0,0 +1,66 @@
+{
+  "id": "EUVD-2026-19166",
+  "enisaUuid": "272337d7-6497-34a9-98b3-3263d4dbed06",
+  "description": "A flaw has been found in Braffolk mcp-summarization-functions up to 0.1.5. This impacts an unknown function of the file src/server/mcp-server.ts of the component summarize_command. Executing a manipulation of the argument command can lead to os command injection. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 6:30:29 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:29 AM",
+  "baseScore": 4.8,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355409\nhttps://vuldb.com/vuln/355409/cti\nhttps://vuldb.com/submit/785574\nhttps://github.com/wing3e/public_exp/issues/26\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5619\n",
+  "aliases": "CVE-2026-5619\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "23111ec7-f599-3839-bea4-7318f8f31d7c",
+      "product": {
+        "name": "mcp-summarization-functions"
+      },
+      "product_version": "0.1.5"
+    },
+    {
+      "id": "34f243e5-eb95-3c53-afc7-aadcf9975140",
+      "product": {
+        "name": "mcp-summarization-functions"
+      },
+      "product_version": "0.1.3"
+    },
+    {
+      "id": "85444607-a50b-34ee-bb3b-d328876464e4",
+      "product": {
+        "name": "mcp-summarization-functions"
+      },
+      "product_version": "0.1.0"
+    },
+    {
+      "id": "ab6a4191-6681-3505-a1f2-26704f5082d7",
+      "product": {
+        "name": "mcp-summarization-functions"
+      },
+      "product_version": "0.1.4"
+    },
+    {
+      "id": "e366fd14-dbf3-366a-9f54-b1ac83cb2a17",
+      "product": {
+        "name": "mcp-summarization-functions"
+      },
+      "product_version": "0.1.1"
+    },
+    {
+      "id": "e632b9e8-4f6e-32b0-8f3a-d3489c0e4bce",
+      "product": {
+        "name": "mcp-summarization-functions"
+      },
+      "product_version": "0.1.2"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "68e55051-569a-3d28-860d-1185744332e1",
+      "vendor": {
+        "name": "Braffolk"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19168.json b/advisories/2026/04/EUVD-2026-19168.json
new file mode 100644
index 0000000000..cff8a3f06d
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19168.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19168",
+  "enisaUuid": "4a1b8db1-9012-32f9-b5e1-3c153c3e4b93",
+  "description": "A vulnerability has been found in itsourcecode Construction Management System 1.0. Affected is an unknown function of the file /borrowed_equip_report.php of the component Parameter Handler. The manipulation of the argument Home leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "datePublished": "Apr 6, 2026, 6:30:29 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:29 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355410\nhttps://vuldb.com/vuln/355410/cti\nhttps://vuldb.com/submit/785577\nhttps://vuldb.com/submit/786062\nhttps://github.com/Qwh0729/cve/issues/1\nhttps://itsourcecode.com/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5620\n",
+  "aliases": "CVE-2026-5620\nGHSA-j8r9-fj5r-fm7x\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c9ccdaed-3b09-3131-9a32-6aa979ecc076",
+      "product": {
+        "name": "Construction Management System"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "13117b68-729a-3804-92f9-a75fdac20683",
+      "vendor": {
+        "name": "itsourcecode"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19170.json b/advisories/2026/04/EUVD-2026-19170.json
new file mode 100644
index 0000000000..d3af408b68
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19170.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19170",
+  "enisaUuid": "6363e76f-4803-3ae9-a430-6704d15aa808",
+  "description": "A vulnerability was found in ChrisChinchilla Vale-MCP up to 0.1.0. Affected by this vulnerability is an unknown functionality of the file src/index.ts of the component HTTP Interface. The manipulation of the argument config_path results in os command injection. Attacking locally is a requirement. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 6:30:29 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:29 AM",
+  "baseScore": 4.8,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355411\nhttps://vuldb.com/vuln/355411/cti\nhttps://vuldb.com/submit/785591\nhttps://github.com/wing3e/public_exp/issues/27\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5621\n",
+  "aliases": "GHSA-2j8h-v2cv-qh49\nCVE-2026-5621\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "33fbf484-3f18-321a-a500-bf1fc676ee5d",
+      "product": {
+        "name": "Vale-MCP"
+      },
+      "product_version": "0.1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "0ed4fae5-f5d4-354f-954e-097bf7c89c24",
+      "vendor": {
+        "name": "ChrisChinchilla"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19172.json b/advisories/2026/04/EUVD-2026-19172.json
new file mode 100644
index 0000000000..0d81edb374
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19172.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19172",
+  "enisaUuid": "dce79d64-3ba2-3154-a761-a174d64f28be",
+  "description": "A vulnerability was determined in hcengineering Huly Platform 0.7.382. Affected by this issue is some unknown functionality of the file foundations/core/packages/token/src/token.ts of the component JWT Token Handler. This manipulation of the argument SERVER_SECRET with the input secret causes use of hard-coded cryptographic key\r . The attack can be initiated remotely. The attack is considered to have high complexity. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 6:30:29 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:29 AM",
+  "baseScore": 6.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355412\nhttps://vuldb.com/vuln/355412/cti\nhttps://vuldb.com/submit/785631\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5622\n",
+  "aliases": "GHSA-x32v-jmqh-4323\nCVE-2026-5622\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "507483da-e973-30c8-9ed6-6d9d9d39b11f",
+      "product": {
+        "name": "Huly Platform"
+      },
+      "product_version": "0.7.382"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "ced96cec-7b65-3c1f-8784-ce10f2ce144e",
+      "vendor": {
+        "name": "hcengineering"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19174.json b/advisories/2026/04/EUVD-2026-19174.json
new file mode 100644
index 0000000000..7d08190eb2
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19174.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19174",
+  "enisaUuid": "b5771e27-0d7d-34ba-b7f9-7086f70fbee7",
+  "description": "A vulnerability was identified in hcengineering Huly Platform 0.7.382. This affects an unknown part of the file server/front/src/index.ts of the component Import Endpoint. Such manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 6:30:29 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:29 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355413\nhttps://vuldb.com/vuln/355413/cti\nhttps://vuldb.com/submit/785632\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5623\n",
+  "aliases": "GHSA-c8m8-4468-h6xx\nCVE-2026-5623\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "3b563d61-5bed-38e1-b9e8-086cb8d2f287",
+      "product": {
+        "name": "Huly Platform"
+      },
+      "product_version": "0.7.382"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d4db9fb4-bc23-3004-a7cb-140ff39e98c3",
+      "vendor": {
+        "name": "hcengineering"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19176.json b/advisories/2026/04/EUVD-2026-19176.json
new file mode 100644
index 0000000000..79218ae53a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19176.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-19176",
+  "enisaUuid": "f7a22b45-7a4b-3ac8-aec1-38459fd94be4",
+  "description": "A security flaw has been discovered in ProjectSend r2002. This vulnerability affects unknown code of the file upload.php. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version r2029 is able to resolve this issue. The patch is named 2c0d25824ab571b6c219ac1a188ad9350149661b. You should upgrade the affected component.",
+  "datePublished": "Apr 6, 2026, 6:30:29 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:29 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355414\nhttps://vuldb.com/vuln/355414/cti\nhttps://vuldb.com/submit/785731\nhttps://github.com/projectsend/projectsend/commit/2c0d25824ab571b6c219ac1a188ad9350149661b\nhttps://github.com/projectsend/projectsend/releases/tag/r2029\nhttps://github.com/projectsend/projectsend/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5624\n",
+  "aliases": "GHSA-8x9f-c335-83wq\nCVE-2026-5624\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "1800d961-b347-313b-8256-dd90599c3be1",
+      "product": {
+        "name": "ProjectSend"
+      },
+      "product_version": ""
+    },
+    {
+      "id": "bdf202df-8d4d-32b3-acb1-673928103df2",
+      "product": {
+        "name": "ProjectSend"
+      },
+      "product_version": "r2002"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d969bbe7-7b9a-3efd-97a0-49df50a996bd",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19178.json b/advisories/2026/04/EUVD-2026-19178.json
new file mode 100644
index 0000000000..f8720e236a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19178.json
@@ -0,0 +1,52 @@
+{
+  "id": "EUVD-2026-19178",
+  "enisaUuid": "7c9d8c7a-e46b-30c0-93b5-6ad5bba17684",
+  "description": "A weakness has been identified in assafelovic gpt-researcher up to 3.4.3. This issue affects some unknown processing of the file gpt_researcher/skills/researcher.py of the component WebSocket Interface. Executing a manipulation of the argument task can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 6:30:30 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:30 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355415\nhttps://vuldb.com/vuln/355415/cti\nhttps://vuldb.com/submit/785832\nhttps://github.com/assafelovic/gpt-researcher/issues/1692\nhttps://github.com/assafelovic/gpt-researcher/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5625\n",
+  "aliases": "GHSA-9v4r-x2jq-w7jg\nCVE-2026-5625\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "40e7874c-5a47-3588-9444-054a1158e784",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.3"
+    },
+    {
+      "id": "7e41ce8e-5e01-317b-b166-bdd6db6ebed1",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.1"
+    },
+    {
+      "id": "89254c45-fac7-3aba-8fd1-b550a1d48f09",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.2"
+    },
+    {
+      "id": "cded6aad-68f7-38f8-a0b4-814692650926",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2cfcb52f-efad-392d-b6d4-991d8775006c",
+      "vendor": {
+        "name": "assafelovic"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19180.json b/advisories/2026/04/EUVD-2026-19180.json
new file mode 100644
index 0000000000..01ff69b5cd
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19180.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19180",
+  "enisaUuid": "fc970cd8-9637-340f-9bf9-5792563b1016",
+  "description": "A security vulnerability has been detected in Belkin F9K1015 1.00.10. Impacted is the function formSetSystemSettings of the file /goform/formSetSystemSettings of the component Setting Handler. The manipulation of the argument webpage leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 6:30:30 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:30 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355416\nhttps://vuldb.com/vuln/355416/cti\nhttps://vuldb.com/submit/785555\nhttps://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_12/README.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5628\n",
+  "aliases": "CVE-2026-5628\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "a557b45b-c9c3-343b-866c-6491e1bc64d3",
+      "product": {
+        "name": "F9K1015"
+      },
+      "product_version": "1.00.10"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "7f1a8246-4f34-323d-b27d-724a66108292",
+      "vendor": {
+        "name": "Belkin"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19182.json b/advisories/2026/04/EUVD-2026-19182.json
new file mode 100644
index 0000000000..cc4ed6a041
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19182.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19182",
+  "enisaUuid": "7937c686-d8de-3bbf-b1f6-a3f890c99ace",
+  "description": "A vulnerability was detected in Belkin F9K1015 1.00.10. The affected element is the function formSetFirewall of the file /goform/formSetFirewall. The manipulation of the argument webpage results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "datePublished": "Apr 6, 2026, 6:30:30 AM",
+  "dateUpdated": "Apr 6, 2026, 6:30:30 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355417\nhttps://vuldb.com/vuln/355417/cti\nhttps://vuldb.com/submit/785556\nhttps://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_13/README.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5629\n",
+  "aliases": "GHSA-m47x-pvpv-3jg6\nCVE-2026-5629\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "e10388f6-65cb-361b-bc51-06af2652cb2c",
+      "product": {
+        "name": "F9K1015"
+      },
+      "product_version": "1.00.10"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "a9adee6e-c7ef-3856-88de-b01ac7dbd7c1",
+      "vendor": {
+        "name": "Belkin"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19184.json b/advisories/2026/04/EUVD-2026-19184.json
new file mode 100644
index 0000000000..1c9de0f1ab
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19184.json
@@ -0,0 +1,52 @@
+{
+  "id": "EUVD-2026-19184",
+  "enisaUuid": "cc4fea6f-f988-3c7b-8c4b-94f87924393b",
+  "description": "A flaw has been found in assafelovic gpt-researcher up to 3.4.3. The impacted element is an unknown function of the file backend/server/app.py of the component Report API. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355418\nhttps://vuldb.com/vuln/355418/cti\nhttps://vuldb.com/submit/785856\nhttps://github.com/assafelovic/gpt-researcher/issues/1693\nhttps://github.com/assafelovic/gpt-researcher/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5630\n",
+  "aliases": "CVE-2026-5630\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "277062ae-0aa8-3d5c-8065-2cc66b5c561d",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.3"
+    },
+    {
+      "id": "4ab0b5f8-462f-3161-af5f-022b778e65da",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.0"
+    },
+    {
+      "id": "4eb9c3ac-a9c7-3ed5-aea6-03e7572a3dbc",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.2"
+    },
+    {
+      "id": "7d464c7b-5a08-3d79-8023-336e60006354",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "e778e89c-a209-36eb-982a-94e3a52f5fe8",
+      "vendor": {
+        "name": "assafelovic"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19186.json b/advisories/2026/04/EUVD-2026-19186.json
new file mode 100644
index 0000000000..2ad51d51fc
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19186.json
@@ -0,0 +1,52 @@
+{
+  "id": "EUVD-2026-19186",
+  "enisaUuid": "0b9dd6e8-da6c-3616-8f95-345487227a68",
+  "description": "A vulnerability has been found in assafelovic gpt-researcher up to 3.4.3. This affects the function extract_command_data of the file backend/server/server_utils.py of the component ws Endpoint. Such manipulation of the argument args leads to code injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355419\nhttps://vuldb.com/vuln/355419/cti\nhttps://vuldb.com/submit/785858\nhttps://github.com/assafelovic/gpt-researcher/issues/1694\nhttps://github.com/assafelovic/gpt-researcher/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5631\n",
+  "aliases": "CVE-2026-5631\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "a6a92b26-f03f-34cd-88a0-394099a5d9ff",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.3"
+    },
+    {
+      "id": "c49064ea-8839-38c7-9228-2a689f8c3e16",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.0"
+    },
+    {
+      "id": "c70e73db-c93a-3cfe-bafe-3a2ce1342e01",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.1"
+    },
+    {
+      "id": "f5fb288a-2887-39ea-b02d-4baf1a6259eb",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.2"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "177e9b19-2ecc-3f59-ae76-2fd476fa65db",
+      "vendor": {
+        "name": "assafelovic"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19188.json b/advisories/2026/04/EUVD-2026-19188.json
new file mode 100644
index 0000000000..a28fc7bd82
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19188.json
@@ -0,0 +1,52 @@
+{
+  "id": "EUVD-2026-19188",
+  "enisaUuid": "4c0180d0-4796-3911-80e9-344470dfddf2",
+  "description": "A vulnerability was found in assafelovic gpt-researcher up to 3.4.3. This impacts an unknown function of the component HTTP REST API Endpoint. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355420\nhttps://vuldb.com/vuln/355420/cti\nhttps://vuldb.com/submit/785874\nhttps://github.com/assafelovic/gpt-researcher/issues/1695\nhttps://github.com/assafelovic/gpt-researcher/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5632\n",
+  "aliases": "CVE-2026-5632\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "42fbea14-bf72-3a58-bfce-a35897b82b1a",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.2"
+    },
+    {
+      "id": "8ca7b4d4-5c27-3e65-92bf-f27b49197a01",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.0"
+    },
+    {
+      "id": "caea4ba2-d6dd-32e7-a797-407227f1c7a5",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.3"
+    },
+    {
+      "id": "fb826784-6c8f-3668-ab3e-cbcd7ff2309c",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "c89b7f18-4681-3a76-8eae-56d82cfd44d8",
+      "vendor": {
+        "name": "assafelovic"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19190.json b/advisories/2026/04/EUVD-2026-19190.json
new file mode 100644
index 0000000000..b6e91c4a3a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19190.json
@@ -0,0 +1,52 @@
+{
+  "id": "EUVD-2026-19190",
+  "enisaUuid": "e8fb8dd2-1738-3b8e-b0d6-4854d514267e",
+  "description": "A vulnerability was determined in assafelovic gpt-researcher up to 3.4.3. Affected is an unknown function of the component ws Endpoint. Executing a manipulation of the argument source_urls can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355421\nhttps://vuldb.com/vuln/355421/cti\nhttps://vuldb.com/submit/785876\nhttps://github.com/assafelovic/gpt-researcher/issues/1696\nhttps://github.com/assafelovic/gpt-researcher/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5633\n",
+  "aliases": "GHSA-8p84-j4x4-c993\nCVE-2026-5633\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "40c22485-a663-3dc6-9ee0-c5e44a89a3bb",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.0"
+    },
+    {
+      "id": "48be2e62-6897-3755-a672-c07711bf01b7",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.2"
+    },
+    {
+      "id": "4b6d2956-116b-3cef-a8cd-25712f8d9931",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.1"
+    },
+    {
+      "id": "521e387a-8bde-3935-992d-2a45d4e52d04",
+      "product": {
+        "name": "gpt-researcher"
+      },
+      "product_version": "3.4.3"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "bfb05627-3d90-3a14-9a23-716cb4d22c9f",
+      "vendor": {
+        "name": "assafelovic"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19192.json b/advisories/2026/04/EUVD-2026-19192.json
new file mode 100644
index 0000000000..c44d7908ae
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19192.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19192",
+  "enisaUuid": "6bb16996-05fd-3a53-a231-8a095f6105e3",
+  "description": "A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /cancelorder.php of the component Parameter Handler. This manipulation of the argument oid causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355424\nhttps://vuldb.com/vuln/355424/cti\nhttps://vuldb.com/submit/785947\nhttps://github.com/f1rstb100d/CVE/issues/16\nhttps://phpgurukul.com/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5636\n",
+  "aliases": "GHSA-h6g8-c22x-m2px\nCVE-2026-5636\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "017785d9-55c2-3a19-8810-82e7e0fef96b",
+      "product": {
+        "name": "Online Shopping Portal Project"
+      },
+      "product_version": "2.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "564019c5-b537-3e03-925a-637048bb1ca4",
+      "vendor": {
+        "name": "PHPGurukul"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19193.json b/advisories/2026/04/EUVD-2026-19193.json
new file mode 100644
index 0000000000..91ce0e8fdd
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19193.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19193",
+  "enisaUuid": "4a5ba7fd-0673-3aff-93ce-2b5e038f37d2",
+  "description": "A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component Parameter Handler. The manipulation of the argument cid results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355423\nhttps://vuldb.com/vuln/355423/cti\nhttps://vuldb.com/submit/785872\nhttps://github.com/f1rstb100d/CVE/issues/15\nhttps://phpgurukul.com/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5635\n",
+  "aliases": "GHSA-3f67-8v72-vm9p\nCVE-2026-5635\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "2a8d8e2f-973f-3ad1-adc5-63890f475998",
+      "product": {
+        "name": "Online Shopping Portal Project"
+      },
+      "product_version": "2.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d34a73e1-1029-3979-8729-94fe01998bc8",
+      "vendor": {
+        "name": "PHPGurukul"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19194.json b/advisories/2026/04/EUVD-2026-19194.json
new file mode 100644
index 0000000000..853d1c2d09
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19194.json
@@ -0,0 +1,78 @@
+{
+  "id": "EUVD-2026-19194",
+  "enisaUuid": "2d2ae92d-a4db-3d80-b7de-1ee7c98c9ebb",
+  "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION\n\nUse sb->s_uuid for a proper volume identifier as the primary choice.\nFor filesystems that do not provide a UUID, fall back to stfs.f_fsid\nobtained from vfs_statfs().",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 0.0,
+  "references": "https://git.kernel.org/stable/c/ce00616bc1df675bfdacc968f2bf7c51f4669227\nhttps://git.kernel.org/stable/c/3d80ebe6d1b7bc9ad20fd9b0c1a0c56d804f8a0a\nhttps://git.kernel.org/stable/c/c283a6ffe6d5d6e5594d991286b9ce15951572e1\nhttps://git.kernel.org/stable/c/3a64125730cabc34fccfbc230c2667c2e14f7308\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31410\n",
+  "aliases": "CVE-2026-31410\nGHSA-5hjj-hhq3-52wj\n",
+  "assigner": "Linux",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0542d290-e627-38d8-bb45-fe39a9c73dc4",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <c283a6ffe6d5d6e5594d991286b9ce15951572e1"
+    },
+    {
+      "id": "16ced5cc-5d1b-3bfe-be18-72c5047a5e58",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <ce00616bc1df675bfdacc968f2bf7c51f4669227"
+    },
+    {
+      "id": "19fd0f76-bdf1-3d40-98f7-337493f894fe",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 7.0-rc5"
+    },
+    {
+      "id": "241af39f-02e9-349b-bd60-2a8c5201e54c",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.18.20"
+    },
+    {
+      "id": "4bc54590-003c-3dd1-9ec6-9765f5c28f27",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <3d80ebe6d1b7bc9ad20fd9b0c1a0c56d804f8a0a"
+    },
+    {
+      "id": "78a6ebb0-f1fe-39bf-953e-f7ada56d7a10",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <3a64125730cabc34fccfbc230c2667c2e14f7308"
+    },
+    {
+      "id": "860a6c01-faa6-3224-8a67-e2b820228ccc",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.19.10"
+    },
+    {
+      "id": "eb7351cb-4d2f-38db-8098-6b6cccc0ba74",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.12.78"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "fede55df-6122-3846-b8da-c3d17cfda07c",
+      "vendor": {
+        "name": "Linux"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19195.json b/advisories/2026/04/EUVD-2026-19195.json
new file mode 100644
index 0000000000..fbf2c4ccd6
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19195.json
@@ -0,0 +1,106 @@
+{
+  "id": "EUVD-2026-19195",
+  "enisaUuid": "8ff7ada8-5dbf-394d-83ee-b502229d5ab6",
+  "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: unset conn->binding on failed binding request\n\nWhen a multichannel SMB2_SESSION_SETUP request with\nSMB2_SESSION_REQ_FLAG_BINDING fails ksmbd sets conn->binding = true\nbut never clears it on the error path. This leaves the connection in\na binding state where all subsequent ksmbd_session_lookup_all() calls\nfall back to the global sessions table. This fix it by clearing\nconn->binding = false in the error path.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 0.0,
+  "references": "https://git.kernel.org/stable/c/d073870dab8f6dadced81d13d273ff0b21cb7f4e\nhttps://git.kernel.org/stable/c/6ebef4a220a1ebe345de899ebb9ae394206fe921\nhttps://git.kernel.org/stable/c/89afe5e2dbea6e9d8e5f11324149d06fa3a4efca\nhttps://git.kernel.org/stable/c/9feb2d1bf86d9e5e66b8565f37f8d3a7d281a772\nhttps://git.kernel.org/stable/c/6260fc85ed1298a71d24a75d01f8b2e56d489a60\nhttps://git.kernel.org/stable/c/282343cf8a4a5a3603b1cb0e17a7083e4a593b03\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31409\n",
+  "aliases": "CVE-2026-31409\nGHSA-5qj3-gjq7-62fm\n",
+  "assigner": "Linux",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "09231704-800c-3ca4-9808-54e850b2ee90",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <282343cf8a4a5a3603b1cb0e17a7083e4a593b03"
+    },
+    {
+      "id": "13369adf-104d-3408-9887-e1cd462390c8",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 7.0-rc5"
+    },
+    {
+      "id": "333b7ba9-d07e-333e-a01d-7804d384b74e",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <89afe5e2dbea6e9d8e5f11324149d06fa3a4efca"
+    },
+    {
+      "id": "3b884fef-3b89-3285-9c02-1cbbf5b643bb",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.6.130"
+    },
+    {
+      "id": "4f8d2199-cadb-3b3e-a32c-adc691317590",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.1.167"
+    },
+    {
+      "id": "5312194b-f5b6-3262-aa75-9e1ee621c09a",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <6ebef4a220a1ebe345de899ebb9ae394206fe921"
+    },
+    {
+      "id": "95021a23-8085-33cc-bd14-a133d01dbc1f",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <9feb2d1bf86d9e5e66b8565f37f8d3a7d281a772"
+    },
+    {
+      "id": "b15e371a-0357-393b-acc4-0a191bd473e1",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <d073870dab8f6dadced81d13d273ff0b21cb7f4e"
+    },
+    {
+      "id": "b733f873-884e-3a9c-a922-7410c738a42d",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.12.78"
+    },
+    {
+      "id": "cff669a9-c93d-3882-a33f-b2725b5934a0",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <6260fc85ed1298a71d24a75d01f8b2e56d489a60"
+    },
+    {
+      "id": "d7a6c8bf-b668-3ee2-bbc0-60a147fa7d6a",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.19.10"
+    },
+    {
+      "id": "e7084359-5aea-35e4-b879-91eef9f2589c",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.18.20"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "a7cc3e23-f1a2-3555-82c6-a14455865743",
+      "vendor": {
+        "name": "Linux"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19196.json b/advisories/2026/04/EUVD-2026-19196.json
new file mode 100644
index 0000000000..e42d1bbed4
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19196.json
@@ -0,0 +1,106 @@
+{
+  "id": "EUVD-2026-19196",
+  "enisaUuid": "1d23e24e-b297-36dc-b4b7-d0b8d71606f0",
+  "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold\n\nsco_recv_frame() reads conn->sk under sco_conn_lock() but immediately\nreleases the lock without holding a reference to the socket. A concurrent\nclose() can free the socket between the lock release and the subsequent\nsk->sk_state access, resulting in a use-after-free.\n\nOther functions in the same file (sco_sock_timeout(), sco_conn_del())\ncorrectly use sco_sock_hold() to safely hold a reference under the lock.\n\nFix by using sco_sock_hold() to take a reference before releasing the\nlock, and adding sock_put() on all exit paths.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 0.0,
+  "references": "https://git.kernel.org/stable/c/45aaca995e4a7a05b272a58e7ab2fff4f611b8f1\nhttps://git.kernel.org/stable/c/108b81514d8f2535eb16651495cefb2250528db3\nhttps://git.kernel.org/stable/c/7197462e90b8ce15caa1ae15d4bc2bb8cd21b11e\nhttps://git.kernel.org/stable/c/e76e8f0581ef555eacc11dbb095e602fb30a5361\nhttps://git.kernel.org/stable/c/598dbba9919c5e36c54fe1709b557d64120cb94b\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31408\n",
+  "aliases": "CVE-2026-31408\nGHSA-82h6-xw4j-pq2m\n",
+  "assigner": "Linux",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "2c1d50a1-38b0-36f0-9505-3aef11d80fe0",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <e76e8f0581ef555eacc11dbb095e602fb30a5361"
+    },
+    {
+      "id": "45d13320-8f4e-38b0-8c1c-2f2c2ad6ee35",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "2.6.12"
+    },
+    {
+      "id": "4b5855e7-29ad-3169-acab-59d19f9d1f53",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 0"
+    },
+    {
+      "id": "72bed15a-d343-3c6c-888d-b0455b668dba",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.12.80"
+    },
+    {
+      "id": "75e03be1-8c76-342b-8d4a-a1fd8faff941",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <108b81514d8f2535eb16651495cefb2250528db3"
+    },
+    {
+      "id": "835d207c-ecb5-37c8-b2f9-363dac6b055c",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <45aaca995e4a7a05b272a58e7ab2fff4f611b8f1"
+    },
+    {
+      "id": "8d9c316d-1487-36f0-9ca4-bc08fe73d093",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <7197462e90b8ce15caa1ae15d4bc2bb8cd21b11e"
+    },
+    {
+      "id": "908c98cb-f64c-38e5-9821-320f120a1216",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.6.131"
+    },
+    {
+      "id": "933dde1a-d8d0-3ab0-9b2e-76720b218711",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.18.21"
+    },
+    {
+      "id": "a41b0a82-83a8-3bb1-b932-0030ecf79548",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.19.11"
+    },
+    {
+      "id": "beb58c3d-afc6-3729-8d75-c482c330a5c7",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <598dbba9919c5e36c54fe1709b557d64120cb94b"
+    },
+    {
+      "id": "f9e93b49-9c75-398f-bd84-70553177c396",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 7.0-rc6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "c119435f-9721-38e5-8fae-8fe6587cc893",
+      "vendor": {
+        "name": "Linux"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19197.json b/advisories/2026/04/EUVD-2026-19197.json
new file mode 100644
index 0000000000..0cdf49d466
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19197.json
@@ -0,0 +1,64 @@
+{
+  "id": "EUVD-2026-19197",
+  "enisaUuid": "8ef44eaa-e864-3f9f-a69d-ff7f1c02fdc6",
+  "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: conntrack: add missing netlink policy validations\n\nHyunwoo Kim reports out-of-bounds access in sctp and ctnetlink.\n\nThese attributes are used by the kernel without any validation.\nExtend the netlink policies accordingly.\n\nQuoting the reporter:\n  nlattr_to_sctp() assigns the user-supplied CTA_PROTOINFO_SCTP_STATE\n  value directly to ct->proto.sctp.state without checking that it is\n  within the valid range. [..]\n\n  and: ... with exp->dir = 100, the access at\n  ct->master->tuplehash[100] reads 5600 bytes past the start of a\n  320-byte nf_conn object, causing a slab-out-of-bounds read confirmed by\n  UBSAN.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 0.0,
+  "references": "https://git.kernel.org/stable/c/0fbae1e74493d5a160a70c51aeba035d8266ea7d\nhttps://git.kernel.org/stable/c/f900e1d77ee0ef87bfb5ab3fe60f0b3d8ad5ba05\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31407\n",
+  "aliases": "CVE-2026-31407\nGHSA-cf8w-8g67-48gv\n",
+  "assigner": "Linux",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "02466696-8d81-3a6d-b9c2-ce5ba0a2783f",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.19.10"
+    },
+    {
+      "id": "3e98484b-5810-3146-9a58-d3b14e537aa9",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 7.0-rc5"
+    },
+    {
+      "id": "6848d189-6be1-3ee1-9606-5426adfc17d6",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 0"
+    },
+    {
+      "id": "a1364ca2-6f56-36ed-b990-763bbeac3ed1",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "2.6.27"
+    },
+    {
+      "id": "b860b522-0c6c-3562-a6aa-9975ee2934af",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "a258860e01b80e8f554a4ab1a6c95e6042eb8b73 <0fbae1e74493d5a160a70c51aeba035d8266ea7d"
+    },
+    {
+      "id": "dd4329f3-dd21-31ea-9a49-cb8a989ec916",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "a258860e01b80e8f554a4ab1a6c95e6042eb8b73 <f900e1d77ee0ef87bfb5ab3fe60f0b3d8ad5ba05"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "5c00cc4e-dcb2-326b-8f4c-68dfcfb24927",
+      "vendor": {
+        "name": "Linux"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19198.json b/advisories/2026/04/EUVD-2026-19198.json
new file mode 100644
index 0000000000..58c942cd32
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19198.json
@@ -0,0 +1,92 @@
+{
+  "id": "EUVD-2026-19198",
+  "enisaUuid": "6960de2a-6c15-3e64-96c7-dc07ddec564f",
+  "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini()\n\nAfter cancel_delayed_work_sync() is called from\nxfrm_nat_keepalive_net_fini(), xfrm_state_fini() flushes remaining\nstates via __xfrm_state_delete(), which calls\nxfrm_nat_keepalive_state_updated() to re-schedule nat_keepalive_work.\n\nThe following is a simple race scenario:\n\n           cpu0                             cpu1\n\ncleanup_net() [Round 1]\n  ops_undo_list()\n    xfrm_net_exit()\n      xfrm_nat_keepalive_net_fini()\n        cancel_delayed_work_sync(nat_keepalive_work);\n      xfrm_state_fini()\n        xfrm_state_flush()\n          xfrm_state_delete(x)\n            __xfrm_state_delete(x)\n              xfrm_nat_keepalive_state_updated(x)\n                schedule_delayed_work(nat_keepalive_work);\n  rcu_barrier();\n  net_complete_free();\n  net_passive_dec(net);\n    llist_add(&net->defer_free_list, &defer_free_list);\n\ncleanup_net() [Round 2]\n  rcu_barrier();\n  net_complete_free()\n    kmem_cache_free(net_cachep, net);\n                                     nat_keepalive_work()\n                                       // on freed net\n\nTo prevent this, cancel_delayed_work_sync() is replaced with\ndisable_delayed_work_sync().",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 0.0,
+  "references": "https://git.kernel.org/stable/c/32d0f44c2f14d60fe8e920e69a28c11051543ec1\nhttps://git.kernel.org/stable/c/2255ed6adbc3100d2c4a83abd9d0396d04b87792\nhttps://git.kernel.org/stable/c/21f2fc49ca6faa393c31da33b8a4e6c41fc84c13\nhttps://git.kernel.org/stable/c/daf8e3b253aa760ff9e96c7768a464bc1d6b3c90\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31406\n",
+  "aliases": "CVE-2026-31406\nGHSA-pfp5-r4vh-w3r6\n",
+  "assigner": "Linux",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "1943b0f8-3227-3314-9216-3e0f26fc36d0",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae <21f2fc49ca6faa393c31da33b8a4e6c41fc84c13"
+    },
+    {
+      "id": "1a034f89-811f-33e2-9a46-d9e4df0d9853",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 0"
+    },
+    {
+      "id": "36733d23-f03f-395c-86ef-347d7addb164",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "6.11"
+    },
+    {
+      "id": "3dd8b507-af57-3e21-8dd9-057b8723318f",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae <daf8e3b253aa760ff9e96c7768a464bc1d6b3c90"
+    },
+    {
+      "id": "4a8ab8da-52e2-3d8e-a120-436d08a613e6",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae <32d0f44c2f14d60fe8e920e69a28c11051543ec1"
+    },
+    {
+      "id": "a9af644f-4a22-3054-8d67-933866d94a44",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 7.0-rc6"
+    },
+    {
+      "id": "b2fe929f-d68a-3a55-8df8-6abd263133b8",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.18.21"
+    },
+    {
+      "id": "c6da6c97-1402-3b4d-8380-b5395fcba504",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "f531d13bdfe3f4f084aaa8acae2cb0f02295f5ae <2255ed6adbc3100d2c4a83abd9d0396d04b87792"
+    },
+    {
+      "id": "e75147cb-79bd-36d0-a438-135417735adf",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.19.11"
+    },
+    {
+      "id": "f192db35-0c23-3cb1-98d9-2e4228006b61",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.12.80"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "941b9e5f-0612-3b26-97e3-0b0109da35f7",
+      "vendor": {
+        "name": "Linux"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19199.json b/advisories/2026/04/EUVD-2026-19199.json
new file mode 100644
index 0000000000..f790ac5603
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19199.json
@@ -0,0 +1,120 @@
+{
+  "id": "EUVD-2026-19199",
+  "enisaUuid": "5bf925a3-0a96-32cd-859a-6761f0d8fc7a",
+  "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-net: fix OOB access in ULE extension header tables\n\nThe ule_mandatory_ext_handlers[] and ule_optional_ext_handlers[] tables\nin handle_one_ule_extension() are declared with 255 elements (valid\nindices 0-254), but the index htype is derived from network-controlled\ndata as (ule_sndu_type & 0x00FF), giving a range of 0-255. When\nhtype equals 255, an out-of-bounds read occurs on the function pointer\ntable, and the OOB value may be called as a function pointer.\n\nAdd a bounds check on htype against the array size before either table\nis accessed. Out-of-range values now cause the SNDU to be discarded.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 0.0,
+  "references": "https://git.kernel.org/stable/c/29ef43ceb121d67b87f4cbb08439e4e9e732eff8\nhttps://git.kernel.org/stable/c/1a6da3dbb9985d00743073a1cc1f96e59f5abc30\nhttps://git.kernel.org/stable/c/145e50c2c700fa52b840df7bab206043997dd18e\nhttps://git.kernel.org/stable/c/8bde543d2a5f935ba2a6a6325a2e02f8a9256fbe\nhttps://git.kernel.org/stable/c/f2b65dcb78c8990e4c68a906627433be1fe38a92\nhttps://git.kernel.org/stable/c/24d87712727a5017ad142d63940589a36cd25647\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31405\n",
+  "aliases": "CVE-2026-31405\nGHSA-qqxp-95qg-gqxr\n",
+  "assigner": "Linux",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0b7cf90a-12d4-3118-91ec-1763cc48ea9a",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.1.167"
+    },
+    {
+      "id": "288d3d59-ca35-300e-9b54-326889491d50",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.6.130"
+    },
+    {
+      "id": "49a7d75f-7f6b-341a-bcc2-a39603786de5",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.19.9"
+    },
+    {
+      "id": "4b38bf13-b330-336c-9550-bbd5ad8b806d",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <29ef43ceb121d67b87f4cbb08439e4e9e732eff8"
+    },
+    {
+      "id": "4fb14e22-6600-370c-a2da-a05bec5e8d05",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <1a6da3dbb9985d00743073a1cc1f96e59f5abc30"
+    },
+    {
+      "id": "517a9a08-5212-38fb-b441-e06a53de9d6a",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 0"
+    },
+    {
+      "id": "5a6c9568-61e4-325b-8934-bac2c2b78830",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "2.6.12"
+    },
+    {
+      "id": "85ffd4a5-359f-3aee-ba96-1670057f5725",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <8bde543d2a5f935ba2a6a6325a2e02f8a9256fbe"
+    },
+    {
+      "id": "b3afc190-a117-360f-b57b-9103aefa3974",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <145e50c2c700fa52b840df7bab206043997dd18e"
+    },
+    {
+      "id": "d173b21d-51b2-303d-b89a-1d693e75935f",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <f2b65dcb78c8990e4c68a906627433be1fe38a92"
+    },
+    {
+      "id": "df119429-0433-305c-b2c1-76d9e9709da2",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 7.0-rc3"
+    },
+    {
+      "id": "e45bed96-1209-3e56-aed5-e1037a45c641",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.18.19"
+    },
+    {
+      "id": "e929572d-fcd4-3de5-9148-41689aae0e27",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <24d87712727a5017ad142d63940589a36cd25647"
+    },
+    {
+      "id": "fb4d00c5-1cb6-3a46-b739-f09fd2fea7ff",
+      "product": {
+        "name": "Linux"
+      },
+      "product_version": "patch: 6.12.78"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "16d8e946-07a6-3ca8-8fa7-c635c3e527cc",
+      "vendor": {
+        "name": "Linux"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19200.json b/advisories/2026/04/EUVD-2026-19200.json
new file mode 100644
index 0000000000..845e323e96
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19200.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19200",
+  "enisaUuid": "9e40ba9d-f589-3b3e-8813-21192e0e9a56",
+  "description": "A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /book_car.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355422\nhttps://vuldb.com/vuln/355422/cti\nhttps://vuldb.com/submit/785863\nhttps://github.com/eqiya17/collection-of-vulnerabilities/issues/12\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5634\n",
+  "aliases": "GHSA-xhjx-m35j-wjqw\nCVE-2026-5634\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "8fcd3bc0-b66c-3653-9579-563e4013d183",
+      "product": {
+        "name": "Car Rental Project"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "9166b8d0-c027-3a06-9b85-138d882b7f75",
+      "vendor": {
+        "name": "projectworlds"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19201.json b/advisories/2026/04/EUVD-2026-19201.json
new file mode 100644
index 0000000000..861d9ebf87
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19201.json
@@ -0,0 +1,23 @@
+{
+  "id": "EUVD-2026-19201",
+  "enisaUuid": "5496e514-ba15-3c18-b8f2-96f6c1c7904f",
+  "description": "A flaw was found in Keycloak. A remote attacker can exploit a Cross-Origin Resource Sharing (CORS) header injection vulnerability in Keycloak's User-Managed Access (UMA) token endpoint. This flaw occurs because the `azp` claim from a client-supplied JSON Web Token (JWT) is used to set the `Access-Control-Allow-Origin` header before the JWT signature is validated. When a specially crafted JWT with an attacker-controlled `azp` value is processed, this value is reflected as the CORS origin, even if the grant is later rejected. This can lead to the exposure of low-sensitivity information from authorization server error responses, weakening origin isolation, but only when a target client is misconfigured with `webOrigins: [\"*\"]`.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 3.7,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
+  "references": "https://access.redhat.com/security/cve/CVE-2026-37977\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2455324\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-37977\n",
+  "aliases": "CVE-2026-37977\nGHSA-5v8v-xvjv-57x7\n",
+  "assigner": "redhat",
+  "epss": 0.0,
+  "enisaIdProduct": [],
+  "enisaIdVendor": [
+    {
+      "id": "276a9f67-197a-3c87-bdf8-7056088b3e07",
+      "vendor": {
+        "name": "Red Hat"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19203.json b/advisories/2026/04/EUVD-2026-19203.json
new file mode 100644
index 0000000000..7d4edb0aa6
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19203.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19203",
+  "enisaUuid": "1621df3c-5ea7-3f86-bd14-4c4ad2f42b99",
+  "description": "A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vulnerability affects unknown code of the file /message_admin.php of the component Parameter Handler. Such manipulation of the argument Message leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355425\nhttps://vuldb.com/vuln/355425/cti\nhttps://vuldb.com/submit/785951\nhttps://github.com/eqiya17/collection-of-vulnerabilities/issues/13\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5637\n",
+  "aliases": "GHSA-f92h-cvpr-77r6\nCVE-2026-5637\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ade8393d-dcbe-3a88-b535-977cc18140eb",
+      "product": {
+        "name": "Car Rental System"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "ce7dba42-104f-3bb2-826b-df7523055199",
+      "vendor": {
+        "name": "projectworlds"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19205.json b/advisories/2026/04/EUVD-2026-19205.json
new file mode 100644
index 0000000000..c33250b462
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19205.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-19205",
+  "enisaUuid": "afab90a6-cdf3-375d-800c-87987cc564e9",
+  "description": "A vulnerability was detected in HerikLyma CPPWebFramework up to 3.1. This issue affects some unknown processing. Performing a manipulation results in path traversal. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355426\nhttps://vuldb.com/vuln/355426/cti\nhttps://vuldb.com/submit/785952\nhttps://github.com/HerikLyma/CPPWebFramework/issues/40\nhttps://github.com/HerikLyma/CPPWebFramework/issues/40#issue-4118436068\nhttps://github.com/HerikLyma/CPPWebFramework/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5638\n",
+  "aliases": "GHSA-gmx4-p9gm-fxcw\nCVE-2026-5638\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "de7851a4-8476-361f-b345-599e48d38410",
+      "product": {
+        "name": "CPPWebFramework"
+      },
+      "product_version": "3.1"
+    },
+    {
+      "id": "efe42539-409a-3811-a116-8e51946a89fa",
+      "product": {
+        "name": "CPPWebFramework"
+      },
+      "product_version": "3.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d1eae2c6-58c3-3f10-98ba-1aaac0cf2f9b",
+      "vendor": {
+        "name": "HerikLyma"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19207.json b/advisories/2026/04/EUVD-2026-19207.json
new file mode 100644
index 0000000000..41ae5bee95
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19207.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19207",
+  "enisaUuid": "fe72fa04-ee85-39c6-b14b-89a922db04f7",
+  "description": "A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355427\nhttps://vuldb.com/vuln/355427/cti\nhttps://vuldb.com/submit/785966\nhttps://github.com/f1rstb100d/CVE/issues/17\nhttps://phpgurukul.com/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5639\n",
+  "aliases": "GHSA-7p84-m28m-q2vh\nCVE-2026-5639\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "4a92435d-ba62-3a11-9f6f-d182365bfef5",
+      "product": {
+        "name": "Online Shopping Portal Project"
+      },
+      "product_version": "2.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "ee21eb56-1870-3c9c-8983-3a757e9e2fb7",
+      "vendor": {
+        "name": "PHPGurukul"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19209.json b/advisories/2026/04/EUVD-2026-19209.json
new file mode 100644
index 0000000000..2ea87b9b13
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19209.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19209",
+  "enisaUuid": "20b3926b-766c-30a7-9f87-c924478b5c64",
+  "description": "A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.",
+  "datePublished": "Apr 6, 2026, 9:31:42 AM",
+  "dateUpdated": "Apr 6, 2026, 9:31:42 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355428\nhttps://vuldb.com/vuln/355428/cti\nhttps://vuldb.com/submit/785985\nhttps://github.com/f1rstb100d/CVE/issues/18\nhttps://phpgurukul.com/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5640\n",
+  "aliases": "GHSA-9wvf-7g57-m92f\nCVE-2026-5640\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "264bd4e5-3379-3abc-8dea-1bf8c05d157d",
+      "product": {
+        "name": "Online Shopping Portal Project"
+      },
+      "product_version": "2.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "48b09abc-0fcb-3b37-8798-ecfd8a280d6b",
+      "vendor": {
+        "name": "PHPGurukul"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19211.json b/advisories/2026/04/EUVD-2026-19211.json
new file mode 100644
index 0000000000..a73ee6c09e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19211.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19211",
+  "enisaUuid": "aa4cb642-be3f-3d21-8112-48f45e371402",
+  "description": "A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.",
+  "datePublished": "Apr 6, 2026, 12:32:09 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:09 PM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355429\nhttps://vuldb.com/vuln/355429/cti\nhttps://vuldb.com/submit/785993\nhttps://github.com/f1rstb100d/CVE/issues/19\nhttps://phpgurukul.com/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5641\n",
+  "aliases": "CVE-2026-5641\nGHSA-6qmc-wjmv-rgqw\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "39ae48b7-9a5a-377d-bc7a-c235b310cdaa",
+      "product": {
+        "name": "Online Shopping Portal Project"
+      },
+      "product_version": "2.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "5ebbb3e9-bb45-38f6-80fc-9eb4c2188215",
+      "vendor": {
+        "name": "PHPGurukul"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19213.json b/advisories/2026/04/EUVD-2026-19213.json
new file mode 100644
index 0000000000..50930f2939
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19213.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19213",
+  "enisaUuid": "a8411ba8-a63c-3a68-b267-010fc05e6be2",
+  "description": "A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown function of the file /viva/update.php of the component HTTP POST Request Handler. This manipulation of the argument Name causes improper authorization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 12:32:09 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:09 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355430\nhttps://vuldb.com/vuln/355430/cti\nhttps://vuldb.com/submit/785857\nhttps://github.com/Cyber-III/Student-Management-System/issues/236\nhttps://github.com/Cyber-III/Student-Management-System/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5642\n",
+  "aliases": "GHSA-v373-4mh7-8fh7\nCVE-2026-5642\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "21b3909e-a60c-32c1-8786-ec9b75b5ba10",
+      "product": {
+        "name": "Student-Management-System"
+      },
+      "product_version": "1a938fa61e9f735078e9b291d2e6215b4942af3f"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "7fd24229-37da-3be4-a166-d99a87a8898f",
+      "vendor": {
+        "name": "Cyber-III"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19215.json b/advisories/2026/04/EUVD-2026-19215.json
new file mode 100644
index 0000000000..f345398a0e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19215.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19215",
+  "enisaUuid": "36d4a4b0-4ad8-3160-9ca5-5915709cbc9a",
+  "description": "A vulnerability was identified in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This impacts an unknown function of the file /admin/Add%20notice/notice.php of the component Admin Add Endpoint. Such manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 12:32:09 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:09 PM",
+  "baseScore": 4.8,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355431\nhttps://vuldb.com/vuln/355431/cti\nhttps://vuldb.com/submit/785859\nhttps://github.com/Cyber-III/Student-Management-System/issues/237\nhttps://github.com/Cyber-III/Student-Management-System/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5643\n",
+  "aliases": "CVE-2026-5643\nGHSA-fwhv-4w7x-fj6c\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "065657fb-0f31-3a5f-a291-6f5052d0e364",
+      "product": {
+        "name": "Student-Management-System"
+      },
+      "product_version": "1a938fa61e9f735078e9b291d2e6215b4942af3f"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "04f9d8dc-2ddf-33f3-b588-e05d7ccd72de",
+      "vendor": {
+        "name": "Cyber-III"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19217.json b/advisories/2026/04/EUVD-2026-19217.json
new file mode 100644
index 0000000000..d79dc2a7f9
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19217.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19217",
+  "enisaUuid": "31e191c7-936a-366c-b1ee-21f9810b0dff",
+  "description": "A security flaw has been discovered in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. Affected is an unknown function of the file /admin/Add%20notice/batch-notice.php. Performing a manipulation of the argument $_SERVER['PHP_SELF'] results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 12:32:09 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:09 PM",
+  "baseScore": 4.8,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355432\nhttps://vuldb.com/vuln/355432/cti\nhttps://vuldb.com/submit/785867\nhttps://github.com/Cyber-III/Student-Management-System/issues/238\nhttps://github.com/Cyber-III/Student-Management-System/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5644\n",
+  "aliases": "GHSA-7h2q-r7w3-qfpr\nCVE-2026-5644\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c85f6db3-7618-381d-a130-80f919dfc722",
+      "product": {
+        "name": "Student-Management-System"
+      },
+      "product_version": "1a938fa61e9f735078e9b291d2e6215b4942af3f"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "9a0ff72e-94da-390c-b7bc-4f5630a89b8b",
+      "vendor": {
+        "name": "Cyber-III"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19219.json b/advisories/2026/04/EUVD-2026-19219.json
new file mode 100644
index 0000000000..329d767291
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19219.json
@@ -0,0 +1,23 @@
+{
+  "id": "EUVD-2026-19219",
+  "enisaUuid": "72a7af90-7031-3d41-8ff1-a69ec8865267",
+  "description": "A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.",
+  "datePublished": "Apr 6, 2026, 12:32:09 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:09 PM",
+  "baseScore": 5.6,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H",
+  "references": "https://access.redhat.com/security/cve/CVE-2026-5673\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2455340\nhttps://github.com/xiph/theora/issues/24\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5673\n",
+  "aliases": "CVE-2026-5673\n",
+  "assigner": "redhat",
+  "epss": 0.0,
+  "enisaIdProduct": [],
+  "enisaIdVendor": [
+    {
+      "id": "fc24fbd4-29fc-3d7c-af31-369069086caa",
+      "vendor": {
+        "name": "Red Hat"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19221.json b/advisories/2026/04/EUVD-2026-19221.json
new file mode 100644
index 0000000000..3b380967f9
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19221.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19221",
+  "enisaUuid": "4ba08e36-e9b7-3582-b3ba-43bdf00cee3e",
+  "description": "A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /pay.php of the component Parameter Handler. Executing a manipulation of the argument mpesa can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.",
+  "datePublished": "Apr 6, 2026, 12:32:09 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:10 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355433\nhttps://vuldb.com/vuln/355433/cti\nhttps://vuldb.com/submit/786149\nhttps://github.com/2840364044/SQL-Vulnerability-database/issues/1\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5645\n",
+  "aliases": "CVE-2026-5645\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "df348d5a-112f-344a-bc72-c8f0ebfb1ad9",
+      "product": {
+        "name": "Car Rental System"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "1ce9c0d0-c091-3f92-9209-d67e4d42fe1b",
+      "vendor": {
+        "name": "projectworlds"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19223.json b/advisories/2026/04/EUVD-2026-19223.json
new file mode 100644
index 0000000000..8eaa78edc0
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19223.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19223",
+  "enisaUuid": "0cbbb82a-1c39-3afb-86d6-e38a39e151d9",
+  "description": "A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.",
+  "datePublished": "Apr 6, 2026, 12:32:10 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:10 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355434\nhttps://vuldb.com/vuln/355434/cti\nhttps://vuldb.com/submit/786150\nhttps://github.com/MyMySSS/cve/blob/main/cve.md\nhttps://code-projects.org/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5646\n",
+  "aliases": "CVE-2026-5646\nGHSA-7rp3-m58h-6q3h\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ccefe080-83ae-3db9-9b85-84c06594c3c1",
+      "product": {
+        "name": "Easy Blog Site"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "42ba9e64-aac6-3e15-9659-dd32a939125e",
+      "vendor": {
+        "name": "code-projects"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19225.json b/advisories/2026/04/EUVD-2026-19225.json
new file mode 100644
index 0000000000..ae02cd5fef
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19225.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19225",
+  "enisaUuid": "3c5804f1-b544-39ee-874a-ea0c06ccf25e",
+  "description": "A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/admin_feature.php of the component Add Product Page. The manipulation of the argument product_name results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.",
+  "datePublished": "Apr 6, 2026, 12:32:10 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:10 PM",
+  "baseScore": 4.8,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355435\nhttps://vuldb.com/vuln/355435/cti\nhttps://vuldb.com/submit/786171\nhttps://github.com/Jacky159/Pub_0323/issues/1\nhttps://code-projects.org/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5647\n",
+  "aliases": "CVE-2026-5647\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "fa8b305d-418c-3fad-b757-0c9e1a1f323f",
+      "product": {
+        "name": "Online Shoe Store"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "3e2b431a-0fee-3478-8886-ee5a500ff9aa",
+      "vendor": {
+        "name": "code-projects"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19227.json b/advisories/2026/04/EUVD-2026-19227.json
new file mode 100644
index 0000000000..d27ebc3789
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19227.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19227",
+  "enisaUuid": "8015db76-d28e-3478-88f0-7e95e846789b",
+  "description": "A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /userfinishregister.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.",
+  "datePublished": "Apr 6, 2026, 12:32:10 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:10 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355436\nhttps://vuldb.com/vuln/355436/cti\nhttps://vuldb.com/submit/786194\nhttps://github.com/yao536/cve/issues/2\nhttps://code-projects.org/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5648\n",
+  "aliases": "CVE-2026-5648\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "26430663-bba2-3de5-8606-0d85743ce3c3",
+      "product": {
+        "name": "Simple Laundry System"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "3f096877-7f48-3d5f-b9dc-c9f64896499f",
+      "vendor": {
+        "name": "code-projects"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19229.json b/advisories/2026/04/EUVD-2026-19229.json
new file mode 100644
index 0000000000..4c8d6b8bdf
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19229.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19229",
+  "enisaUuid": "07b430c2-94c7-37a9-afb8-74da53aa659d",
+  "description": "A vulnerability has been found in code-projects Online Application System for Admission 1.0. This issue affects some unknown processing of the file /enrollment/admsnform.php of the component Endpoint. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.",
+  "datePublished": "Apr 6, 2026, 12:32:10 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:10 PM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355437\nhttps://vuldb.com/vuln/355437/cti\nhttps://vuldb.com/submit/786302\nhttps://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/SQL%20Injection%20in%20Online%20Application%20System%20for%20Admission%20PHP%20detid%20Parameter.md\nhttps://code-projects.org/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5649\n",
+  "aliases": "CVE-2026-5649\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "1dbd2818-3bff-3b74-83b7-16d82cab0f73",
+      "product": {
+        "name": "Online Application System for Admission"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "80b48ffa-da9e-393b-ab57-9bec17d13ce1",
+      "vendor": {
+        "name": "code-projects"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19231.json b/advisories/2026/04/EUVD-2026-19231.json
new file mode 100644
index 0000000000..74ba5373be
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19231.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-19231",
+  "enisaUuid": "a3852f17-477b-36e9-bcd6-8fb5c5685cbc",
+  "description": "Mattermost Plugin Legal Hold versions <=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, create, download, and delete legal hold data via crafted API requests to the plugin's endpoints. Mattermost Advisory ID: MMSA-2026-00621",
+  "datePublished": "Apr 6, 2026, 3:31:27 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:27 PM",
+  "baseScore": 8.3,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://mattermost.com/security-updates\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-3524\n",
+  "aliases": "CVE-2026-3524\nGHSA-h7g6-pq3g-f7cw\n",
+  "assigner": "Mattermost",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "611826d5-0de4-3d1d-8954-3b75a1a41e24",
+      "product": {
+        "name": "Mattermost"
+      },
+      "product_version": ""
+    },
+    {
+      "id": "c1ea7e57-c11b-388e-9102-f6c2b4ade5e3",
+      "product": {
+        "name": "Mattermost"
+      },
+      "product_version": "0 \u22641.1.4"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "611826d5-0de4-3d1d-8954-3b75a1a41e24",
+      "vendor": {
+        "name": "Mattermost"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19233.json b/advisories/2026/04/EUVD-2026-19233.json
new file mode 100644
index 0000000000..6319a36c14
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19233.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19233",
+  "enisaUuid": "786dfd6c-c5be-3065-9377-bcf3d2678bfa",
+  "description": "A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried out remotely. The exploit has been made public and could be used.",
+  "datePublished": "Apr 6, 2026, 12:32:10 PM",
+  "dateUpdated": "Apr 6, 2026, 12:32:10 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355438\nhttps://vuldb.com/vuln/355438/cti\nhttps://vuldb.com/submit/786307\nhttps://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20Application%20System%20for%20Admission%20PHP%20Exposed%20Database%20Backup.md\nhttps://code-projects.org/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5650\n",
+  "aliases": "GHSA-42cx-f4wf-mcfc\nCVE-2026-5650\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "8a5431fa-f6c9-3fe8-8958-c8b7cb3f7046",
+      "product": {
+        "name": "Online Application System for Admission"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "ee765f72-da59-3dc6-966b-17338fa4d988",
+      "vendor": {
+        "name": "code-projects"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19235.json b/advisories/2026/04/EUVD-2026-19235.json
new file mode 100644
index 0000000000..78ccfc547d
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19235.json
@@ -0,0 +1,52 @@
+{
+  "id": "EUVD-2026-19235",
+  "enisaUuid": "fd5d747c-4be0-36f2-9d89-b15131ad25f1",
+  "description": "A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.__setstate__ of the file src/datrie.pyx of the component trie File Handler. The manipulation results in deserialization. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 3:31:27 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:27 PM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355483\nhttps://vuldb.com/vuln/355483/cti\nhttps://vuldb.com/submit/785228\nhttps://github.com/pytries/datrie/issues/109\nhttps://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/dartie_code_exec.md\nhttps://github.com/pytries/datrie/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5659\n",
+  "aliases": "GHSA-wc65-8wqw-hgc9\nCVE-2026-5659\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "1bcc7fa2-a155-35b9-b091-a962c1cacc40",
+      "product": {
+        "name": "datrie"
+      },
+      "product_version": "0.8.2"
+    },
+    {
+      "id": "8165b026-46c8-32c5-bff5-9c4254602423",
+      "product": {
+        "name": "datrie"
+      },
+      "product_version": "0.8.3"
+    },
+    {
+      "id": "b49e0a99-ccb6-37b9-97a7-9159c9f8fc10",
+      "product": {
+        "name": "datrie"
+      },
+      "product_version": "0.8.0"
+    },
+    {
+      "id": "f91f3b7a-cba2-3461-b2cd-d90c6bcb6c37",
+      "product": {
+        "name": "datrie"
+      },
+      "product_version": "0.8.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "9c564edb-899d-3c1b-8cfb-585b462284dc",
+      "vendor": {
+        "name": "pytries"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19237.json b/advisories/2026/04/EUVD-2026-19237.json
new file mode 100644
index 0000000000..116eb40fef
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19237.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19237",
+  "enisaUuid": "ec3c765f-b194-31a8-b381-91af57c2485b",
+  "description": "OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message specification requires InitiatingMessage but sent with successfulOutcome.",
+  "datePublished": "Apr 6, 2026, 3:31:27 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:27 PM",
+  "baseScore": 7.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+  "references": "https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/74\nhttps://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/merge_requests/414\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-30078\n",
+  "aliases": "CVE-2026-30078\nGHSA-3cfx-9xg9-hh68\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "4dc60ea0-7e8a-35b2-b608-98e66f6bef04",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "26498b58-2214-3621-aba3-66ecb6455f11",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19239.json b/advisories/2026/04/EUVD-2026-19239.json
new file mode 100644
index 0000000000..10f5173408
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19239.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19239",
+  "enisaUuid": "4f62c91c-b302-309e-8e16-bced501f94d1",
+  "description": "A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /borrowed_equip.php of the component Parameter Handler. This manipulation of the argument emp causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.",
+  "datePublished": "Apr 6, 2026, 3:31:27 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:27 PM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355484\nhttps://vuldb.com/vuln/355484/cti\nhttps://vuldb.com/submit/786062\nhttps://github.com/Learner636/CVE-smbmit/issues/4\nhttps://itsourcecode.com/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5660\n",
+  "aliases": "CVE-2026-5660\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "8817e5ea-b429-3b91-8f41-09555fcdf49b",
+      "product": {
+        "name": "Construction Management System"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "fcfcea8d-5145-345d-abed-7408e26ca1ed",
+      "vendor": {
+        "name": "itsourcecode"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19241.json b/advisories/2026/04/EUVD-2026-19241.json
new file mode 100644
index 0000000000..b1783b7d5d
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19241.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19241",
+  "enisaUuid": "51b8b02a-e3fc-3ac6-baf4-ae872e06f09b",
+  "description": "A vulnerability was identified in Free5GC 4.2.0. This affects an unknown function of the component NGSetupRequest Handler. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit is publicly available and might be used.",
+  "datePublished": "Apr 6, 2026, 3:31:29 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:29 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355485\nhttps://vuldb.com/vuln/355485/cti\nhttps://vuldb.com/submit/785896\nhttps://github.com/free5gc/free5gc/issues/832\nhttps://github.com/free5gc/amf/pull/201\nhttps://github.com/user-attachments/files/25581199/amfcfg.yaml\nhttps://github.com/free5gc/free5gc/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5661\n",
+  "aliases": "CVE-2026-5661\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "8dff29c8-52c6-3114-b372-5debb72627ac",
+      "product": {
+        "name": "Free5GC"
+      },
+      "product_version": "4.2.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "cd58458a-84c4-3e8c-b2fd-0bb2d2aa1985",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19243.json b/advisories/2026/04/EUVD-2026-19243.json
new file mode 100644
index 0000000000..7188775558
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19243.json
@@ -0,0 +1,80 @@
+{
+  "id": "EUVD-2026-19243",
+  "enisaUuid": "4b5f58f8-8a35-39fe-b9c2-3e8e57a71a9b",
+  "description": "A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the file dcmnet/apps/storescp.cc of the component storescp. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The patch is named edbb085e45788dccaf0e64d71534cfca925784b8. Applying a patch is the recommended action to fix this issue.",
+  "datePublished": "Apr 6, 2026, 3:31:29 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:29 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
+  "references": "https://vuldb.com/vuln/355486\nhttps://vuldb.com/vuln/355486/cti\nhttps://vuldb.com/submit/786061\nhttps://machinespirits.com/advisory/2e1627/\nhttps://support.dcmtk.org/redmine/issues/1194\nhttps://github.com/DCMTK/dcmtk/commit/edbb085e45788dccaf0e64d71534cfca925784b8\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5663\n",
+  "aliases": "CVE-2026-5663\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "01a9add0-1db0-30d7-be32-ab69c819403f",
+      "product": {
+        "name": "DCMTK"
+      },
+      "product_version": "3.1"
+    },
+    {
+      "id": "0bc32e25-48c9-3fa3-b14b-8f1b4012a6a5",
+      "product": {
+        "name": "DCMTK"
+      },
+      "product_version": "3.0"
+    },
+    {
+      "id": "19202413-1840-3b5d-a356-1adca7ec6600",
+      "product": {
+        "name": "DCMTK"
+      },
+      "product_version": "3.6"
+    },
+    {
+      "id": "71bc0050-bdf1-3be1-8244-80b5fd60a46d",
+      "product": {
+        "name": "DCMTK"
+      },
+      "product_version": "3.7.0"
+    },
+    {
+      "id": "bdcd4af8-ac71-3ea4-bfa1-9074d5694017",
+      "product": {
+        "name": "DCMTK"
+      },
+      "product_version": "3.3"
+    },
+    {
+      "id": "d0867752-7ffa-3510-9e2a-045d984fa226",
+      "product": {
+        "name": "DCMTK"
+      },
+      "product_version": "3.5"
+    },
+    {
+      "id": "daa9e6a2-4b40-36ac-92ed-68e911b712da",
+      "product": {
+        "name": "DCMTK"
+      },
+      "product_version": "3.2"
+    },
+    {
+      "id": "ed3422c5-b442-3877-954d-29bdc3cc2707",
+      "product": {
+        "name": "DCMTK"
+      },
+      "product_version": "3.4"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "890bd7ed-62c6-30a9-8d09-e5a8323307c3",
+      "vendor": {
+        "name": "OFFIS"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19245.json b/advisories/2026/04/EUVD-2026-19245.json
new file mode 100644
index 0000000000..b2aad42d01
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19245.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19245",
+  "enisaUuid": "e4e35e6d-cd75-3f47-8a08-b73fe1d5526a",
+  "description": "GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a supplier fields. This vulnerability is fixed in 10.0.24.",
+  "datePublished": "Apr 6, 2026, 2:31:02 PM",
+  "dateUpdated": "Apr 6, 2026, 2:31:02 PM",
+  "baseScore": 7.2,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/glpi-project/glpi/security/advisories/GHSA-m627-945g-x7xh\n",
+  "aliases": "CVE-2026-25932\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "f20e727a-824f-36b4-a16a-141394a6a2de",
+      "product": {
+        "name": "glpi"
+      },
+      "product_version": "0.60, < 10.0.24"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2b032c2e-d9bf-3dd2-9965-b64e26df6262",
+      "vendor": {
+        "name": "glpi-project"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19246.json b/advisories/2026/04/EUVD-2026-19246.json
new file mode 100644
index 0000000000..9331b1f84a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19246.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19246",
+  "enisaUuid": "208bafff-471c-3c59-af3d-d9eb748574bb",
+  "description": "GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. This vulnerability is fixed in 11.0.6.",
+  "datePublished": "Apr 6, 2026, 2:33:05 PM",
+  "dateUpdated": "Apr 6, 2026, 2:33:05 PM",
+  "baseScore": 9.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
+  "references": "https://github.com/glpi-project/glpi/security/advisories/GHSA-2c98-648q-h27h\n",
+  "aliases": "CVE-2026-26026\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "e3d9616b-69c9-3a47-9bf7-7dc1bcdfe46d",
+      "product": {
+        "name": "glpi"
+      },
+      "product_version": "11.0.0, < 11.0.6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "ea55065d-01fd-3daf-910c-45d1deb52867",
+      "vendor": {
+        "name": "glpi-project"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19247.json b/advisories/2026/04/EUVD-2026-19247.json
new file mode 100644
index 0000000000..57bc9aacbe
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19247.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19247",
+  "enisaUuid": "4bf09f9c-6f70-33e3-ae8f-05d26b577d36",
+  "description": "GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated user can store an XSS payload through the inventory endpoint. This vulnerability is fixed in 11.0.6.",
+  "datePublished": "Apr 6, 2026, 2:35:53 PM",
+  "dateUpdated": "Apr 6, 2026, 2:51:39 PM",
+  "baseScore": 7.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/glpi-project/glpi/security/advisories/GHSA-chch-wcm9-f9cp\n",
+  "aliases": "CVE-2026-26027\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "2c44854b-df01-319d-a90d-e07676d6aff1",
+      "product": {
+        "name": "glpi"
+      },
+      "product_version": "11.0.0, < 11.0.6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "86b6466f-4fac-3934-b683-f3767d333414",
+      "vendor": {
+        "name": "glpi-project"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19248.json b/advisories/2026/04/EUVD-2026-19248.json
new file mode 100644
index 0000000000..b3be524b44
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19248.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19248",
+  "enisaUuid": "e14923be-e741-3069-8387-0ea298a94f9a",
+  "description": "GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated time-based blind SQL injection exists in GLPI's Search engine. This vulnerability is fixed in 11.0.6.",
+  "datePublished": "Apr 6, 2026, 2:36:57 PM",
+  "dateUpdated": "Apr 6, 2026, 2:36:57 PM",
+  "baseScore": 8.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/glpi-project/glpi/security/advisories/GHSA-346p-qj3v-9rxj\n",
+  "aliases": "CVE-2026-26263\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "6ded6c07-d140-3fd7-b8a2-d50f6194a4a1",
+      "product": {
+        "name": "glpi"
+      },
+      "product_version": "11.0.0, < 11.0.6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "dabf7bde-fad3-3284-bb16-2b6be4b948da",
+      "vendor": {
+        "name": "glpi-project"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19249.json b/advisories/2026/04/EUVD-2026-19249.json
new file mode 100644
index 0000000000..bb351f13c8
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19249.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-19249",
+  "enisaUuid": "3a297d41-ca77-32ed-a447-6b024e54cc00",
+  "description": "GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL injection via the logs export feature. This vulnerability is fixed in 10.0.24 and 11.0.6.",
+  "datePublished": "Apr 6, 2026, 2:39:15 PM",
+  "dateUpdated": "Apr 6, 2026, 2:39:15 PM",
+  "baseScore": 7.2,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/glpi-project/glpi/security/advisories/GHSA-3m49-qf92-vccr\n",
+  "aliases": "CVE-2026-29047\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ab88c79e-4e49-357e-ae18-f06bf1e5d8e0",
+      "product": {
+        "name": "glpi"
+      },
+      "product_version": "11.0.0-alpha, < 11.0.6"
+    },
+    {
+      "id": "b2a15194-7da6-3e69-82f9-e34ac2d7bb22",
+      "product": {
+        "name": "glpi"
+      },
+      "product_version": "10.0.0, 10.0.24"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "176ff735-fbfb-3d82-ab1e-15dec802bd8b",
+      "vendor": {
+        "name": "glpi-project"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19250.json b/advisories/2026/04/EUVD-2026-19250.json
new file mode 100644
index 0000000000..ec73435462
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19250.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19250",
+  "enisaUuid": "0d5802b9-f3f1-3c93-996c-26684e5eddd8",
+  "description": "A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the application to crash, resulting in a denial-of-service condition. An attacker with a crafted binary could cause a denial of service when the tool is integrated on a service pipeline.",
+  "datePublished": "Apr 6, 2026, 3:31:27 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:27 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/rizinorg/rizin/issues/5753\nhttps://github.com/rizinorg/rizin/pull/5795\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31053\n",
+  "aliases": "GHSA-h848-fw25-hp2w\nCVE-2026-31053\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c3e63b08-f19d-312c-ba35-9b768e10c92e",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d23a612e-0daa-3448-bbb4-24ca026a6bbe",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19251.json b/advisories/2026/04/EUVD-2026-19251.json
new file mode 100644
index 0000000000..eac85f97f3
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19251.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19251",
+  "enisaUuid": "31e65cec-641a-337c-9f27-d71769a2d86d",
+  "description": "UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/zxq0408/Vul202601/blob/main/2.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31058\n",
+  "aliases": "GHSA-w2w6-945r-j84p\nCVE-2026-31058\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "1dbb2acc-547b-3ca5-87ab-ad1c52e5454e",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "a04c6379-6e39-37f5-a3ea-e2725e08be43",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19253.json b/advisories/2026/04/EUVD-2026-19253.json
new file mode 100644
index 0000000000..d3f0033dbe
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19253.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19253",
+  "enisaUuid": "a3174534-800c-36d6-993f-c76b1a96b2a6",
+  "description": "A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/zxq0408/Vul202601/blob/main/9.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31059\n",
+  "aliases": "CVE-2026-31059\nGHSA-78px-96jw-rr5f\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "3f822807-4a67-327b-9dc7-385b857406cf",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2c9e7e21-6044-3586-8030-fa63b7912518",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19255.json b/advisories/2026/04/EUVD-2026-19255.json
new file mode 100644
index 0000000000..d36b983c30
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19255.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19255",
+  "enisaUuid": "e3181327-65cd-32d5-bb56-7c9b3f107b2c",
+  "description": "UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the formGroupConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/zxq0408/Vul202601/blob/main/5.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31060\n",
+  "aliases": "CVE-2026-31060\nGHSA-495h-3r6f-j5gc\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "f2605fc9-775c-3c5d-bc91-5a91a822b09c",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "765bb8f1-c524-3c6d-93a1-330c9682e290",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19257.json b/advisories/2026/04/EUVD-2026-19257.json
new file mode 100644
index 0000000000..f69db8a28f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19257.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19257",
+  "enisaUuid": "866c855b-08f0-3af9-b0f9-68e533525c91",
+  "description": "UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/zxq0408/Vul202601/blob/main/1.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31061\n",
+  "aliases": "GHSA-rx8h-94vm-wff9\nCVE-2026-31061\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "5f4f8ca6-5f28-37ea-87fe-261889a3b85d",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "423c02bb-9809-326a-a48e-cb47ce538f2b",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19259.json b/advisories/2026/04/EUVD-2026-19259.json
new file mode 100644
index 0000000000..430d3633da
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19259.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19259",
+  "enisaUuid": "fc5be403-e18b-37fa-8be6-612ef60871c8",
+  "description": "UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/zxq0408/Vul202601/blob/main/7.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31062\n",
+  "aliases": "CVE-2026-31062\nGHSA-mr7p-c5rw-q9vj\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "86d79f4a-a146-33a9-8d54-fa9153a31a8b",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "78ba86b3-118a-3800-b5d7-61b6a1d373f9",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19261.json b/advisories/2026/04/EUVD-2026-19261.json
new file mode 100644
index 0000000000..60a15aa847
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19261.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19261",
+  "enisaUuid": "cc706a6e-41ac-3aef-84c4-daba543f638f",
+  "description": "UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the formArpBindConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/zxq0408/Vul202601/blob/main/4.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31063\n",
+  "aliases": "CVE-2026-31063\nGHSA-xp9j-vx97-f678\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "b476332a-24e6-3a24-945b-6df861cfd194",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "11dfd466-fb21-30a6-b49a-f6f810fec60e",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19263.json b/advisories/2026/04/EUVD-2026-19263.json
new file mode 100644
index 0000000000..af2ff55fbe
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19263.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19263",
+  "enisaUuid": "a5e0876f-b724-3ddb-94a3-ede35888ece6",
+  "description": "UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/zxq0408/Vul202601/blob/main/8.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31065\n",
+  "aliases": "CVE-2026-31065\nGHSA-pq4m-hq9c-2vrf\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "10eee4d4-dbf8-3722-916d-553bc89ea7d2",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "25257dda-60b5-327e-8aa9-c42500882744",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19265.json b/advisories/2026/04/EUVD-2026-19265.json
new file mode 100644
index 0000000000..098d81af4f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19265.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19265",
+  "enisaUuid": "875a882a-ac7c-3fe0-81ea-1d0a086b2271",
+  "description": "UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/zxq0408/Vul202601/blob/main/6.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31066\n",
+  "aliases": "CVE-2026-31066\nGHSA-2pm6-rcw9-992f\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "65f286ba-881b-34e8-b494-97b2245c1b25",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "6a6b7fc9-9b8e-3bbf-bad4-690ae011376d",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19267.json b/advisories/2026/04/EUVD-2026-19267.json
new file mode 100644
index 0000000000..a2526651c8
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19267.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19267",
+  "enisaUuid": "d343a0d3-4e8a-3898-8811-11730cbcf4dc",
+  "description": "A remote command execution (RCE) vulnerability in the /goform/formReleaseConnect component of UTT Aggressive 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/zxq0408/Vul202601/blob/main/10.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31067\n",
+  "aliases": "GHSA-4c3f-9h8p-j5x9\nCVE-2026-31067\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "526766a8-85c2-31ac-8cf8-1cc51100b92c",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "eedaf551-93f0-3a84-b0b9-de03d5fd739f",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19269.json b/advisories/2026/04/EUVD-2026-19269.json
new file mode 100644
index 0000000000..ca44f2ef0b
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19269.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19269",
+  "enisaUuid": "083e7b50-98ea-3c64-b275-394f9c821a9a",
+  "description": "Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 4.3,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+  "references": "https://kaleris.com/solutions/yard-management/\nhttps://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-31150\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31150\n",
+  "aliases": "CVE-2026-31150\nGHSA-mpxj-x6rg-mghc\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "6961344c-0f54-302b-a1ff-603a7307b4a8",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d9d1ac64-94af-3195-a071-5740e92c06b9",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19271.json b/advisories/2026/04/EUVD-2026-19271.json
new file mode 100644
index 0000000000..1f0975da44
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19271.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19271",
+  "enisaUuid": "435e4fce-5950-3e59-a784-76855df09fbc",
+  "description": "An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 0.0,
+  "references": "https://kaleris.com/solutions/yard-management/\nhttps://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-31151\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31151\n",
+  "aliases": "CVE-2026-31151\nGHSA-4wx7-2hfw-hhff\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ad356dee-0afe-394b-bc76-ec816da2fea3",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "bc3ebf60-21a3-347e-b8be-9db11ca36254",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19273.json b/advisories/2026/04/EUVD-2026-19273.json
new file mode 100644
index 0000000000..2d12a105ab
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19273.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19273",
+  "enisaUuid": "3e7071dd-5da0-3b17-9bb6-1e66ca10b0d4",
+  "description": "A stored cross-site scripting (XSS) vulnerability in Bynder v0.1.394 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.",
+  "datePublished": "Apr 6, 2026, 3:31:28 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:28 PM",
+  "baseScore": 5.4,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+  "references": "https://www.bynder.com/en/\nhttps://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-31153\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31153\n",
+  "aliases": "GHSA-vwwm-jm2x-63pj\nCVE-2026-31153\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "80c0d99f-4d37-37a1-b41d-80b6d996a370",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "f34c5ede-85df-3f72-9b93-22042ae3bf96",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19275.json b/advisories/2026/04/EUVD-2026-19275.json
new file mode 100644
index 0000000000..9f6612d843
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19275.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19275",
+  "enisaUuid": "34b5c166-8064-3348-941e-073519bbb2d9",
+  "description": "An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter.",
+  "datePublished": "Apr 6, 2026, 6:33:07 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:07 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/liufee/cms\nhttps://github.com/liufee/cms/issues/81\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31351\n",
+  "aliases": "GHSA-cvjh-88c8-2jjx\nCVE-2026-31351\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "1af1a4d2-1920-36b8-9f05-552c189803af",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "b8d75f08-10d2-3fbd-8362-d53648693618",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19277.json b/advisories/2026/04/EUVD-2026-19277.json
new file mode 100644
index 0000000000..b51dac83ca
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19277.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19277",
+  "enisaUuid": "9bf28d69-c287-3960-b3a1-44e60328a7ca",
+  "description": "Homarr is an open-source dashboard. Prior to 1.57.0, the user registration endpoint (/api/trpc/user.register) is vulnerable to a race condition that allows an attacker to create multiple user accounts from a single-use invite token. The registration flow performs three sequential database operations without a transaction: CHECK, CREATE, and DELETE. Because these operations are not atomic, concurrent requests can all pass the validation step (1) before any of them reaches the deletion step (3). This allows multiple accounts to be registered using a single invite token that was intended to be single-use. This vulnerability is fixed in 1.57.0.",
+  "datePublished": "Apr 6, 2026, 2:42:37 PM",
+  "dateUpdated": "Apr 6, 2026, 2:42:37 PM",
+  "baseScore": 4.2,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
+  "references": "https://github.com/homarr-labs/homarr/security/advisories/GHSA-vfw3-53q9-2hp8\n",
+  "aliases": "CVE-2026-32602\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "f7098f63-9f95-368e-ac24-616952c2fc06",
+      "product": {
+        "name": "homarr"
+      },
+      "product_version": "< 1.57.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "74aeee76-8ed0-33d8-bb27-8c5f0bd771ce",
+      "vendor": {
+        "name": "homarr-labs"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19279.json b/advisories/2026/04/EUVD-2026-19279.json
new file mode 100644
index 0000000000..a3c041c71d
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19279.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19279",
+  "enisaUuid": "0db8cc67-d851-35d4-b958-63701adcfd80",
+  "description": "Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, a reflected DOM-based XSS vulnerability in taillog.js allows an unauthenticated attacker to inject arbitrary HTML into the Pi-hole admin interface by crafting a malicious URL. The file query parameter is interpolated into an innerHTML assignment without escaping. Because the Content-Security-Policy is missing the form-action directive, injected <form> elements can exfiltrate credentials to an external origin. This vulnerability is fixed in 6.5.",
+  "datePublished": "Apr 6, 2026, 2:48:05 PM",
+  "dateUpdated": "Apr 6, 2026, 3:05:23 PM",
+  "baseScore": 6.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+  "references": "https://github.com/pi-hole/web/security/advisories/GHSA-7xqw-r9pr-qv59\n",
+  "aliases": "CVE-2026-33403\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "34e57061-cc63-3cfe-9358-7cdbbfbc63d7",
+      "product": {
+        "name": "Web"
+      },
+      "product_version": "6.0, < 6.5"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "188154c3-01fb-3ead-8675-98ebfc07692e",
+      "vendor": {
+        "name": "pi-hole"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19281.json b/advisories/2026/04/EUVD-2026-19281.json
new file mode 100644
index 0000000000..fc35917d20
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19281.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19281",
+  "enisaUuid": "619f63c6-45c8-31a0-9b92-79cbb3cf8ac3",
+  "description": "Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, client hostnames and IP addresses from the FTL database are rendered into the DOM without escaping in network.js (Network page) and charts.js/index.js (Dashboard chart tooltips). While upstream validation in dnsmasq and FTL blocks HTML characters via normal DHCP/DNS paths, the web UI performs no output escaping \u2014 an inconsistency with other fields in the same file that are properly escaped. This vulnerability is fixed in 6.5.",
+  "datePublished": "Apr 6, 2026, 2:48:45 PM",
+  "dateUpdated": "Apr 6, 2026, 2:48:45 PM",
+  "baseScore": 3.4,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
+  "references": "https://github.com/pi-hole/web/security/advisories/GHSA-px6w-85wp-ww9v\n",
+  "aliases": "CVE-2026-33404\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "bda1aea2-2f7c-3511-acb2-b5f3d0885059",
+      "product": {
+        "name": "Web"
+      },
+      "product_version": "6.0, < 6.5"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "a2a6f70b-c01f-3eb5-a750-d88b9d5fa3f5",
+      "vendor": {
+        "name": "pi-hole"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19283.json b/advisories/2026/04/EUVD-2026-19283.json
new file mode 100644
index 0000000000..feaf8c69eb
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19283.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19283",
+  "enisaUuid": "ade81ecf-85cb-3a3e-ac5f-412cf81b151c",
+  "description": "Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, the formatInfo() function in queries.js renders data.upstream, data.client.ip, and data.ede.text into HTML without escaping when a user expands a query row in the Query Log, enabling stored HTML injection. JavaScript execution is blocked by the server's CSP (script-src 'self'). The same fields are properly escaped in the table view (rowCallback), confirming the omission was an oversight. This vulnerability is fixed in 6.5.",
+  "datePublished": "Apr 6, 2026, 3:23:32 PM",
+  "dateUpdated": "Apr 6, 2026, 3:23:32 PM",
+  "baseScore": 3.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
+  "references": "https://github.com/pi-hole/web/security/advisories/GHSA-jx8x-mj2r-62vq\n",
+  "aliases": "CVE-2026-33405\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "738289ed-4764-3398-8b88-5cece0c1139c",
+      "product": {
+        "name": "Web"
+      },
+      "product_version": "6.0, < 6.5"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "9fd65484-039a-3922-99d9-188b8055256b",
+      "vendor": {
+        "name": "pi-hole"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19285.json b/advisories/2026/04/EUVD-2026-19285.json
new file mode 100644
index 0000000000..8df5675722
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19285.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19285",
+  "enisaUuid": "4da92467-d1f5-32aa-8a73-b3deed81930d",
+  "description": "Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, configuration values from the /api/config endpoint are placed directly into HTML value=\"\" attributes without escaping in settings-advanced.js, enabling HTML attribute injection. A double quote in any config value breaks out of the attribute context. JavaScript execution is blocked by the server's CSP (script-src 'self'), but injected attributes can alter element styling for UI redressing. The primary attack vector is importing a malicious teleporter backup, which bypasses per-field server-side validation. This vulnerability is fixed in 6.5.",
+  "datePublished": "Apr 6, 2026, 2:50:35 PM",
+  "dateUpdated": "Apr 6, 2026, 2:50:35 PM",
+  "baseScore": 5.4,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+  "references": "https://github.com/pi-hole/web/security/advisories/GHSA-9rfm-c5g6-538p\n",
+  "aliases": "CVE-2026-33406\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "b246b608-7988-316f-8167-8e743b50b920",
+      "product": {
+        "name": "Web"
+      },
+      "product_version": "6.0, < 6.5"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2839d7f1-1e0d-3233-8fd3-6daf5fa29052",
+      "vendor": {
+        "name": "pi-hole"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19287.json b/advisories/2026/04/EUVD-2026-19287.json
new file mode 100644
index 0000000000..e82567c32e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19287.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19287",
+  "enisaUuid": "e07b3a94-f4ba-34e7-b952-cebfcba8306c",
+  "description": "Homarr is an open-source dashboard. Prior to 1.57.0, a DOM-based Cross-Site Scripting (XSS) vulnerability has been discovered in Homarr's /auth/login page. The application improperly trusts a URL parameter (callbackUrl), which is passed to redirect and router.push. An attacker can craft a malicious link that, when opened by an authenticated user, performs a client-side redirect and executes arbitrary JavaScript in the context of their browser. This could lead to credential theft, internal network pivoting, and unauthorized actions performed on behalf of the victim. This vulnerability is fixed in 1.57.0.",
+  "datePublished": "Apr 6, 2026, 2:51:38 PM",
+  "dateUpdated": "Apr 6, 2026, 2:51:38 PM",
+  "baseScore": 8.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
+  "references": "https://github.com/homarr-labs/homarr/security/advisories/GHSA-79pg-554g-rw82\n",
+  "aliases": "CVE-2026-33510\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ec17284f-dfa8-3893-b664-1965b75f2897",
+      "product": {
+        "name": "homarr"
+      },
+      "product_version": "< 1.57.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "65da4cc1-7500-36b8-b9fd-becc224abb18",
+      "vendor": {
+        "name": "homarr-labs"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19289.json b/advisories/2026/04/EUVD-2026-19289.json
new file mode 100644
index 0000000000..fe14049e95
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19289.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19289",
+  "enisaUuid": "599a28d0-8837-320d-b0a2-2648f672154f",
+  "description": "Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm",
+  "datePublished": "Apr 6, 2026, 5:52:52 PM",
+  "dateUpdated": "Apr 6, 2026, 5:52:52 PM",
+  "baseScore": 7.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+  "references": "https://github.com/distribution/distribution/security/advisories/GHSA-3p65-76g6-3w7r\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-33540\nhttps://github.com/distribution/distribution/commit/cc5d5fa4ba02157501e6afa2cc6a903ad0338e7b\n",
+  "aliases": "GHSA-3p65-76g6-3w7r\nCVE-2026-33540\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "99e39e36-e023-334b-80cd-a3a13685cf5f",
+      "product": {
+        "name": "distribution"
+      },
+      "product_version": "< 3.1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "449fe0f1-1c99-3b19-9d2e-8648d74918f1",
+      "vendor": {
+        "name": "distribution"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19291.json b/advisories/2026/04/EUVD-2026-19291.json
new file mode 100644
index 0000000000..4cedf62758
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19291.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19291",
+  "enisaUuid": "ae52a7e7-be85-36cd-b5d5-92d0ad2eec6c",
+  "description": "Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Version 6.4 has a local privilege-escalation vulnerability allows code execution as root from the low-privilege pihole account. Important context: the pihole account uses nologin, so this is not a direct interactive-login issue. However, nologin does not prevent code from running as UID pihole if a Pi-hole component is compromised. In that realistic post-compromise scenario, attacker-controlled content in /etc/pihole/versions is sourced by root-run Pi-hole scripts, leading to root code execution. This vulnerability is fixed in 6.4.1.",
+  "datePublished": "Apr 6, 2026, 3:02:19 PM",
+  "dateUpdated": "Apr 6, 2026, 3:02:19 PM",
+  "baseScore": 6.4,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/pi-hole/pi-hole/security/advisories/GHSA-c935-8g63-qp74\n",
+  "aliases": "CVE-2026-33727\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "4da718d4-d9eb-3f19-8f80-59508d0ecf0f",
+      "product": {
+        "name": "pi-hole"
+      },
+      "product_version": "6.4, < 6.4.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "401828cb-a7b5-3784-bf6d-2dadac9764ad",
+      "vendor": {
+        "name": "pi-hole"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19295.json b/advisories/2026/04/EUVD-2026-19295.json
new file mode 100644
index 0000000000..df84384123
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19295.json
@@ -0,0 +1,66 @@
+{
+  "id": "EUVD-2026-19295",
+  "enisaUuid": "3e7618d0-4e43-3cd3-a120-86831ff13f5e",
+  "description": "Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to 1.9.6, 1.10.5, 2.0.8, and 2.1.1, @fedify/fedify follows HTTP redirects recursively in its remote document loader and authenticated document loader without enforcing a maximum redirect count or visited-URL loop detection. An attacker who controls a remote ActivityPub key or actor URL can force a server using Fedify to make repeated outbound requests from a single inbound request, leading to resource consumption and denial of service. This vulnerability is fixed in 1.9.6, 1.10.5, 2.0.8, and 2.1.1.",
+  "datePublished": "Apr 6, 2026, 3:06:53 PM",
+  "dateUpdated": "Apr 6, 2026, 3:06:53 PM",
+  "baseScore": 7.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+  "references": "https://github.com/fedify-dev/fedify/security/advisories/GHSA-gm9m-gwc4-hwgp\n",
+  "aliases": "CVE-2026-34148\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "044d9f60-c772-3994-ad88-354bf73c237e",
+      "product": {
+        "name": "fedify"
+      },
+      "product_version": "1.10.0, < 1.10.5"
+    },
+    {
+      "id": "11c7ac9e-45f6-3d67-a782-309983667094",
+      "product": {
+        "name": "fedify"
+      },
+      "product_version": "< 1.9.6"
+    },
+    {
+      "id": "4794375c-57e8-3cef-bacc-b9e4b58b5c4b",
+      "product": {
+        "name": "fedify"
+      },
+      "product_version": "2.0.0, < 2.0.8"
+    },
+    {
+      "id": "7af1e9cc-7d4e-35cc-a4c3-c4e9cac8654e",
+      "product": {
+        "name": "fedify"
+      },
+      "product_version": "2.1.0, < 2.1.1"
+    },
+    {
+      "id": "7b994f3d-6a62-34b2-8a39-e4a533c9210a",
+      "product": {
+        "name": "vocab-runtime"
+      },
+      "product_version": "< 2.0.8"
+    },
+    {
+      "id": "f4dbfab5-866f-38e0-84cc-f3c40735bdfd",
+      "product": {
+        "name": "vocab-runtime"
+      },
+      "product_version": "2.1.0, < 2.1.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "7392df9c-e12d-3dbc-93f6-a5323ea5c42b",
+      "vendor": {
+        "name": "@fedify"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19303.json b/advisories/2026/04/EUVD-2026-19303.json
new file mode 100644
index 0000000000..b6add0fe0e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19303.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19303",
+  "enisaUuid": "7592b18d-a739-3c2a-9b77-645bd84d79fb",
+  "description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.4.0 to before 3.4.9, a missing bounds check on the dataWindow attribute in EXR file headers allows an attacker to trigger a signed integer overflow in generic_unpack(). By setting dataWindow.min.x to a large negative value, OpenEXRCore computes an enormous image width, which is later used in a signed integer multiplication that overflows, causing the process to terminate with SIGILL via UBSan. This vulnerability is fixed in 3.4.9.",
+  "datePublished": "Apr 6, 2026, 3:19:34 PM",
+  "dateUpdated": "Apr 6, 2026, 3:19:34 PM",
+  "baseScore": 6.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
+  "references": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-v76p-4qvv-vh4g\n",
+  "aliases": "CVE-2026-34378\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "d6b71ed5-55f1-3e34-abcb-3df9ad3221e1",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.4.0, < 3.4.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "547e6567-6637-341e-9c5d-82f3db2968c9",
+      "vendor": {
+        "name": "AcademySoftwareFoundation"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19305.json b/advisories/2026/04/EUVD-2026-19305.json
new file mode 100644
index 0000000000..e5a64f8ac1
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19305.json
@@ -0,0 +1,45 @@
+{
+  "id": "EUVD-2026-19305",
+  "enisaUuid": "6275036a-4e74-326c-902c-7267a8c49b96",
+  "description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, and 3.4.9, a misaligned memory write vulnerability exists in LossyDctDecoder_execute() in src/lib/OpenEXRCore/internal_dwa_decoder.h:749. When decoding a DWA or DWAB-compressed EXR file containing a FLOAT-type channel, the decoder performs an in-place HALF\u2192FLOAT conversion by casting an unaligned uint8_t * row pointer to float * and writing through it. Because the row buffer may not be 4-byte aligned, this constitutes undefined behavior under the C standard and crashes immediately on architectures that enforce alignment (ARM, RISC-V, etc.). On x86 it is silently tolerated at runtime but remains exploitable via compiler optimizations that assume aligned access. This vulnerability is fixed in 3.2.7, 3.3.9, and 3.4.9.",
+  "datePublished": "Apr 6, 2026, 3:21:06 PM",
+  "dateUpdated": "Apr 6, 2026, 3:21:06 PM",
+  "baseScore": 7.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
+  "references": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-w88v-vqhq-5p24\n",
+  "aliases": "CVE-2026-34379\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "382bd2eb-c086-3ee9-811c-6ff3d9c0285a",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.4.0, < 3.4.9"
+    },
+    {
+      "id": "516fd064-b33d-34e7-b567-f11ed242baa7",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.2.0, < 3.2.7"
+    },
+    {
+      "id": "5721c95d-e3c0-371f-b0b2-59b8f6a4f3a0",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.3.0, < 3.3.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "95325c50-3806-34c5-8510-e18ce9a5d683",
+      "vendor": {
+        "name": "AcademySoftwareFoundation"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19307.json b/advisories/2026/04/EUVD-2026-19307.json
new file mode 100644
index 0000000000..e58207b42b
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19307.json
@@ -0,0 +1,45 @@
+{
+  "id": "EUVD-2026-19307",
+  "enisaUuid": "14213805-4067-3ebe-8df0-0d0a0da522c5",
+  "description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, and 3.4.9, a signed integer overflow exists in undo_pxr24_impl() in src/lib/OpenEXRCore/internal_pxr24.c at line 377. The expression (uint64_t)(w * 3) computes w * 3 as a signed 32-bit integer before casting to uint64_t. When w is large, this multiplication constitutes undefined behavior under the C standard. On tested builds (clang/gcc without sanitizers), two's-complement wraparound commonly occurs, and for specific values of w the wrapped result is a small positive integer, which may allow the subsequent bounds check to pass incorrectly. If the check is bypassed, the decoding loop proceeds to write pixel data through dout, potentially extending far beyond the allocated output buffer. This vulnerability is fixed in 3.2.7, 3.3.9, and 3.4.9.",
+  "datePublished": "Apr 6, 2026, 3:22:40 PM",
+  "dateUpdated": "Apr 6, 2026, 3:22:40 PM",
+  "baseScore": 5.9,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H",
+  "references": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-q3v8-hw4m-59w5\n",
+  "aliases": "CVE-2026-34380\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "268f297b-2170-3fc9-a47b-20f041432f18",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.4.0, < 3.4.9"
+    },
+    {
+      "id": "3284c909-e5d5-3f37-b4dd-6dc720fefe01",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.2.0, < 3.2.7"
+    },
+    {
+      "id": "617609e3-e495-31b0-896c-7ca8965f6397",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.3.0, < 3.3.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2165a0c9-4ba1-3ce9-9822-898a5243a2db",
+      "vendor": {
+        "name": "AcademySoftwareFoundation"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19309.json b/advisories/2026/04/EUVD-2026-19309.json
new file mode 100644
index 0000000000..e743790186
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19309.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19309",
+  "enisaUuid": "012f100a-4c19-3fdb-b94b-7f3a0dcdaf8c",
+  "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.34.",
+  "datePublished": "Apr 6, 2026, 3:31:29 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:29 PM",
+  "baseScore": 8.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
+  "references": "https://patchstack.com/database/wordpress/plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-34-sql-injection-vulnerability?_s_id=cve\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34885\n",
+  "aliases": "GHSA-39w8-449c-wqw6\nCVE-2026-34885\n",
+  "assigner": "Patchstack",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "61f51691-5494-3cd8-b2c9-421e48a3f304",
+      "product": {
+        "name": "Media Library Assistant"
+      },
+      "product_version": "n/a \u22643.34"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "b7058fd7-adf8-3f0b-b790-776fa661c837",
+      "vendor": {
+        "name": "David Lingren"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19311.json b/advisories/2026/04/EUVD-2026-19311.json
new file mode 100644
index 0000000000..413b827fa1
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19311.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19311",
+  "enisaUuid": "7f0f60de-9d7d-352b-b529-f70c349718a1",
+  "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.34.",
+  "datePublished": "Apr 6, 2026, 3:31:29 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:29 PM",
+  "baseScore": 6.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
+  "references": "https://patchstack.com/database/wordpress/plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-34-cross-site-scripting-xss-vulnerability?_s_id=cve\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34897\n",
+  "aliases": "GHSA-w3vf-mmxj-jw7x\nCVE-2026-34897\n",
+  "assigner": "Patchstack",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "619f279e-e444-377d-8818-25094b717948",
+      "product": {
+        "name": "Media Library Assistant"
+      },
+      "product_version": "n/a \u22643.34"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "91551dcf-6f06-3aaf-844d-aeee3d9be82b",
+      "vendor": {
+        "name": "David Lingren"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19313.json b/advisories/2026/04/EUVD-2026-19313.json
new file mode 100644
index 0000000000..73f3c053ee
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19313.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19313",
+  "enisaUuid": "9d3078e0-fc25-36c1-adee-2b3fa5d7d427",
+  "description": "Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue.",
+  "datePublished": "Apr 6, 2026, 3:16:48 PM",
+  "dateUpdated": "Apr 6, 2026, 3:19:17 PM",
+  "baseScore": 8.2,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
+  "references": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9\nhttps://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615\nhttps://github.com/vim/vim/releases/tag/v9.2.0276\n",
+  "aliases": "CVE-2026-34982\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "a476add1-0629-3dc4-bc89-ebbef1a32275",
+      "product": {
+        "name": "vim"
+      },
+      "product_version": "< 9.2.0276"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "5461c3c4-9010-30e3-9865-293783d315e9",
+      "vendor": {
+        "name": "vim"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19315.json b/advisories/2026/04/EUVD-2026-19315.json
new file mode 100644
index 0000000000..41bfde49de
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19315.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19315",
+  "enisaUuid": "ce12f85f-ef05-36cb-838f-ed241034d928",
+  "description": "A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/checklogin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.",
+  "datePublished": "Apr 6, 2026, 6:33:08 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:08 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355488\nhttps://vuldb.com/vuln/355488/cti\nhttps://vuldb.com/submit/786310\nhttps://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/SQL%20Injection%20in%20Online%20FIR%20System%20PHP%20email%20Parameter.md\nhttps://code-projects.org/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5665\n",
+  "aliases": "CVE-2026-5665\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "1ff048ff-2876-33ef-908c-a1e7f0455ea4",
+      "product": {
+        "name": "Online FIR System"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "60756002-7e9a-3d84-9e99-08fd6e955480",
+      "vendor": {
+        "name": "code-projects"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19317.json b/advisories/2026/04/EUVD-2026-19317.json
new file mode 100644
index 0000000000..89b3bffece
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19317.json
@@ -0,0 +1,23 @@
+{
+  "id": "EUVD-2026-19317",
+  "enisaUuid": "ed0a894d-91bd-3613-9cfe-29b7847b8039",
+  "description": "A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.",
+  "datePublished": "Apr 6, 2026, 6:33:08 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:08 PM",
+  "baseScore": 5.0,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
+  "references": "https://access.redhat.com/security/cve/CVE-2026-5704\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2455360\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5704\n",
+  "aliases": "CVE-2026-5704\n",
+  "assigner": "redhat",
+  "epss": 0.0,
+  "enisaIdProduct": [],
+  "enisaIdVendor": [
+    {
+      "id": "8176b85c-ef6a-3c72-8909-fb47e38fa3ec",
+      "vendor": {
+        "name": "Red Hat"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19320.json b/advisories/2026/04/EUVD-2026-19320.json
new file mode 100644
index 0000000000..cd84aa80b2
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19320.json
@@ -0,0 +1,1074 @@
+{
+  "id": "EUVD-2026-19320",
+  "enisaUuid": "aa5e1498-7fc3-3335-8b99-bface2ca4b3f",
+  "description": "Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.",
+  "datePublished": "Apr 6, 2026, 6:33:05 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:05 PM",
+  "baseScore": 7.6,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21367\n",
+  "aliases": "GHSA-78j8-w6rh-444w\nCVE-2026-21367\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "001dfd1c-a939-33da-b4bd-4fe7b5d28a0c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8750P"
+    },
+    {
+      "id": "001ed32a-fc1f-3039-99e3-e6b248151790",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN5022"
+    },
+    {
+      "id": "01005e38-18dc-3d5e-bf3b-d42b3437773e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "020198ae-1916-325b-a9e3-99996812c360",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "02cb598d-0805-3657-b28b-db629035fdee",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6797AQ"
+    },
+    {
+      "id": "02cf9d17-8919-3ae9-a116-4dfa5d5be8ef",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "03281120-a098-3915-aba9-bd0297d468cb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7861"
+    },
+    {
+      "id": "03320d29-e985-3599-aa2b-353213991fbf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "04859cb5-dda9-3378-908d-bdcc5e9b02aa",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Networking Pro 1210 Platform"
+    },
+    {
+      "id": "04e51bab-410f-334d-a39c-00d4afb6a8f3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Networking Pro 1610 Platform"
+    },
+    {
+      "id": "09282c5d-dfe9-348b-b691-b5415d994924",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN5122"
+    },
+    {
+      "id": "09410aa4-7db1-3f3f-b200-35aa34838f3a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6023"
+    },
+    {
+      "id": "0d0164e6-926a-319c-a244-66e7844e1300",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1093"
+    },
+    {
+      "id": "0d3b7e03-a4f4-3b1a-af64-9443f6f342cc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Orne"
+    },
+    {
+      "id": "0fa9ccfb-10f3-370c-b932-dd7b4a61a5a7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QFW7114"
+    },
+    {
+      "id": "12a86061-87b2-3cf3-bcca-2e46ffeb12c0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 4 Mobile Platform"
+    },
+    {
+      "id": "1362fe5d-785e-3cce-9a6e-b14da50ca7f4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCC2073"
+    },
+    {
+      "id": "168d10bc-9be3-3605-ad3d-60a0b561e97e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6200"
+    },
+    {
+      "id": "1850daee-ce66-3618-b083-405861338aa8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8082"
+    },
+    {
+      "id": "191f9205-af91-33c2-b32e-d764890296c7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XRV9209"
+    },
+    {
+      "id": "19b0bffb-f1f8-31e1-8e2b-74937e01fc98",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6122"
+    },
+    {
+      "id": "1ab45123-4117-397a-ac76-b84a60067e8f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SAR2130P"
+    },
+    {
+      "id": "1c3570db-a478-329f-bbdc-4a3588f1d565",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCS8550"
+    },
+    {
+      "id": "1ea39977-e19a-3fd2-86d1-14bfd24d1261",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IPQ5028"
+    },
+    {
+      "id": "22d8b8bc-fcfa-308d-a8aa-906f0e34503e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QPA1086BD"
+    },
+    {
+      "id": "236348f8-227e-39d4-b9dd-e12c10809453",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8635P"
+    },
+    {
+      "id": "24f80241-d299-31ed-ad5a-9ae592a965a2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN5052"
+    },
+    {
+      "id": "2504c54b-2ba6-3689-9b9a-d51b966c5450",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1095"
+    },
+    {
+      "id": "25258972-ced3-330e-a390-2880d780708d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QFW7124"
+    },
+    {
+      "id": "295a18a3-47ab-3bb1-ad32-5b4c35b2645e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X72 5G Modem-RF System"
+    },
+    {
+      "id": "2daab637-1fda-31e3-b3cf-804b2948be44",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XRV7209"
+    },
+    {
+      "id": "2f06501d-e0eb-3cd2-9828-b3ac69f75cab",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X75 5G Modem-RF System"
+    },
+    {
+      "id": "36a6a967-4ffa-34a5-bcf6-156e92ce0842",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Immersive Home 214 Platform"
+    },
+    {
+      "id": "3993df9b-47df-3e21-8306-1662b5a31b0c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6698AU"
+    },
+    {
+      "id": "3da14be0-87dd-3d9d-8266-b9a57a8830f6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "4018efaf-75ad-3b78-a356-b126a0320195",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QMP1000"
+    },
+    {
+      "id": "4032a728-ebdf-340e-94d5-5a6c5c650f7c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7435"
+    },
+    {
+      "id": "42972cf9-330e-3d7f-af55-05a32a6bc4e2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Networking Pro 800 Platform"
+    },
+    {
+      "id": "42f38e46-2e31-37a5-b9c2-9182f2c42ed9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Networking Pro 600 Platform"
+    },
+    {
+      "id": "431c6e68-45db-3d68-976b-4301529b4f97",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QLN1086BD"
+    },
+    {
+      "id": "44171bcf-0d80-3c30-860a-a182f0ff37ef",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8635"
+    },
+    {
+      "id": "47711a84-5438-39e0-9b07-03d96cb12de6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCC710"
+    },
+    {
+      "id": "482de296-0d06-3b18-9c0a-96d4782fa843",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7+ Gen 2 Mobile Platform"
+    },
+    {
+      "id": "4b37e522-79a3-387a-be0f-ec5cc3197b23",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Pandeiro"
+    },
+    {
+      "id": "4cbf78f3-137e-3999-947e-62450cf54ec8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8386"
+    },
+    {
+      "id": "4e2a98b1-8b77-3098-9a28-790559005e96",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "4fc44331-161f-3fb0-a6d0-146d5869af3d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "52c3ce0d-e9c7-33a3-8d92-9eaeee478493",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "531e41cc-6abd-3f1a-8d45-b84c3c4617d6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378"
+    },
+    {
+      "id": "56572686-aee0-302a-9b85-5b255a151314",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8650Q"
+    },
+    {
+      "id": "5a1b54b3-f3c8-32c8-96b4-f439b2ae2230",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Palawan25"
+    },
+    {
+      "id": "5acd9be0-8b01-3d33-898f-e0d3b8764a63",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "5c0fd70b-adb4-3a07-9788-91c6a24224a5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6777AQ"
+    },
+    {
+      "id": "5c9cf450-7508-3639-89ba-6e9584556e76",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8085"
+    },
+    {
+      "id": "5cb5d3bd-366d-35ab-b3c8-11abc9b743db",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IPQ8076"
+    },
+    {
+      "id": "5de61b4b-dfb2-300b-b581-4589752350ca",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8081"
+    },
+    {
+      "id": "5e3aa75a-570c-343f-b3fe-ae2ba464540e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IPQ9574"
+    },
+    {
+      "id": "6283791b-a23f-3711-a59a-2d07ef40ddc9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Elite Gen 5"
+    },
+    {
+      "id": "6662950d-78bd-3b95-b353-25b2333dc277",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "670cb5b1-a1d4-3846-93d7-c60e2240c7b5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "67e25354-45d9-385e-be9c-5deb6380c104",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6650P"
+    },
+    {
+      "id": "69848635-644d-3f06-9944-203356172118",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Immersive Home 216 Platform"
+    },
+    {
+      "id": "6c1ec6f7-c296-3b30-95d1-e61f26fb5c49",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCC2076"
+    },
+    {
+      "id": "6fc36290-5bcb-3cf0-83b9-0e39fdc32eed",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "7085f3d8-8eb7-37fc-b30e-536a7ad7306b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "CSR8811"
+    },
+    {
+      "id": "7689cea0-de55-373b-a270-dc39d17c634f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "76ac571e-2d42-3800-8d69-81a8f8399820",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QLN1083BD"
+    },
+    {
+      "id": "77174a06-7459-355d-93a2-228d4c0ebaaf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IPQ6010"
+    },
+    {
+      "id": "783cb6fa-4435-394b-8fc5-06feb294d03a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "788bb841-599e-3366-a6b6-9118ab46e19b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "7bfe7309-c976-3a0c-b346-8ecc802e8a3a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7881"
+    },
+    {
+      "id": "7d247920-2b82-36bb-b156-794f0313278c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8337"
+    },
+    {
+      "id": "7f404d71-b9c0-3009-9557-191f1dc08051",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IPQ6000"
+    },
+    {
+      "id": "827c4cb1-1d09-31b4-aae4-40df16d1314a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9100"
+    },
+    {
+      "id": "85d2c4fd-ca9e-3479-a624-1cb8bc5336f7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "8897f03a-91db-3bdb-b519-66af9a6136db",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7s Gen 3 Mobile Platform"
+    },
+    {
+      "id": "8b2653d8-4b85-338b-8b93-0351af4b28c8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9012"
+    },
+    {
+      "id": "9017605d-4535-3271-8775-15e9a1557181",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN5154"
+    },
+    {
+      "id": "90d40860-a598-3957-9c1e-870ea669fb0c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9395"
+    },
+    {
+      "id": "94983715-f38a-33b7-93ea-6e5986fdbca4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "95323c4e-a2f6-3f07-a018-d96532058910",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Elite"
+    },
+    {
+      "id": "95ff3e50-9424-3fc9-a940-eb975dab165d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IPQ5010"
+    },
+    {
+      "id": "9730f0aa-8446-30e6-a1ac-a9fa7df8e988",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCS4490"
+    },
+    {
+      "id": "9a3ecd9d-dc22-3c4a-a336-3033b6d17e27",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN5024"
+    },
+    {
+      "id": "9af8926d-3797-3fd7-ae0b-33ac2cc300a7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "9d9cb549-1a93-3790-8e45-b1efad2a02e9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9340"
+    },
+    {
+      "id": "9fd17e94-7e52-3870-9d7e-5442a07ef7d2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7675P"
+    },
+    {
+      "id": "a2d03c89-0c69-3f36-b80f-039f3a4b1240",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9274"
+    },
+    {
+      "id": "a4057b66-c809-3114-a193-4d19734c8051",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8075"
+    },
+    {
+      "id": "a5c229ac-adc5-3227-8d2b-74263bdb85df",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "a5effc2c-195d-3a50-bfec-61a460b41f64",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "a6272cbd-8d28-3886-8bf7-d9289f108907",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Networking Pro 610 Platform"
+    },
+    {
+      "id": "a81e93cb-dd23-3681-8080-ac78b06818e2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "a8a89f62-c6e6-3282-99d3-ca684743ce14",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6755"
+    },
+    {
+      "id": "aa856316-cc69-38d0-bd25-6d8accb0c6e6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "AR8035"
+    },
+    {
+      "id": "ac34cf84-9720-3314-bcc2-d17e6c88cade",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8084"
+    },
+    {
+      "id": "ad824956-aafd-324b-ae1a-df9000b6a510",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "aef9a4d8-1c3f-382c-93d4-e1d6c35af2b9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Immersive Home 318 Platform"
+    },
+    {
+      "id": "af204a1e-0683-3aac-a299-e60012f7c309",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IPQ8078"
+    },
+    {
+      "id": "afbe517a-1c3e-363b-8942-bcbe03a2b8e9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Gen 3 Mobile Platform"
+    },
+    {
+      "id": "b4a9f363-10ac-39c2-82b8-0741993613cc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8810"
+    },
+    {
+      "id": "b935aba0-816f-36ce-bdb2-4df93822359f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7880"
+    },
+    {
+      "id": "ba4d23e4-f1a9-3bf1-bf40-b9d7945167a0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA9889"
+    },
+    {
+      "id": "baf401ff-882f-372d-b656-93fa10e12f5d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6450"
+    },
+    {
+      "id": "bb840f2f-0ba3-327e-bbe0-e1c45334c098",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6650"
+    },
+    {
+      "id": "bc161d91-e174-3ba1-9aa3-759232fef243",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6224"
+    },
+    {
+      "id": "bd359ab8-b70a-3176-ba9d-a20e4a99ee8a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN5164"
+    },
+    {
+      "id": "be8e8ec9-bcd5-3576-b79b-5a0485f0588c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "c0ff88ee-1a53-3eb2-8908-b648f148bce7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "c1a46987-cc44-3765-b0a5-c81b119aea65",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Netrani"
+    },
+    {
+      "id": "c1cb7356-dae2-3218-a7c9-ae0822cd9f15",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "c21a10dc-477e-3566-a949-3b797b2b3bfe",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SD 8 Gen1 5G"
+    },
+    {
+      "id": "c24ae1ae-e131-3f01-8fc7-23d4829b635b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "G2 Gen 1"
+    },
+    {
+      "id": "c26d0aae-b4ff-39ff-8951-e166fe23c860",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Networking Pro 400 Platform"
+    },
+    {
+      "id": "c345ccd4-4ca2-37d2-8f85-b67d9f7cb200",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9390"
+    },
+    {
+      "id": "c54f8c5b-87a2-3426-b872-3e4ae5480043",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Networking Pro 810 Platform"
+    },
+    {
+      "id": "c61165a4-76a4-3f16-92ee-93d9f13c0563",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7675"
+    },
+    {
+      "id": "c66b05c6-870a-3381-92fc-41f24389f786",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM4490"
+    },
+    {
+      "id": "cad9924e-a5ae-36f9-9d90-7e3598e0e30e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6787AQ"
+    },
+    {
+      "id": "cdb7ba48-d469-3890-9ca3-893ed2bfc2c1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FWA Gen 3 Ultra Platform"
+    },
+    {
+      "id": "cecd786e-fc78-36bd-bbdf-15ce7055fa17",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9022"
+    },
+    {
+      "id": "cfc3ca74-1f79-379b-b83b-e2eb0481ca74",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "d1ed4d32-1c1c-3316-bce1-e68a607bfc19",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1094"
+    },
+    {
+      "id": "d6d42cfd-d0c8-3ece-909b-3c88b66547e6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "d734599b-ceb6-36e2-b00c-a4e6064fcdbb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "IPQ6018"
+    },
+    {
+      "id": "da83910e-c514-3590-bb25-e6135f12c9dd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Milos"
+    },
+    {
+      "id": "dabec7d5-651e-39b8-90bc-01b8071c20f6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6024"
+    },
+    {
+      "id": "dc4be5cb-c919-3b6b-bfbc-49915a242b8b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8475P"
+    },
+    {
+      "id": "ddb5b6d0-4dc7-3fb8-92a0-0506fcb67d5d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7635P"
+    },
+    {
+      "id": "ddbac400-84cc-3816-bd78-b1a280c8e146",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QPA1083BD"
+    },
+    {
+      "id": "dfe30ae3-17df-3375-a8cf-30df0c4e1328",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Immersive Home 316 Platform"
+    },
+    {
+      "id": "e00e3c2a-0e47-3142-92cd-7900d036f738",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6132"
+    },
+    {
+      "id": "e09b3eea-8e7a-332c-9429-f2baa9e90b0d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN5124"
+    },
+    {
+      "id": "e20672ec-e879-3302-87bc-5290911ae124",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6391"
+    },
+    {
+      "id": "e4319564-8d62-3c70-a60c-aacc23ceeea7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9011"
+    },
+    {
+      "id": "e46433c2-08d3-3fd8-b8bb-ae3ae280243c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9070"
+    },
+    {
+      "id": "e797e2e8-1bea-38c5-ab82-ade3614b19ac",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA9888"
+    },
+    {
+      "id": "e7b69602-f3de-37b8-bbe4-6ff109b9e038",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8815"
+    },
+    {
+      "id": "ea0bf315-96c2-3c91-85be-4a47c90fe6e3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "ed244341-5b96-398e-9db7-2070e2962d34",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1096"
+    },
+    {
+      "id": "ed6d1606-5e66-3a9f-900f-e64e5b1e9c28",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "edd7e5ee-47a4-326b-b170-28e839270292",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Networking Pro 1200 Platform"
+    },
+    {
+      "id": "edd91c7e-6990-3700-aee8-937f11a8141c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7860"
+    },
+    {
+      "id": "f10f06cf-fbc4-3568-9533-95087a761b68",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9024"
+    },
+    {
+      "id": "f159de2f-17df-32c8-8e2b-40dce7eaa1ab",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6274"
+    },
+    {
+      "id": "f5441743-d8e7-3af2-bf60-c7ff81d6e2e7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN5152"
+    },
+    {
+      "id": "f9001698-080a-32ba-ba26-1a5a47019736",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA4024"
+    },
+    {
+      "id": "fbbc914c-a7ec-3230-8380-7656c0e793c1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8+ Gen 1 Mobile Platform"
+    },
+    {
+      "id": "fe37e523-e9ab-344e-a3b2-200c1b301e09",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 3 Mobile Platform"
+    },
+    {
+      "id": "fedc428b-57e7-32e5-991a-2da73be28122",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9000"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2ea03aeb-6126-3b9e-9942-2d7abee066a4",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19321.json b/advisories/2026/04/EUVD-2026-19321.json
new file mode 100644
index 0000000000..95688461ff
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19321.json
@@ -0,0 +1,388 @@
+{
+  "id": "EUVD-2026-19321",
+  "enisaUuid": "bf62e887-8468-3597-be3e-cf46e1637338",
+  "description": "Memory Corruption when retrieving output buffer with insufficient size validation.",
+  "datePublished": "Apr 6, 2026, 6:33:06 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:06 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21371\n",
+  "aliases": "GHSA-hfh3-pr7q-frpw\nCVE-2026-21371\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "031a3e97-4277-3514-ab54-14839a47de2b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "09fc897a-a578-3c25-9b0d-8b7333e8b17b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "0f571c09-ac33-3042-9f6a-0e88851fa90c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Compute Platform"
+    },
+    {
+      "id": "14e04100-4d86-3fdd-8aab-ad364294c8a5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 3 Compute Platform"
+    },
+    {
+      "id": "1924a18d-0d4c-3643-910b-a6b33345b8c7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA0000"
+    },
+    {
+      "id": "1fea6ef1-4b96-3495-ba9b-04f3ab103f06",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8810"
+    },
+    {
+      "id": "2cfd17f1-df96-3872-b2d2-8fb6c3221b8f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9341"
+    },
+    {
+      "id": "2da25be2-adc1-3170-a378-f143072f63e5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8c Compute Platform \"Poipu Lite\""
+    },
+    {
+      "id": "348a2f55-ecf6-3f8c-bd8d-967e017ff28e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "48b395ad-44bf-3859-bd83-468185c565ac",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Compute Platform \"Poipu Pro\""
+    },
+    {
+      "id": "4c4ae40a-2599-3576-8185-4004401df94c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9340"
+    },
+    {
+      "id": "50eb2c80-bee4-3bac-94e1-ddd5e70f6aa4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "5976a671-017f-30bb-867f-c1b7ebb09707",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "5a5a9650-f4eb-3576-aa5e-8edc013c9092",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "66b281f9-81de-3eb5-a473-7a79948e698d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "673d12ed-4c2b-3772-9b67-d7de2c6271b7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "6768ca02-50b0-3433-8583-985903109fb6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "689cfc11-083b-32dd-bbe5-1d3b29a77598",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 2 5G Compute Platform"
+    },
+    {
+      "id": "6d20b7cd-9e13-39ee-9d4c-da28b53613d6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "6e48b90f-b582-3b0e-acd9-caf51e22ba02",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "6f39c5fa-36d0-370a-88b1-71d465730576",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "71d21660-42eb-3890-bd19-19f9cb311289",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8c Compute Platform (SC8180XP-AD) \"Poipu Lite\""
+    },
+    {
+      "id": "7c63f0ce-d0eb-39ee-a846-c8ee4da985c9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "824d66b5-8b04-3330-84d5-8511d7eb2b1e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "86b56552-130a-3644-83da-a2ccd9f111f7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "88cc6739-2682-3b7a-a52d-14bfba143f9d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "8f3075df-ea59-37af-b26b-d1afd1bd1b4f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "AQT1000"
+    },
+    {
+      "id": "9099db6a-3f22-3064-bbfd-28f9f3933c57",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6391"
+    },
+    {
+      "id": "9116ff51-1e4e-35d1-aa74-b276b838fb08",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 2 5G Compute Platform \"Poipu Pro\""
+    },
+    {
+      "id": "932d5607-591c-3f33-9988-b2f9b69854c5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Gen 2 Compute Platform \"Rennell Pro\""
+    },
+    {
+      "id": "9cc89f15-2b9e-3dd8-9b20-530d4afbb80a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6200"
+    },
+    {
+      "id": "9ea90a69-c2dd-336f-9e9f-4d29ec9cbc0a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6420"
+    },
+    {
+      "id": "a18114ab-24c9-3b7b-87b7-961477f48733",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 662 Mobile Platform"
+    },
+    {
+      "id": "ac4c40a3-9944-3c77-b579-3cb5fa0d87d6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "b18fe94e-f475-3212-80cb-787fa663f73c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "b7793598-9efc-3c90-92bf-5aca25f470c6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6430"
+    },
+    {
+      "id": "b8ba073d-6c13-3dd4-b9d5-c7990c14687a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "babecae3-22f1-38e9-9a92-1cccb8511de9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "be034e50-0c6d-3b55-85b8-0ec7fcdb6cdc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "bff42d5b-e863-3ba0-b689-68fc63954ed4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "c6f93db1-3d4c-343a-be1b-45e84fe2290a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6250"
+    },
+    {
+      "id": "c9f5847a-530c-356f-a3e7-5ddef37e577d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 460 Mobile Platform"
+    },
+    {
+      "id": "cb231786-80e4-3067-a1b4-4b837411b014",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c+ Gen 3 Compute"
+    },
+    {
+      "id": "cd92b9ff-18a8-31d5-8c40-be08c5451e37",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "d63236b9-45e6-3d28-9773-945224ef2bbc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "e58a7751-ebe3-3caa-9e5d-bd488e705849",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "e58d35c3-a076-3257-9f90-764fa779d64d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "ebe8e816-0d67-3d70-a904-99f2e867e38e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "f10bf7fa-76c3-32c3-8912-ce7589f71982",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Compute Platform"
+    },
+    {
+      "id": "f633b4dd-902d-30b9-9113-8059dd89c479",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6800"
+    },
+    {
+      "id": "f947ada5-4b2e-3c65-8f0e-842e5923723a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "fe67a0b1-4a07-3006-8ad9-a6d05f366a4a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8815"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "1dd7b218-2409-35e7-b4b5-afdcaeb88365",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19323.json b/advisories/2026/04/EUVD-2026-19323.json
new file mode 100644
index 0000000000..150d868ec8
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19323.json
@@ -0,0 +1,220 @@
+{
+  "id": "EUVD-2026-19323",
+  "enisaUuid": "afed7891-18e8-3375-bcb9-22f7bde1890b",
+  "description": "Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.",
+  "datePublished": "Apr 6, 2026, 6:33:06 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:06 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21372\n",
+  "aliases": "CVE-2026-21372\nGHSA-73jc-v74h-5w6r\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "07a57b58-abee-34ff-bc7b-e882f92a6a47",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "36235f52-05ae-367c-b20c-8ca492ed50dc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "3c8bb842-8ee8-3e0b-b144-312d02124ad4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "3f75fc58-c90d-32fb-92c6-ed1c226f81a4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 460 Mobile Platform"
+    },
+    {
+      "id": "412e00f5-6ec2-3ab5-a79d-535d46ddc4e5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "49de36a7-46a3-3473-9d9c-16b3d54268d1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "597ec280-6ae9-3aee-90c9-69b26c4b9ea0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "5a829754-f72f-3724-add8-94beb83615ab",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "5b15e87c-108c-3a45-bd41-1e408d2d517e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c+ Gen 3 Compute"
+    },
+    {
+      "id": "65b97d43-f5c8-3526-a328-fdde625cee31",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "80150077-141c-33d5-aacc-34ae985fd903",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "834ebdcc-629e-3f11-93a9-40d45057d317",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "8ba1d813-846b-3e15-abcf-a0f7ced79ae1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "957167ef-158d-334b-9e5b-ea56e29bc33c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "9e29d983-86a1-38b7-ad32-274fde34c789",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "9e686162-7e0c-3def-a583-f52c9e373bb7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "a2c2d6cf-7745-3584-9419-45785f1796e6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 662 Mobile Platform"
+    },
+    {
+      "id": "aec5ed63-1c35-3978-8690-72116edb2d50",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "affff511-a537-396c-b352-3b66134a72ed",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "c0ccec77-80a4-36e1-b86d-154c9435a8d1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "c274abd6-3e3f-3697-b7dd-a6eb7c972f53",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "cc5a7b34-ae0f-3964-aade-82ce9afc7a19",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "d0727eab-0ba1-3f02-943c-1bc2b2e23062",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "d6462969-e1fe-314f-bb00-f9453645a0a7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "e8dff99d-072a-3b92-8da9-7f927a3a3ccc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "eed7bf90-5043-3026-88bf-321edef79a6b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "f351516d-7eae-3687-b7f1-d0deb5590f6c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "f84755e7-3466-3163-ba51-eac0eb7b99f3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "47d74a3f-3910-3e0d-986d-6a64f4c3de94",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19325.json b/advisories/2026/04/EUVD-2026-19325.json
new file mode 100644
index 0000000000..adb165161c
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19325.json
@@ -0,0 +1,402 @@
+{
+  "id": "EUVD-2026-19325",
+  "enisaUuid": "5b6da9a3-e267-32d5-b667-9f3619bf0456",
+  "description": "Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.",
+  "datePublished": "Apr 6, 2026, 6:33:06 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:06 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21373\n",
+  "aliases": "GHSA-p7h3-2rm6-r8vf\nCVE-2026-21373\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "01a4c977-35ee-3872-9c74-08b8942333ee",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c+ Gen 3 Compute"
+    },
+    {
+      "id": "06092c99-0b11-39cb-9e92-4cff4bd997b3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "070b4472-a6f1-3824-b982-45c1ffcf867b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8c Compute Platform (SC8180XP-AD) \"Poipu Lite\""
+    },
+    {
+      "id": "09b46a19-9724-3465-86fe-e62fa727200f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "0e290188-eb86-39e5-ac49-15f63559bf45",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1 Gen 1 Platform"
+    },
+    {
+      "id": "105a5d34-ac7b-3e9b-b970-5bad2988d4fe",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "11a15ac0-89fa-3b02-b798-e042755b0664",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6200"
+    },
+    {
+      "id": "12ed7553-6524-3c5a-bef9-c80c15f964b1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "1e86a3fa-9241-3e8c-8d80-c6639aa62452",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "2e628b9c-38d5-3a87-a240-242083ec5001",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "2fbd8008-e5bd-32cb-a29c-615209486adf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "30db3394-1d7a-369e-9e95-2663996f310e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "4031211d-96b7-3a4a-af4e-2bfa66532563",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "5521bd75-18d7-35c7-aaf4-d43a146cb391",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "5ced2573-81a6-3630-b701-497bc149be14",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8c Compute Platform \"Poipu Lite\""
+    },
+    {
+      "id": "5fef2a73-cda4-3c14-81ea-90d6b737708b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "601da755-2cdd-3b25-b29b-d7d522d504b5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9341"
+    },
+    {
+      "id": "633e7cdd-6348-3290-8586-c1a9153cf67b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6420"
+    },
+    {
+      "id": "63ed71c6-34f2-33ae-b99f-904bfc3dd649",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA0000"
+    },
+    {
+      "id": "65ab402e-c60d-3dac-99f5-7c625f683d09",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Compute Platform"
+    },
+    {
+      "id": "67dae2d3-7818-32f6-8c34-bde466e84580",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 662 Mobile Platform"
+    },
+    {
+      "id": "6a3217b4-591e-3503-b9db-6d0f4c45a006",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "6b2ccda8-38ce-3e47-b873-f3dfdac199b5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "713e1c18-c485-3276-b438-d9bb730d7df5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "7a57ad23-71a2-3f0b-a0ec-8604d8eab116",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 2 5G Compute Platform"
+    },
+    {
+      "id": "89760a3d-1486-37b5-aa83-02a1a1f18bf7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "AQT1000"
+    },
+    {
+      "id": "90128c3e-4a01-3781-a75a-bb4b9577d984",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "99583c2a-a828-34a4-ad99-10616b0b5690",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "9f72d115-ad01-34f1-8545-af46975651fa",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 460 Mobile Platform"
+    },
+    {
+      "id": "a438d157-4d55-3b66-8fea-539ed1270532",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "af5ad75f-564e-3fb6-8e49-aa83ea9aea10",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "b3f4153a-4e94-3aa4-8844-bfb42ad4e4ba",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8815"
+    },
+    {
+      "id": "b737e92d-ada2-34a9-ad61-02fc91b476f9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "bcdab286-122d-31ad-a240-e5dad5f0e4c5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "cbaa9295-ccfa-36ea-b9a9-d702d8b811c3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 2 5G Compute Platform \"Poipu Pro\""
+    },
+    {
+      "id": "cc47f8f6-295a-3dea-8b63-b2ab6fd5d56f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "cc591444-7c44-3ece-9036-2931cc80ba7d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 3 Compute Platform"
+    },
+    {
+      "id": "ce1aa898-bdfe-324a-96cd-f7ebaa51f7d9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "d1363558-4396-3344-a6f6-f3811e769a41",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "d360accd-f7c7-3cac-af21-eacae9264da5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Gen 2 Compute Platform \"Rennell Pro\""
+    },
+    {
+      "id": "d4baccef-448b-30f9-9a08-b4f6135cf2eb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9340"
+    },
+    {
+      "id": "d5d307ad-69ca-3f3e-b0e9-2540e104535e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "e20aeadf-71fa-326c-ab24-01688bb781e7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6391"
+    },
+    {
+      "id": "e4ec7dac-943e-3d97-b257-589bf7fe0e6d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Compute Platform"
+    },
+    {
+      "id": "e6db0943-6b7f-3f08-8fda-3f3964d2215a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "e76af052-8a51-341a-a7dd-3de0ee2d4ab1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6430"
+    },
+    {
+      "id": "e959e07a-a4c2-3ddf-83dc-01998542d6cd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6250"
+    },
+    {
+      "id": "ebbadc49-c2c7-3a23-b119-8a52971ceb34",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6800"
+    },
+    {
+      "id": "ec30fb83-d93b-3d38-ac1b-671c4b361dc9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "ef5c3cb2-5c40-3361-bb68-14f9c8c3bca4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "f4527d4b-80a3-33cf-bb37-c4ac610a17a5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8810"
+    },
+    {
+      "id": "f582b2bb-7d07-3007-94c6-fd5e31611c9f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "f6b08d32-c06d-366d-b56d-f82c7c0f8d7a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Compute Platform \"Poipu Pro\""
+    },
+    {
+      "id": "fc64bc87-c54b-3589-acbf-b573a27670f4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "5c346b62-0f6f-3525-9195-0acf85e1b2f7",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19327.json b/advisories/2026/04/EUVD-2026-19327.json
new file mode 100644
index 0000000000..cbc24e25b2
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19327.json
@@ -0,0 +1,402 @@
+{
+  "id": "EUVD-2026-19327",
+  "enisaUuid": "efeb0100-243d-3b4a-b12d-62af78d1a123",
+  "description": "Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.",
+  "datePublished": "Apr 6, 2026, 6:33:06 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:06 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21374\n",
+  "aliases": "GHSA-v4vr-xp28-fx6j\nCVE-2026-21374\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "03a15bde-f32e-3538-ab7b-aaf3fc172c6e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "0bdd5065-04c2-3232-a971-91f0a606fb87",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "0c563389-78c2-31b5-acbb-0551a844bd00",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "1065510e-b7cf-3c7f-a8fe-77a7ebde5407",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8810"
+    },
+    {
+      "id": "17b83cb7-29af-3788-8b9c-78bc387dc116",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "1a77b89e-c8f8-314b-acce-8ec338c79629",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Compute Platform \"Poipu Pro\""
+    },
+    {
+      "id": "220360d7-0d12-3769-9a21-0cf15003cd90",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "2350d850-d5ce-3dc7-b9d3-ace26a8ffac3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "25dbbc28-9b8e-3ca2-8f5c-5dc42e14fb75",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "2fe35f4b-8a9c-3699-a194-56dfe08ef416",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "30340b30-656e-3514-b8a1-c4ab37b810f5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6250"
+    },
+    {
+      "id": "31b010c0-d3f2-369d-bc70-01efd87facd8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Gen 2 Compute Platform \"Rennell Pro\""
+    },
+    {
+      "id": "331794ec-1bbd-3915-a71e-4f6127d630da",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6391"
+    },
+    {
+      "id": "3329b2a1-d291-3e3e-9042-c782d4d3ad8a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6430"
+    },
+    {
+      "id": "35cf15fd-f990-37c1-b264-67cf932f91fd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9340"
+    },
+    {
+      "id": "377309c4-7126-36fa-81be-7f40d8e62850",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "3d40bbd7-5098-398a-bb46-f04d34406ef7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6800"
+    },
+    {
+      "id": "3d8c32f6-9c85-3627-b322-96722ccc9b06",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "3e01b114-e23f-3ac7-9663-17c311d3b68f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "3e4094c0-592d-30d8-b16e-5ebd8e43dd0e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1 Gen 1 Platform"
+    },
+    {
+      "id": "40117267-f109-3304-9abe-63dc1b83467a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "43c7e815-69ff-3c2b-a60b-066a631afbdc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6420"
+    },
+    {
+      "id": "44f3f839-40cc-3bdc-a530-a2baf7aea4dd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "45a1971a-8f1e-331d-af73-de09cf3a7747",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "AQT1000"
+    },
+    {
+      "id": "474630bc-08e4-3970-89e3-7096bc7e6321",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9341"
+    },
+    {
+      "id": "4d780b8c-c8f3-39f0-99da-1db46f505125",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "57dae50b-9d4a-33ae-b23a-9052bebbfebf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "5aadfe66-5ad9-3f96-932c-3ae43bbfa37a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "5f8a513e-1fce-392b-b9aa-d61b06bcf687",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 3 Compute Platform"
+    },
+    {
+      "id": "675f52d4-ac15-3b49-b3ba-82267b670430",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "68561a32-24d6-3929-ad86-12d72adef4e8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8815"
+    },
+    {
+      "id": "69f702ed-6f0d-38bc-93c7-527be86af56c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 2 5G Compute Platform \"Poipu Pro\""
+    },
+    {
+      "id": "7fd415c6-7b4b-3db7-87c5-261fe77422d9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "8331e85c-ae05-3ab4-ac40-6557a63d7dc3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "9cf9ec38-e037-3809-b946-626adfdd0a0b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "9ee9fa62-ddf4-3245-a0e0-ec9cdf21e255",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Compute Platform"
+    },
+    {
+      "id": "abc8d73d-d293-3344-b0e4-47d06c73e9e3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA0000"
+    },
+    {
+      "id": "ac934ca6-fc07-3b00-8989-9d4d6ee0bbfb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "addf5677-a3b5-30d3-b315-6542482c9487",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "ba6a2fb6-aba1-3427-9b53-37165f6e51a9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "bb18762c-644b-3b65-b796-e7c198b6ef5a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "bb7907fc-1353-33ea-8cc7-434231271e4d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c+ Gen 3 Compute"
+    },
+    {
+      "id": "bd5cc672-fd25-3c07-bbbe-8dc912230cff",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Compute Platform"
+    },
+    {
+      "id": "bd74643f-1388-3b02-b3f9-7f612953a0df",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "ceecafd3-d2fd-3055-8de4-959f72759a82",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 460 Mobile Platform"
+    },
+    {
+      "id": "d7ed89b9-1fe9-3f96-879d-479e3b216bc3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6200"
+    },
+    {
+      "id": "d9188182-aa70-3fb8-9cdf-abcfd74bd945",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "dd620eb9-9c37-3897-af78-1e7a8169d1d5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8c Compute Platform (SC8180XP-AD) \"Poipu Lite\""
+    },
+    {
+      "id": "e6ace743-6f20-34a5-98b2-0833bc2de003",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 662 Mobile Platform"
+    },
+    {
+      "id": "eaa33a43-3a24-35aa-b4b6-392f8691ef4b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "f8408918-1afc-3a6e-ae4a-bb3754e93717",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8c Compute Platform \"Poipu Lite\""
+    },
+    {
+      "id": "f996542a-dc96-3ac2-a4ec-a154b4e3726f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 2 5G Compute Platform"
+    },
+    {
+      "id": "fa089821-b9c4-322e-a20e-29297d7e850c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "fc3ba8ec-8410-3a64-b76b-b13d6949fca9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "589ef1e3-7cb0-351a-a99b-5eea381b3d67",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19330.json b/advisories/2026/04/EUVD-2026-19330.json
new file mode 100644
index 0000000000..979151331f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19330.json
@@ -0,0 +1,269 @@
+{
+  "id": "EUVD-2026-19330",
+  "enisaUuid": "10ea9191-6da8-37e7-bf35-72ba8dc028e3",
+  "description": "Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.",
+  "datePublished": "Apr 6, 2026, 6:33:06 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:06 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21375\n",
+  "aliases": "GHSA-x4r2-qwg8-443r\nCVE-2026-21375\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0b1d0b15-7daa-32eb-b91d-535b62e7a6dd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "14999ce6-b6f8-3855-be4b-6ffe76203502",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 460 Mobile Platform"
+    },
+    {
+      "id": "1c6a754c-6e30-3535-97bc-a76b5693b070",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "25191ff2-370f-3531-b646-6582cca675df",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1 Gen 1 Platform"
+    },
+    {
+      "id": "285e4333-fcd7-32c0-aecf-79a5f5fe2d4b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "2d0f503a-4751-3b66-a142-4bb1eb20aa5c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "2d1ee9fe-8378-3e8c-97e5-b68a4789d8c8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "31928f56-327c-30e5-87d4-0693d1cd7fce",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "4ad17997-75c9-3ec0-b201-8371494e61f5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "52ee6a94-915c-3139-904f-31bbbff2cb89",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "561e85c6-c356-3f10-97d1-b5194d32bfd6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "633e047e-12e1-3165-bed6-0c4d1f78b4c3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "6d2cc476-cb79-3330-a076-2c389257f583",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "84bb9b95-6df8-386a-b1e3-30960f15bd6e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "8a521ba6-9cb2-3c4d-ab77-2df65769364f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "8bd1d0e1-eb1f-324c-9b57-6b76e00829fa",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA0000"
+    },
+    {
+      "id": "8eb3c79b-1419-3003-bafc-3bf3c1aa971f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "90683a7e-e5a4-3440-9deb-d1bf319e4f6e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "a2ee4bd3-9dda-36bf-b0ac-fdf73c57f966",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "a844f0b3-09c7-3857-996b-e753c9686605",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "ad95341a-bd74-3520-989c-224b7619b5d2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "b95a620c-628b-35c6-9f5d-3041b563d6c7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "c0b0f7b6-ab0e-3647-8842-e63cfc886a72",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 662 Mobile Platform"
+    },
+    {
+      "id": "c2557558-a187-3ca1-a92f-d99f01df0e52",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "c9b45fa5-6ff5-3fe5-8fc8-36ceb48c72bc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "cdb1098a-4f68-3c66-8723-32150f1f0aca",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "d5b827cb-8014-3f61-93ab-d0dd07cf37a4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "d7f08105-22c9-340a-a56e-5a47d94ec1ee",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "d9bb322c-dbc9-348d-9343-8288f67a1ae1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "db3d02a0-f3d7-3096-96f0-30a1eac23652",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "dd3eb51e-76ad-3727-8c9c-d350b29be73e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "de4ef3b4-3ac7-39b3-a4a2-c512fd9d1aa3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "df75914d-0206-3580-8ec6-84cf081f61fe",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c+ Gen 3 Compute"
+    },
+    {
+      "id": "e579e22c-3239-326b-b76c-139741e2ea9c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "f7ffcb3a-7bb4-3c40-b9c3-7d5fb2862e0c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 3 Compute Platform"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2fb39b77-baf3-3c15-89cd-f593a15661c1",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19331.json b/advisories/2026/04/EUVD-2026-19331.json
new file mode 100644
index 0000000000..8ffea96cf5
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19331.json
@@ -0,0 +1,402 @@
+{
+  "id": "EUVD-2026-19331",
+  "enisaUuid": "829f5c3f-9b64-37dd-ae41-8661a2ce4fa9",
+  "description": "Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.",
+  "datePublished": "Apr 6, 2026, 6:33:06 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:06 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21376\n",
+  "aliases": "CVE-2026-21376\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "05b3a723-acc3-3d36-85dd-a295b0de35c9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "06d4896c-0e36-31d8-b2f0-8e42bac102bd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "0a01a603-748f-3ec1-9a20-97db5568e71e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "1131eb34-e57e-3a05-8dfd-14d08a664d0e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "12910297-8fad-3286-afbe-fe324fdc0833",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 460 Mobile Platform"
+    },
+    {
+      "id": "154c8cc7-bc53-32f1-94b7-54421fcc267f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "19ecc3d2-4dff-3d7e-bac0-50a4d4d05d0c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 3 Compute Platform"
+    },
+    {
+      "id": "1eb2d457-5934-32c7-8068-32ed2523bb4d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "AQT1000"
+    },
+    {
+      "id": "21d4db5f-305f-3e4c-89ae-6167af3f3229",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "23183421-bc19-3e2e-be5b-d6a13f25fa13",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "2b99029c-7a7c-3904-9f88-3cefc81d1ef0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c+ Gen 3 Compute"
+    },
+    {
+      "id": "36e48739-4d24-3b3b-a83b-b36a4e2ddc07",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "39437f9a-149e-320d-85c6-d792977c010e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "41b20436-4a2f-3c52-85e8-86ed2386a2b3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8c Compute Platform (SC8180XP-AD) \"Poipu Lite\""
+    },
+    {
+      "id": "437f0158-1deb-3991-b7d7-7bb03f0b7378",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "49230e78-4af6-3eea-af2a-e950931a6068",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6250"
+    },
+    {
+      "id": "4f861425-4880-3176-9976-34a48a3bc630",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9340"
+    },
+    {
+      "id": "503eda8c-3cca-31ef-84ce-e650b7d3fc0e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "536bb184-fc75-31ec-bef8-f09f5d92f49c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "53d6f04c-52ab-3915-8d54-58a00a250f68",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "5d393c05-cd19-3e5e-9456-1e406afe7971",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "5dd0b459-4276-3a5f-a0b4-c030f5276b97",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8c Compute Platform \"Poipu Lite\""
+    },
+    {
+      "id": "60e29af7-784e-3c40-b263-cc30bd0a666e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6800"
+    },
+    {
+      "id": "65263436-be59-3b17-bf02-35a81d1d82ea",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6391"
+    },
+    {
+      "id": "682f8f9b-6618-38b9-97d0-26bdbdd5a55c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "6a3ab82f-b4a5-3fcb-9eeb-1a325f345fb2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Compute Platform"
+    },
+    {
+      "id": "6b35522e-167e-3a16-84bc-ef217bbb7ebd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6430"
+    },
+    {
+      "id": "6e443956-efce-3e37-9e57-8b33529e59da",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6200"
+    },
+    {
+      "id": "85212167-2f2d-3838-8762-8499a3ce4fef",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "862a7b08-3cfa-386a-bc24-7700b8511c7d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9341"
+    },
+    {
+      "id": "8c3ba954-079c-3e76-bcf1-e63d2dfa1ad6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Gen 2 Compute Platform \"Rennell Pro\""
+    },
+    {
+      "id": "8d67ff48-6248-3063-8b1b-7f0a92e8455b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Compute Platform"
+    },
+    {
+      "id": "93d94e45-b587-32d1-bb30-431b4110c534",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8815"
+    },
+    {
+      "id": "94a247ee-1f71-3cd6-81a9-05425e28dd5f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "961872ea-7744-3a21-9591-9b57ce926860",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1 Gen 1 Platform"
+    },
+    {
+      "id": "974703e5-0dd2-39ae-8ab9-d13b881eb8ee",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "9c5778a2-0003-3c49-9859-6f709aadfceb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "9ca46381-1913-33f9-b80d-64912ea78970",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "9ceaf9f9-8d0c-31ef-94aa-cfdf307f7be7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "9f428f16-6fd5-3ea6-8e7e-8d9c6d4c2a27",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8810"
+    },
+    {
+      "id": "a934a86d-aac5-3a23-8cb5-47558e83c87a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "ac2c22ad-bc8d-30d0-bfb7-6784195b177f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "c274034d-2674-3fb2-8abf-fc2dd3ac9f3a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "c2b8d2ae-367b-359d-b94c-af87dbe6156a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "c4115013-053f-31d9-8ae4-33f2ef0b7d33",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 2 5G Compute Platform"
+    },
+    {
+      "id": "cd08bd47-e93b-33e6-ba86-c46dcd6191c1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "d2b096de-7de5-3679-af15-33f11b450ec1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Compute Platform \"Poipu Pro\""
+    },
+    {
+      "id": "d580a370-189f-35b1-bdb0-95195f53ab46",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "d8e21efd-cc4c-3e16-8562-8655b38a78bc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 662 Mobile Platform"
+    },
+    {
+      "id": "da8739d3-845c-3084-a060-ac038e0c2632",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 2 5G Compute Platform \"Poipu Pro\""
+    },
+    {
+      "id": "deeec2c6-ae72-3a67-878a-4151e09f8b46",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "e3b49204-837b-3ad8-9278-03c7902dd020",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "ef34edb7-be00-3443-a9ed-3e3533e6a1b3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA0000"
+    },
+    {
+      "id": "f1ff3f43-3beb-3937-98cd-75ef34f5ee57",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6420"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2734c04e-9ad1-3d68-9638-e0c047ebf112",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19334.json b/advisories/2026/04/EUVD-2026-19334.json
new file mode 100644
index 0000000000..faf60c8b93
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19334.json
@@ -0,0 +1,381 @@
+{
+  "id": "EUVD-2026-19334",
+  "enisaUuid": "dd54e66a-4cae-3b2a-b694-d3ff5c355a80",
+  "description": "Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.",
+  "datePublished": "Apr 6, 2026, 6:33:07 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:07 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21378\n",
+  "aliases": "CVE-2026-21378\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0056aeae-10c7-3e0f-96fc-26d04de42b02",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c+ Gen 3 Compute"
+    },
+    {
+      "id": "0d4b0409-bce0-3e46-a73e-4c8bb3c5229d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "0d7bbd3b-3e21-3f3d-8cd9-ef95ec1ae9ff",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM6490"
+    },
+    {
+      "id": "10f411c5-6263-3e0e-9edc-3e2390b91f42",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "24b0297b-c787-3d0c-9a38-dc00cc154464",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "32024848-e686-39af-a347-74cb325afe01",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6800"
+    },
+    {
+      "id": "333b08cd-a95d-3544-b5df-66b86df314c7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6420"
+    },
+    {
+      "id": "3347ffbb-1dab-38ed-8959-8157ced48638",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "367e5961-b87b-3a70-b4ae-bd66a3c06eac",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 3 Compute Platform"
+    },
+    {
+      "id": "3af39f1b-470c-3fba-8b91-5eecbfb801ee",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "3fe64a59-0470-3b4f-b07f-936bda7ea97e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Gen 2 5G Compute Platform \"Poipu Pro\""
+    },
+    {
+      "id": "464b9ecc-e37e-3f7e-830b-cbadf70cebb0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "4a57b2ff-2702-30e7-aebe-78bf5f4f7934",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "4d1645f5-64db-3dcb-af1e-9841f898aa33",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "50bf63dd-6203-38f9-87d4-9824a4579496",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "528b6489-f0ed-3a24-807b-0e377a80a868",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCM5430"
+    },
+    {
+      "id": "5b492fde-ebd1-312d-9123-638540e6666d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6430"
+    },
+    {
+      "id": "5d570fbd-727b-34c5-9782-6dd744978650",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "65f40649-4879-31fb-ae94-ca306dd944ea",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "6a4625dc-5690-3733-b850-5ca71265da53",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1 Gen 1 Platform"
+    },
+    {
+      "id": "6c337677-7494-3726-8835-a3905fe345db",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "6d744626-3cbf-35ba-8282-53b6b7309d62",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "6f19547d-4d90-388f-9239-4700f57f6674",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "7037184d-c6b1-35fb-ad43-4d253c2a96d0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8810"
+    },
+    {
+      "id": "711640e3-6216-3b8f-b5ee-96d2d63440da",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9340"
+    },
+    {
+      "id": "7496843b-62cb-33a8-9d1a-bc2ed22ba3fc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 662 Mobile Platform"
+    },
+    {
+      "id": "84fe6f70-68bb-3c3d-9ffa-31b3102ca911",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "88310b22-8d34-38cc-803c-319db8bb5af4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "89a53514-0aa0-3d6f-80f2-7763817a42f7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "9435db8a-f58d-34ad-b310-2c28e0f00c53",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3950"
+    },
+    {
+      "id": "9492badf-4fe1-3cfe-a5e4-32e3fd688d1e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6391"
+    },
+    {
+      "id": "9621458c-3fd2-39fa-bb64-d4a02154922a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9341"
+    },
+    {
+      "id": "9a8db798-90ef-3b76-86dd-34a8120a7ad8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "a53cb820-4989-3800-a553-a1ac05d70ff6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Qualcomm Video Collaboration VC3 Platform"
+    },
+    {
+      "id": "a705bc71-ba17-3b3c-b0b0-785aebaff8fa",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Gen 2 Compute Platform \"Rennell Pro\""
+    },
+    {
+      "id": "afdb2aa5-a80d-3e56-8a71-d895a7b7776a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "AQT1000"
+    },
+    {
+      "id": "b626595e-6609-3e0e-8ecb-bde5d7fd1d2a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8c Compute Platform \"Poipu Lite\""
+    },
+    {
+      "id": "c937e385-c8c9-3a86-be66-469dd0a490be",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "c953b3e4-27b7-3d5e-8342-8589b1681869",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "cc94fdf0-2b71-33d8-a2dd-be7919e6a121",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8cx Compute Platform"
+    },
+    {
+      "id": "cf8c916f-d821-30d0-ae10-cff3c41c784c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 460 Mobile Platform"
+    },
+    {
+      "id": "d556d5f7-4687-3b22-95d2-b3858d29ff62",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA0000"
+    },
+    {
+      "id": "e0807d52-9bc8-30cc-9cfa-231f8548f930",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "e37ced47-2595-3a9d-887e-59e7127dde57",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "e6094b24-e058-3c8e-9f9c-f38192ef5191",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "e78c4bdd-37fd-39cf-89ae-4b7d69fa9e79",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6250"
+    },
+    {
+      "id": "eda51c48-6f0f-39ea-bf1b-caca8c75b968",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7c Compute Platform"
+    },
+    {
+      "id": "f2d22b05-e260-3a38-ae34-b7714042717c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8815"
+    },
+    {
+      "id": "f344d656-60eb-3221-8dce-068920ac3d7f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "f564f71a-f3b5-3ac2-9b5c-4275ec34af3f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "f63a2702-6f60-3a97-8e63-2824c283e10e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6200"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "48d14660-e27c-3b4a-bd59-cde1bd3032b1",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19336.json b/advisories/2026/04/EUVD-2026-19336.json
new file mode 100644
index 0000000000..728c9af101
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19336.json
@@ -0,0 +1,185 @@
+{
+  "id": "EUVD-2026-19336",
+  "enisaUuid": "d4b74245-8bd9-39ab-bf14-0ba862cde0ee",
+  "description": "Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.",
+  "datePublished": "Apr 6, 2026, 6:33:07 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:07 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21380\n",
+  "aliases": "CVE-2026-21380\nGHSA-mgp3-jcmc-q2pf\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "201ff956-f9fe-3943-be13-4ee518110fd6",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "2c9ad1c3-506e-306e-91c1-47343d5952cd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "2ef6edf1-b621-383e-87a1-b2150654d11f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "351430c2-0177-3e6c-999b-380e445d0674",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "38ce483c-0dea-39f2-b6e9-a77376e8c642",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "4962e3e6-626a-355e-abdc-0a027710aa14",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "50a862db-14b7-3bd4-9222-f17ea4861e8a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "6aee791f-b62e-32ba-b51b-2efddebab730",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "6b74dd60-d728-3b53-b5bd-d90fc958c970",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "753b465d-48ad-3dcd-839a-15bbffe78563",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "77eb94d7-de2b-3d70-9c20-2fd153001fd3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1 Gen 1 Platform"
+    },
+    {
+      "id": "77f81446-f80c-36d5-b5ff-25d30ba6fb5c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "7903f640-1706-3b16-a788-6bf4545f7475",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "7a6dacb9-26f7-32cd-a436-00939fec4597",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "7dd2077f-0cc4-315f-b820-71c63d92d8b0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "917f8ba8-52fa-3ad9-be8d-71f84601d908",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "920b04f7-5006-3f11-aeeb-0d5e8e6c5933",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "92aad1b7-5f57-3313-8321-e0e3938e5051",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "b36a1943-ab41-374a-959f-914b019fdf62",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "b3c29894-5a6c-3018-9109-968509576210",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "e8c145fd-993e-3631-a8b9-0d4b5b4add94",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "ea8fd9d2-201a-3430-88c3-7d6e6c9b5d3b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA0000"
+    },
+    {
+      "id": "f9cabdf3-8043-35f5-b2b7-4a7a471ab4e5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "abd1e10d-97e9-3884-836a-13f7d3ef607c",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19337.json b/advisories/2026/04/EUVD-2026-19337.json
new file mode 100644
index 0000000000..719c9e124f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19337.json
@@ -0,0 +1,745 @@
+{
+  "id": "EUVD-2026-19337",
+  "enisaUuid": "29e721ef-000c-325d-bcc8-8ae23ec629f5",
+  "description": "Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.",
+  "datePublished": "Apr 6, 2026, 6:33:07 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:07 PM",
+  "baseScore": 7.6,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21381\n",
+  "aliases": "CVE-2026-21381\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "04f16070-c8df-3bc0-8d0f-b6422a901ef3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6700"
+    },
+    {
+      "id": "0a19d874-c4be-36bf-86d0-03b50ad74391",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Pandeiro"
+    },
+    {
+      "id": "0daa8443-98a6-34a5-8079-6813277bf349",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Gen 3 Mobile Platform"
+    },
+    {
+      "id": "0fdfa539-0b37-39d6-9275-bd6cb64d8809",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1083"
+    },
+    {
+      "id": "1920dd2b-0622-3ba9-9e6a-514b7bb4a649",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QLN1086BD"
+    },
+    {
+      "id": "1d8e8e27-7bdd-3413-a52b-80309776f630",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 1 Mobile Platform"
+    },
+    {
+      "id": "217b4fef-b781-3795-a506-2070038d0562",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 3 Mobile Platform"
+    },
+    {
+      "id": "23a1b6f0-b33f-3b70-a055-b27f6caf07c9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6755"
+    },
+    {
+      "id": "25087178-cc1b-3acb-abe8-86e238565797",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "2724cf5a-fdce-35b9-87df-1913f0daa96a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "27f02cb9-1938-38b1-8cbc-8094a0703734",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCC2073"
+    },
+    {
+      "id": "28b44ebd-6c9e-340e-8773-2061c76936b2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "2d62f798-6feb-3356-ad68-0fa3c5d4956b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6777AQ"
+    },
+    {
+      "id": "34297b03-3023-3ab6-a59b-e3602ca063ac",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Orne"
+    },
+    {
+      "id": "3986ee9c-10b7-309a-a07d-bdf315facf70",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SXR2230P"
+    },
+    {
+      "id": "3b79349b-844c-325a-a1a9-6f3ae1166b92",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SAR2130P"
+    },
+    {
+      "id": "3cf00752-395e-3b6e-bf7c-5a42d5ca462b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM6650P"
+    },
+    {
+      "id": "3e566284-e00a-30e7-8620-94d46c411ac9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9370"
+    },
+    {
+      "id": "3ef5560b-333d-3c7c-99b3-b0cb7085dd51",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1+ Gen 1 Platform"
+    },
+    {
+      "id": "3f50d157-d781-3953-b192-898bf52c4487",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "43887544-1385-3c9b-a4bd-0350eae84a21",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "4617ea05-d2bd-3f53-951a-ae9ce34d61ae",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378"
+    },
+    {
+      "id": "4d9669bd-234e-3f96-b56d-55533f98b33d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon AR1 Gen 1 Platform"
+    },
+    {
+      "id": "4f1962ba-fa88-353e-86ec-9da0d4bf38e5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 6 Gen 4 Mobile Platform"
+    },
+    {
+      "id": "51005c67-5d64-306a-a1f4-cdde9fe49b70",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1094"
+    },
+    {
+      "id": "5432c89a-849a-34ca-942d-fdb296126011",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8081"
+    },
+    {
+      "id": "5440d396-c8d2-3ab0-806a-fc3daece0a27",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QPA1086BD"
+    },
+    {
+      "id": "5a7574e9-5545-3a06-8afc-750cca9a3158",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "5e48ffcb-871a-3dc4-9487-a2ba760a5382",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8835"
+    },
+    {
+      "id": "6484ce22-f0da-3a5c-9bd2-a38d0b45f589",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "65f8eeb1-8332-38d6-a742-f62b1640deec",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9340"
+    },
+    {
+      "id": "68e89990-f8e5-3145-b5f6-aa95f340607c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCC710"
+    },
+    {
+      "id": "6bb2ab61-f931-3056-af81-b14abf58b200",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "6cdb5521-0459-3d98-8d48-fb6a932e5701",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7635P"
+    },
+    {
+      "id": "70895d99-2b34-3d49-831a-4ad8ac5062fc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7860"
+    },
+    {
+      "id": "70ff256a-a916-3bb8-813c-247e709589e9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6274"
+    },
+    {
+      "id": "73efeb90-11eb-33ee-8a0d-fb25dec50b9b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8650Q"
+    },
+    {
+      "id": "74283095-bef2-3dae-973a-902fbb15b2a4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 7s Gen 3 Mobile Platform"
+    },
+    {
+      "id": "76010226-48ea-3035-93be-f2c8b3ea835d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "77459ba7-0c0f-3b8c-9855-6a05f692d0c0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Palawan25"
+    },
+    {
+      "id": "781da6a2-0e0f-3252-ad4a-ea417bbc6a59",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8750P"
+    },
+    {
+      "id": "7a0960a7-252f-393b-a85f-e3069a98922c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9375"
+    },
+    {
+      "id": "7a29a656-956a-3a40-bca6-e27187bcb01d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "7be678f2-26d4-3e19-9554-f89d8a00d8e0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FWA Gen 3 Ultra Platform"
+    },
+    {
+      "id": "7ceec911-0fac-392d-bba8-7bad132b6b13",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "8578b678-288c-3e30-bc7c-7c84fb38d5c0",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA8337"
+    },
+    {
+      "id": "869ded5d-6f3f-3db5-9cd7-7cb6da6afd84",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "86ffad49-9cf6-3a94-86a5-505073b01aa9",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN6224"
+    },
+    {
+      "id": "87cbadb7-00d1-3b56-aade-ba8f6d537d29",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6797AQ"
+    },
+    {
+      "id": "88c67f0e-31d6-32ab-a90a-94fe5b672dfd",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SXR2250P"
+    },
+    {
+      "id": "8eacee40-5ee8-3896-a6b6-18ef64e7d53b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8815"
+    },
+    {
+      "id": "8ff58990-a831-3380-9ca8-7d6c1c2411cc",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "G2 Gen 1"
+    },
+    {
+      "id": "92939be4-1f17-3162-b0a3-f115c8132fd5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "AR8035"
+    },
+    {
+      "id": "953cf89e-0660-3315-9198-ac45d3303b83",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7881"
+    },
+    {
+      "id": "9676a932-672e-32c8-b4e3-ec973cb47365",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Milos"
+    },
+    {
+      "id": "9d478147-31e6-3625-ac47-501d4e67263b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7675P"
+    },
+    {
+      "id": "9e6040ff-45a5-3f8c-a96c-26710250e6e3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6450"
+    },
+    {
+      "id": "a2caf3bb-0e28-36a8-b569-580671aaee53",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1095"
+    },
+    {
+      "id": "a3b89784-4f71-3ddb-8f09-d2ed7652cae3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Elite"
+    },
+    {
+      "id": "a45a2d6c-9a9a-386f-b06f-9e40af09e149",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCS8550"
+    },
+    {
+      "id": "a6cd30a5-a5a2-37c8-80fd-861f6e1f89e5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN3988"
+    },
+    {
+      "id": "aa24c934-078d-3204-93e4-fb8fffa0ebcf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "ac3f66c0-fe74-326d-a7ba-e560a1d0a6c4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "ae2f6a3d-2a5f-36d2-8f1c-e86b632ee895",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8830"
+    },
+    {
+      "id": "af6e56c4-bbfb-391b-82fe-1d69406497ab",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Netrani"
+    },
+    {
+      "id": "b11f0251-336a-30c7-85e6-f15a6ebabb68",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6391"
+    },
+    {
+      "id": "b26d4506-ec36-3bdd-8e92-026e342e8f6a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9390"
+    },
+    {
+      "id": "b45f355a-6fdc-32ee-abfe-6ca9656fc8db",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8810"
+    },
+    {
+      "id": "b7e3c239-5a07-31ad-8f14-f3cff66c01ea",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7675"
+    },
+    {
+      "id": "b8d8991e-3704-3a9f-a538-52365b0ad1b1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QPA1083BD"
+    },
+    {
+      "id": "ba898a55-71f8-3c52-8e4a-092283c278eb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1086"
+    },
+    {
+      "id": "be7bafed-860c-3bbf-9d37-6ff653875cf2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7861"
+    },
+    {
+      "id": "be968a60-becc-38a8-ac2d-a7d4e0cd4a03",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SAR1165P"
+    },
+    {
+      "id": "bfd16683-37f3-3a7f-9808-6048eda7c75a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8635P"
+    },
+    {
+      "id": "c02ffe93-3c58-3bb4-bb46-4834e8406910",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1093"
+    },
+    {
+      "id": "c2ae5fcb-16b7-35f9-a09c-ddebffd41c3f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6787AQ"
+    },
+    {
+      "id": "c409aa58-a152-3760-9328-8178e36dfa48",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN7880"
+    },
+    {
+      "id": "c42fbbe3-54e9-3fdd-a17e-e25c0e17bf6f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XRV7209"
+    },
+    {
+      "id": "c4ad7e56-59c0-3c2f-a790-bb6fafc156b8",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X75 5G Modem-RF System"
+    },
+    {
+      "id": "ca9e0e57-dcd2-321e-bd40-0ac7f74cfca3",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon X72 5G Modem-RF System"
+    },
+    {
+      "id": "cca9e459-c9e6-3821-bc95-d2ce50ecc0de",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QLN1083BD"
+    },
+    {
+      "id": "cda1ddc3-3bf4-3f1a-b687-61f3ca90e81e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9395"
+    },
+    {
+      "id": "ce1b3d24-258d-3457-b8f4-6992cb702fde",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM8635"
+    },
+    {
+      "id": "d0901340-138e-3153-987b-a3612e01d456",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCC2076"
+    },
+    {
+      "id": "d3a3dc20-1235-32a9-b50d-c3ead55c1a33",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA6698AU"
+    },
+    {
+      "id": "d4be35bd-e0f2-308a-9217-d4666ada0ef5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9011"
+    },
+    {
+      "id": "d512da81-6e11-3c62-a3e6-e2644ea6126e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XRV9209"
+    },
+    {
+      "id": "da281500-bfdc-30bc-8337-886e7e24bba2",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QXM1096"
+    },
+    {
+      "id": "dd79a4c0-4e82-3871-9b3a-f077100f1ffb",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCN9012"
+    },
+    {
+      "id": "e12898a0-779e-374a-af98-2bcf31d92d0a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QMP1000"
+    },
+    {
+      "id": "e20cc364-77a5-35e9-a1f5-685d51339960",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6200"
+    },
+    {
+      "id": "e28e62e2-eb12-3054-ba3e-e2b36b094f7f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SM7435"
+    },
+    {
+      "id": "e681a695-0450-3361-be57-0ac751f705c7",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QFW7124"
+    },
+    {
+      "id": "e795b1cd-3432-3a5d-a7af-f40bbb4b0b1a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "ea1ebd67-6f00-3d5a-b4ac-b1b412fc8821",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SXR2330P"
+    },
+    {
+      "id": "ea3d40ce-7d02-3d97-babb-4d4616f8e7be",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8832"
+    },
+    {
+      "id": "efb780b8-d3f3-307d-a3bb-44fb29cc4d0f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    },
+    {
+      "id": "f0c41d2d-3c07-3613-ae55-23a802399528",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SXR2350P"
+    },
+    {
+      "id": "f6ac2181-98f1-3728-aea7-aa7b9ff34dc5",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCN6650"
+    },
+    {
+      "id": "f76775f3-61de-3f1e-894f-cc12d7b48415",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "f8abe2ee-02fa-3b04-b1d0-1c30a0c75b74",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Snapdragon 8 Elite Gen 5"
+    },
+    {
+      "id": "fc38dd94-b9a1-3e7c-a624-377043c2107a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "fe689515-3079-3e4d-88c0-177414edffb4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QFW7114"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "a70f7456-7d11-3b01-b637-7e8613f35ef4",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19339.json b/advisories/2026/04/EUVD-2026-19339.json
new file mode 100644
index 0000000000..2462371cee
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19339.json
@@ -0,0 +1,157 @@
+{
+  "id": "EUVD-2026-19339",
+  "enisaUuid": "14504429-38c2-3f73-97dd-8fbb56c11cf3",
+  "description": "Memory Corruption when handling power management requests with improperly sized input/output buffers.",
+  "datePublished": "Apr 6, 2026, 6:33:07 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:07 PM",
+  "baseScore": 7.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21382\n",
+  "aliases": "GHSA-m3w8-q34w-8f9j\nCVE-2026-21382\n",
+  "assigner": "qualcomm",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "01641342-6314-3288-9e30-db50cc20af2e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000077"
+    },
+    {
+      "id": "3039a81e-d53a-3e27-8007-9d6c48f85a28",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845"
+    },
+    {
+      "id": "3055b75d-a3cb-324e-9068-ce51f3d43acf",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9380"
+    },
+    {
+      "id": "592e0ffd-f12c-3760-8954-c5108b5b0084",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9378C"
+    },
+    {
+      "id": "6b792e4f-de73-370d-a622-b4d1c8a82676",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000092"
+    },
+    {
+      "id": "70acda43-5ee6-3cf1-8f34-76f7dbd94f3c",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101032"
+    },
+    {
+      "id": "76e369bd-24ef-3f46-a916-19b9c8334751",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 6900"
+    },
+    {
+      "id": "7764bf61-6855-3c50-84cf-b16ef83cc9a4",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8845H"
+    },
+    {
+      "id": "7b4e4824-383e-309d-bae1-a29347aa9850",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000090"
+    },
+    {
+      "id": "81833ea7-944d-3bd1-8c29-f9c55b0480d1",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101039"
+    },
+    {
+      "id": "8281ef6f-b6ce-3409-bb58-43420c67ad5a",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "FastConnect 7800"
+    },
+    {
+      "id": "9e055f9b-873d-338c-894f-2e7ce1225b5b",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000094"
+    },
+    {
+      "id": "b24a1ba2-c8f8-3a3f-a939-d195316adcaa",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WCD9385"
+    },
+    {
+      "id": "bc0285b4-a78d-323f-b553-cd4762171e41",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "X2000086"
+    },
+    {
+      "id": "c67c06b5-1d1c-3add-9e9c-4278a36dc65f",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "XG101002"
+    },
+    {
+      "id": "ed944c6a-48bb-39e5-a469-60159612183d",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "WSA8840"
+    },
+    {
+      "id": "f1c8bc1b-3f36-3d30-9cfd-c477cabbbe38",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "SC8380XP"
+    },
+    {
+      "id": "f6334f3a-d972-33c8-bd37-4ac66237ea82",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "QCA0000"
+    },
+    {
+      "id": "fc27d942-b863-328f-a7e5-5fd75d73881e",
+      "product": {
+        "name": "Snapdragon"
+      },
+      "product_version": "Cologne"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "8d232c35-6fde-37da-8846-dc286b9586be",
+      "vendor": {
+        "name": "Qualcomm, Inc."
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19340.json b/advisories/2026/04/EUVD-2026-19340.json
new file mode 100644
index 0000000000..64eb34e25e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19340.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19340",
+  "enisaUuid": "f5fb1111-4272-3c24-9f98-5c69cb52693c",
+  "description": "An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Content field.",
+  "datePublished": "Apr 6, 2026, 6:33:08 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:08 PM",
+  "baseScore": 0.0,
+  "references": "http://feehi.com\nhttps://github.com/liufee/cms/issues/80\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31313\n",
+  "aliases": "CVE-2026-31313\nGHSA-hj9c-p59c-vqph\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "364c5b68-b07e-3324-8b6e-684977b44a18",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2efef183-d2d5-3613-bb53-2bd657b66942",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19341.json b/advisories/2026/04/EUVD-2026-19341.json
new file mode 100644
index 0000000000..66412757fc
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19341.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19341",
+  "enisaUuid": "5e9d0364-1e1e-3d02-bba3-e81cfd38abdf",
+  "description": "An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign parameter.",
+  "datePublished": "Apr 6, 2026, 6:33:07 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:07 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/liufee/cms\nhttps://github.com/liufee/cms/issues/82\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31350\n",
+  "aliases": "GHSA-cgxr-v74v-g9mm\nCVE-2026-31350\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "d88990f0-32d1-3b94-9690-5ea1573a9917",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "f142f3b3-dd2f-34d4-9aec-85abf6bf6e67",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19342.json b/advisories/2026/04/EUVD-2026-19342.json
new file mode 100644
index 0000000000..7b72400d74
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19342.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19342",
+  "enisaUuid": "39e2cedf-6302-3362-a878-7c40e78a4304",
+  "description": "An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Role Name parameter.",
+  "datePublished": "Apr 6, 2026, 6:33:07 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:07 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/liufee/cms\nhttps://github.com/liufee/cms/issues/83\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31352\n",
+  "aliases": "GHSA-hqjc-wfvx-x2fv\nCVE-2026-31352\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "4d19c05a-5071-343b-8a53-a668dfd56cb9",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "a614c86a-66ea-3eff-813e-62b9df4d5b97",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19343.json b/advisories/2026/04/EUVD-2026-19343.json
new file mode 100644
index 0000000000..26a692164c
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19343.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19343",
+  "enisaUuid": "a03a2a97-f9fb-38b3-b3a8-5aa1e1579257",
+  "description": "An authenticated stored cross-site scripting (XSS) vulnerability in the Category module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.",
+  "datePublished": "Apr 6, 2026, 6:33:07 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:07 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/liufee/cms\nhttps://github.com/liufee/cms/issues/84\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31353\n",
+  "aliases": "GHSA-664p-j3q6-p843\nCVE-2026-31353\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ca66b4e0-359d-3245-b9c2-2f6a3f7542c5",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "19113944-f34b-3250-a39a-07f753ce39ea",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19344.json b/advisories/2026/04/EUVD-2026-19344.json
new file mode 100644
index 0000000000..8220ee0ac1
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19344.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19344",
+  "enisaUuid": "3d99ae02-0283-3ffc-b582-c06cd3519144",
+  "description": "Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the Permissions module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Group, Category or Description parameters.",
+  "datePublished": "Apr 6, 2026, 6:33:07 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:07 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/liufee/cms\nhttps://github.com/liufee/cms/issues/85\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31354\n",
+  "aliases": "CVE-2026-31354\nGHSA-xqm9-6qmm-xrqh\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "1034a053-a798-3f1b-8deb-e0a653dc88e0",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "8f4584d8-29d4-31f5-8fb3-8e94911271f0",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19345.json b/advisories/2026/04/EUVD-2026-19345.json
new file mode 100644
index 0000000000..8e0c78dddf
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19345.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19345",
+  "enisaUuid": "488ea462-be3f-3f56-b552-a4f5375c2188",
+  "description": "ChurchCRM is an open-source church management system. Prior to 7.1.0, authenticated users with Edit Records or Manage Groups permissions can exploit a time-based blind SQL injection vulnerability in the PropertyAssign.php endpoint to exfiltrate or modify any database content, including user credentials, personal identifiable information (PII), and configuration secrets. This vulnerability is fixed in 7.1.0.",
+  "datePublished": "Apr 6, 2026, 3:27:09 PM",
+  "dateUpdated": "Apr 6, 2026, 4:17:42 PM",
+  "baseScore": 8.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
+  "references": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-r57q-r5v3-v5h8\n",
+  "aliases": "CVE-2026-34402\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "3eab3a02-26a0-36e8-b09e-2c0c5c206d06",
+      "product": {
+        "name": "crm"
+      },
+      "product_version": "< 7.1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d8f19d60-0670-31e1-acf6-182c4766893a",
+      "vendor": {
+        "name": "ChurchCRM"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19346.json b/advisories/2026/04/EUVD-2026-19346.json
new file mode 100644
index 0000000000..be7314a60f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19346.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19346",
+  "enisaUuid": "33e0f9c0-616c-3943-8e8e-b4200b14055c",
+  "description": "Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attributes are accessed through built-in functions like getattr and setattr. This allows an attacker to bypass the intended restrictions and eventually achieve arbitrary code execution.",
+  "datePublished": "Apr 6, 2026, 3:30:30 PM",
+  "dateUpdated": "Apr 6, 2026, 3:30:30 PM",
+  "baseScore": 7.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H",
+  "references": "https://github.com/scoder/lupa/security/advisories/GHSA-69v7-xpr6-6gjm\n",
+  "aliases": "CVE-2026-34444\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "2e0b0962-3ed0-36a6-96a9-021b3bbe4c90",
+      "product": {
+        "name": "lupa"
+      },
+      "product_version": "\u2264 2.6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "1ebcd933-c160-3528-af5e-c5e09a75fe06",
+      "vendor": {
+        "name": "scoder"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19347.json b/advisories/2026/04/EUVD-2026-19347.json
new file mode 100644
index 0000000000..69a8cbf91f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19347.json
@@ -0,0 +1,52 @@
+{
+  "id": "EUVD-2026-19347",
+  "enisaUuid": "005092ef-ec25-359f-b2e6-ed7017bc218d",
+  "description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, and 3.4.9, internal_exr_undo_piz() advances the working wavelet pointer with signed 32-bit arithmetic. Because nx, ny, and wcount are int, a crafted EXR file can make this product overflow and wrap. The next channel then decodes from an incorrect address. The wavelet decode path operates in place, so this yields both out-of-bounds reads and out-of-bounds writes. This vulnerability is fixed in 3.2.7, 3.3.9, and 3.4.9.",
+  "datePublished": "Apr 6, 2026, 3:31:57 PM",
+  "dateUpdated": "Apr 6, 2026, 3:31:57 PM",
+  "baseScore": 8.6,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf\n",
+  "aliases": "CVE-2026-34588\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0acbdf3e-5536-3e2c-adac-bb14ff04aaa5",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.1.0, \u2264 3.1.13"
+    },
+    {
+      "id": "279d7f7e-2e21-3e7c-8779-e69cfa49ff62",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.4.0, < 3.4.9"
+    },
+    {
+      "id": "5cbeef66-fcdd-3b24-9cd2-afe269937a96",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.3.0, < 3.3.9"
+    },
+    {
+      "id": "cb3a0e39-b345-3c62-a2a8-d40881589145",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.2.0, < 3.2.7"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "9e513a67-415c-32da-8ac9-de3822b355af",
+      "vendor": {
+        "name": "AcademySoftwareFoundation"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19348.json b/advisories/2026/04/EUVD-2026-19348.json
new file mode 100644
index 0000000000..33ad21176e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19348.json
@@ -0,0 +1,45 @@
+{
+  "id": "EUVD-2026-19348",
+  "enisaUuid": "1249a167-0cca-3de5-a84a-0eaf9f207d1c",
+  "description": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, and 3.4.9, the DWA lossy decoder constructs temporary per-component block pointers using signed 32-bit arithmetic. For a large enough width, the calculation overflows and later decoder stores operate on a wrapped pointer outside the allocated rowBlock backing store. This vulnerability is fixed in 3.2.7, 3.3.9, and 3.4.9.",
+  "datePublished": "Apr 6, 2026, 3:33:03 PM",
+  "dateUpdated": "Apr 6, 2026, 3:33:03 PM",
+  "baseScore": 8.4,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-p8xc-w3q4-h64x\n",
+  "aliases": "CVE-2026-34589\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "1f435df0-918c-32a9-93a4-8a4ad9438901",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.3.0, < 3.3.9"
+    },
+    {
+      "id": "7c12dffa-0ec6-34ac-b091-7a69dae1ce08",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.4.0, < 3.4.9"
+    },
+    {
+      "id": "8aa27082-0a2a-36ab-afb3-a121a3f6d2fb",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.2.0, < 3.2.7"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "7e2da70c-fcfb-3c74-9f94-9c5ce415f802",
+      "vendor": {
+        "name": "AcademySoftwareFoundation"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19349.json b/advisories/2026/04/EUVD-2026-19349.json
new file mode 100644
index 0000000000..371468dc69
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19349.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19349",
+  "enisaUuid": "a5af14f1-dffb-3329-866f-69b7eaf5e49e",
+  "description": "vLLM is an inference and serving engine for large language models (LLMs). From 0.16.0 to before 0.19.0, a server-side request forgery (SSRF) vulnerability in download_bytes_from_url allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions.\nThis can be used to target internal services (e.g. cloud metadata endpoints or internal HTTP APIs) reachable from the vLLM host. This vulnerability is fixed in 0.19.0.",
+  "datePublished": "Apr 6, 2026, 3:36:52 PM",
+  "dateUpdated": "Apr 6, 2026, 3:36:52 PM",
+  "baseScore": 5.4,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
+  "references": "https://github.com/vllm-project/vllm/security/advisories/GHSA-pf3h-qjgv-vcpr\nhttps://github.com/vllm-project/vllm/pull/38482\nhttps://github.com/vllm-project/vllm/commit/57861ae48d3493fa48b4d7d830b7ec9f995783e7\n",
+  "aliases": "GHSA-pf3h-qjgv-vcpr\nCVE-2026-34753\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "2a30646f-57d6-3d20-b380-c94098a5116d",
+      "product": {
+        "name": "vllm"
+      },
+      "product_version": "0.16.0, < 0.19.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "079939e9-37de-3920-b10d-16046b3d5ee4",
+      "vendor": {
+        "name": "vllm-project"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19350.json b/advisories/2026/04/EUVD-2026-19350.json
new file mode 100644
index 0000000000..8b0df24100
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19350.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19350",
+  "enisaUuid": "8dd2f902-da66-3c02-aa33-3a0c4cabee97",
+  "description": "vLLM is an inference and serving engine for large language models (LLMs). From 0.7.0 to before 0.19.0, the VideoMediaIO.load_base64() method at vllm/multimodal/media/video.py splits video/jpeg data URLs by comma to extract individual JPEG frames, but does not enforce a frame count limit. The num_frames parameter (default: 32), which is enforced by the load_bytes() code path, is completely bypassed in the video/jpeg base64 path. An attacker can send a single API request containing thousands of comma-separated base64-encoded JPEG frames, causing the server to decode all frames into memory and crash with OOM. This vulnerability is fixed in 0.19.0.",
+  "datePublished": "Apr 6, 2026, 3:38:53 PM",
+  "dateUpdated": "Apr 6, 2026, 3:38:53 PM",
+  "baseScore": 6.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+  "references": "https://github.com/vllm-project/vllm/security/advisories/GHSA-pq5c-rjhq-qp7p\nhttps://github.com/vllm-project/vllm/pull/38636\nhttps://github.com/vllm-project/vllm/commit/58ee61422169ce17e08248f8efa1e9df434fe395\n",
+  "aliases": "GHSA-pq5c-rjhq-qp7p\nCVE-2026-34755\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "47f416e1-0134-30c1-b7cc-3e80b141dcd7",
+      "product": {
+        "name": "vllm"
+      },
+      "product_version": "0.7.0, < 0.19.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "e64c79c0-81ad-3149-82a5-051c9f741877",
+      "vendor": {
+        "name": "vllm-project"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19351.json b/advisories/2026/04/EUVD-2026-19351.json
new file mode 100644
index 0000000000..79e47df845
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19351.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19351",
+  "enisaUuid": "90bd6ec8-b97c-378b-9533-d35d96e22d1e",
+  "description": "vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denial of Service vulnerability exists in the vLLM OpenAI-compatible API server. Due to the lack of an upper bound validation on the n parameter in the ChatCompletionRequest and CompletionRequest Pydantic models, an unauthenticated attacker can send a single HTTP request with an astronomically large n value. This completely blocks the Python asyncio event loop and causes immediate Out-Of-Memory crashes by allocating millions of request object copies in the heap before the request even reaches the scheduling queue. This vulnerability is fixed in 0.19.0.",
+  "datePublished": "Apr 6, 2026, 3:40:03 PM",
+  "dateUpdated": "Apr 6, 2026, 3:40:03 PM",
+  "baseScore": 6.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+  "references": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3mwp-wvh9-7528\nhttps://github.com/vllm-project/vllm/pull/37952\nhttps://github.com/vllm-project/vllm/commit/b111f8a61f100fdca08706f41f29ef3548de7380\n",
+  "aliases": "CVE-2026-34756\nGHSA-3mwp-wvh9-7528\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "354b3fb2-85e3-3c3f-9b02-9dd5e7f70f1d",
+      "product": {
+        "name": "vllm"
+      },
+      "product_version": "0.1.0, < 0.19.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d5798451-d6bb-3670-85c2-c254008e6864",
+      "vendor": {
+        "name": "vllm-project"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19352.json b/advisories/2026/04/EUVD-2026-19352.json
new file mode 100644
index 0000000000..5e83df7026
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19352.json
@@ -0,0 +1,52 @@
+{
+  "id": "EUVD-2026-19352",
+  "enisaUuid": "dc139f07-8a2e-3a40-b512-734d8fcc08ad",
+  "description": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 33.0.0-alpha.1 to before 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, apps that use offscreen rendering with GPU shared textures may be vulnerable to a use-after-free. Under certain conditions, the release() callback provided on a paint event texture can outlive its backing native state, and invoking it after that point dereferences freed memory in the main process, which may lead to a crash or memory corruption. Apps are only affected if they use offscreen rendering with webPreferences.offscreen: { useSharedTexture: true }. Apps that do not enable shared-texture offscreen rendering are not affected. To mitigate this issue, ensure texture.release() is called promptly after the texture has been consumed, before the texture object becomes unreachable. This vulnerability is fixed in 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5.",
+  "datePublished": "Apr 6, 2026, 3:46:40 PM",
+  "dateUpdated": "Apr 6, 2026, 3:46:40 PM",
+  "baseScore": 2.3,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
+  "references": "https://github.com/electron/electron/security/advisories/GHSA-8x5q-pvf5-64mp\n",
+  "aliases": "CVE-2026-34764\nGHSA-8x5q-pvf5-64mp\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0ad45a25-a591-3114-a387-0ed97ec0a298",
+      "product": {
+        "name": "electron"
+      },
+      "product_version": "33.0.0-alpha.1, < 39.8.5"
+    },
+    {
+      "id": "2868a608-9a44-3ef8-8ffd-c87f7cfac628",
+      "product": {
+        "name": "electron"
+      },
+      "product_version": "41.0.0-alpha.1, < 41.1.0"
+    },
+    {
+      "id": "5ce9475c-3760-3863-bd55-89e5ac484bd8",
+      "product": {
+        "name": "electron"
+      },
+      "product_version": "40.0.0-alpha.1, < 40.8.5"
+    },
+    {
+      "id": "6c7eb18c-2744-39f6-8967-c78bb67ccfc2",
+      "product": {
+        "name": "electron"
+      },
+      "product_version": "42.0.0-alpha.1, < 42.0.0-alpha.5"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "de230c2c-ed84-36c5-88aa-7d1403a229f8",
+      "vendor": {
+        "name": "electron"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19353.json b/advisories/2026/04/EUVD-2026-19353.json
new file mode 100644
index 0000000000..8e8ea6aa2c
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19353.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19353",
+  "enisaUuid": "bcee19cd-b682-32d5-9e33-a79c443a4b90",
+  "description": "Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4, a path traversal vulnerability in Ferret's IO::FS::WRITE standard library function allows a malicious website to write arbitrary files to the filesystem of the machine running Ferret. When an operator scrapes a website that returns filenames containing ../ sequences, and uses those filenames to construct output paths (a standard scraping pattern), the attacker controls both the destination path and the file content. This can lead to remote code execution via cron jobs, SSH authorized_keys, shell profiles, or web shells. This vulnerability is fixed in 2.0.0-alpha.4.",
+  "datePublished": "Apr 6, 2026, 4:04:24 PM",
+  "dateUpdated": "Apr 6, 2026, 4:04:24 PM",
+  "baseScore": 8.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
+  "references": "https://github.com/MontFerret/ferret/security/advisories/GHSA-j6v5-g24h-vg4j\nhttps://github.com/MontFerret/ferret/commit/160ebad6bd50f153453e120f6d909f5b83322917\n",
+  "aliases": "GHSA-j6v5-g24h-vg4j\nCVE-2026-34783\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "2f46be83-ce74-3984-bc6a-caeff4fc7f33",
+      "product": {
+        "name": "ferret"
+      },
+      "product_version": "< 2.0.0-alpha.4"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "6facb6ad-9efd-32bf-af22-674cf1ce0450",
+      "vendor": {
+        "name": "MontFerret"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19354.json b/advisories/2026/04/EUVD-2026-19354.json
new file mode 100644
index 0000000000..ae49b50684
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19354.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19354",
+  "enisaUuid": "067d89aa-b3c0-3645-8467-1cf098724632",
+  "description": "Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, which introduced a hidden dependency deploying a cross-platform Remote Access Trojan (RAT). Users of @usebruno/cli who ran npm install between 00:21 UTC and ~03:30 UTC on March 31, 2026 may have been impacted. Upgrade to 3.2.1",
+  "datePublished": "Apr 6, 2026, 4:08:08 PM",
+  "dateUpdated": "Apr 6, 2026, 4:08:08 PM",
+  "baseScore": 9.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/usebruno/bruno/security/advisories/GHSA-658g-p7jg-wx5g\nhttps://github.com/axios/axios/issues/10604\nhttps://github.com/usebruno/bruno/pull/7632\nhttps://www.aikido.dev/blog/axios-npm-compromised-maintainer-hijacked-rat\nhttps://github.com/advisories/GHSA-fw8c-xr5c-95f9\n",
+  "aliases": "CVE-2026-34841\nGHSA-658g-p7jg-wx5g\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "66f8e056-50e8-3757-a4cf-4c0423a9832b",
+      "product": {
+        "name": "bruno"
+      },
+      "product_version": "< 3.2.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "24807043-b940-3edb-a209-2522b33b8c41",
+      "vendor": {
+        "name": "usebruno"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19355.json b/advisories/2026/04/EUVD-2026-19355.json
new file mode 100644
index 0000000000..f3f9100a93
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19355.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19355",
+  "enisaUuid": "848fbad2-a743-3614-8ca2-b8ac871a9ee1",
+  "description": "KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam). This shell command is executed via bash -c as a Kubernetes startup probe. An attacker who can create or update Model custom resources can inject arbitrary shell commands that execute inside model server pods. This vulnerability is fixed in 0.23.2.",
+  "datePublished": "Apr 6, 2026, 3:49:06 PM",
+  "dateUpdated": "Apr 6, 2026, 3:49:06 PM",
+  "baseScore": 0.0,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N",
+  "references": "https://github.com/kubeai-project/kubeai/security/advisories/GHSA-324q-cwx9-7crr\n",
+  "aliases": "GHSA-324q-cwx9-7crr\nCVE-2026-34940\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "5f3132bf-57bb-3aa8-8e18-10ad10ef15af",
+      "product": {
+        "name": "kubeai"
+      },
+      "product_version": "< 0.23.2"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "36ff03c4-7983-33a2-b982-9aea4eea3ced",
+      "vendor": {
+        "name": "kubeai-project"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19356.json b/advisories/2026/04/EUVD-2026-19356.json
new file mode 100644
index 0000000000..e6728064cb
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19356.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19356",
+  "enisaUuid": "cda34cf4-360e-3d7c-8fa8-3ed95b60ab87",
+  "description": "fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, the publicKeyPemMatcher regex in fast-jwt/src/crypto.js uses a ^ anchor that is defeated by any leading whitespace in the key string, re-enabling the exact same JWT algorithm confusion attack that CVE-2023-48223 patched.",
+  "datePublished": "Apr 6, 2026, 3:54:03 PM",
+  "dateUpdated": "Apr 6, 2026, 3:54:03 PM",
+  "baseScore": 9.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+  "references": "https://github.com/nearform/fast-jwt/security/advisories/GHSA-mvf2-f6gm-w987\nhttps://github.com/advisories/GHSA-c2ff-88x2-x9pg\n",
+  "aliases": "CVE-2026-34950\nGHSA-mvf2-f6gm-w987\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c4a77927-9b60-3985-8698-157fb7fbba6f",
+      "product": {
+        "name": "fast-jwt"
+      },
+      "product_version": "\u2264 6.1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "da22df1b-96cb-33ac-ae44-09a85205cc45",
+      "vendor": {
+        "name": "nearform"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19357.json b/advisories/2026/04/EUVD-2026-19357.json
new file mode 100644
index 0000000000..b25b00b593
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19357.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19357",
+  "enisaUuid": "b032391f-6fdd-325a-a30d-6c6a61a681cd",
+  "description": "Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains a reflected cross-site scripting vulnerability via the footerScripts parameter, which does not sanitize user-supplied input before rendering it in the page response. Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Workbench allows XSS Targeting Error Pages. This vulnerability is fixed in 65.0.0.",
+  "datePublished": "Apr 6, 2026, 3:58:45 PM",
+  "dateUpdated": "Apr 6, 2026, 3:58:45 PM",
+  "baseScore": 5.1,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
+  "references": "https://github.com/forceworkbench/forceworkbench/security/advisories/GHSA-j94x-h584-rjf9\n",
+  "aliases": "CVE-2026-34951\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "109007f0-e8ed-3904-9d86-3a780b6d670f",
+      "product": {
+        "name": "forceworkbench"
+      },
+      "product_version": "< 65.0.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "31d8904a-f49f-3ec0-9f71-102508f00957",
+      "vendor": {
+        "name": "forceworkbench"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19358.json b/advisories/2026/04/EUVD-2026-19358.json
new file mode 100644
index 0000000000..04f381f126
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19358.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19358",
+  "enisaUuid": "d7f0efc9-c00a-38c3-b79b-5541f8155ebb",
+  "description": "Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth provider callback flow places the refresh token directly into the redirect URL as a query parameter. Refresh tokens in URLs are logged in browser history, server access logs, HTTP Referer headers, and proxy/CDN logs. Note that the refresh token is one-time use and all of these leak vectors are on owned infrastructure or services integrated by the application developer. This vulnerability is fixed in 0.48.0.",
+  "datePublished": "Apr 6, 2026, 4:01:10 PM",
+  "dateUpdated": "Apr 6, 2026, 4:01:10 PM",
+  "baseScore": 2.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N",
+  "references": "https://github.com/nhost/nhost/security/advisories/GHSA-g2qj-prgh-4g9r\nhttps://docs.nhost.io/products/auth/pkce\n",
+  "aliases": "GHSA-g2qj-prgh-4g9r\nCVE-2026-34969\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "9fa05289-ab46-34a2-800d-283715e12503",
+      "product": {
+        "name": "nhost"
+      },
+      "product_version": "< 0.48.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "beb98212-90f0-3a6b-8d50-ee2e0bb8533c",
+      "vendor": {
+        "name": "nhost"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19359.json b/advisories/2026/04/EUVD-2026-19359.json
new file mode 100644
index 0000000000..7ee88e003b
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19359.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19359",
+  "enisaUuid": "33f05938-c1ca-3eb2-b3b1-36f2f8d50199",
+  "description": "Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied values for from.name, subject, custom header keys/values, and attachment filenames were interpolated directly into raw MIME messages without sanitization. An authenticated API user could inject arbitrary email headers (e.g. Bcc, Reply-To) by embedding carriage return/line feed characters in these fields, enabling silent email forwarding, reply redirection, or sender spoofing. The fix adds input validation at the schema level to reject any of these fields containing \\r or \\n characters, consistent with the existing validation already applied to the contentId field. This vulnerability is fixed in 0.8.0.",
+  "datePublished": "Apr 6, 2026, 4:10:05 PM",
+  "dateUpdated": "Apr 6, 2026, 4:10:05 PM",
+  "baseScore": 8.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
+  "references": "https://github.com/useplunk/plunk/security/advisories/GHSA-2mvm-rg5v-7hfq\n",
+  "aliases": "CVE-2026-34975\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ae948dda-e570-3268-9107-6fd0991496dc",
+      "product": {
+        "name": "plunk"
+      },
+      "product_version": "< 0.8.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "e49ba494-dc5e-3d6a-8cfb-ecd26d78c15f",
+      "vendor": {
+        "name": "useplunk"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19360.json b/advisories/2026/04/EUVD-2026-19360.json
new file mode 100644
index 0000000000..b10eeb5501
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19360.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19360",
+  "enisaUuid": "09ca97eb-1d45-3596-a197-f576f77f93d2",
+  "description": "Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from the authorization middleware config (admin.go), making it completely unauthenticated. Unlike the similar restore mutation which requires Guardian-of-Galaxy authentication, restoreTenant executes with zero middleware. This mutation accepts attacker-controlled backup source URLs (including file:// for local filesystem access), S3/MinIO credentials, encryption key file paths, and Vault credential file paths. An unauthenticated attacker can overwrite the entire database, read server-side files, and perform SSRF. This vulnerability is fixed in 25.3.1.",
+  "datePublished": "Apr 6, 2026, 4:12:43 PM",
+  "dateUpdated": "Apr 6, 2026, 4:12:43 PM",
+  "baseScore": 10.0,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+  "references": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-p5rh-vmhp-gvcw\nhttps://github.com/dgraph-io/dgraph/commit/b15c87e9353e36618bf8e0df3bd945c0ce7105ef\nhttps://github.com/dgraph-io/dgraph/releases/tag/v25.3.1\n",
+  "aliases": "CVE-2026-34976\nGHSA-p5rh-vmhp-gvcw\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "22ec4c1b-c0b5-3cb0-ac45-6379ffae84cf",
+      "product": {
+        "name": "dgraph"
+      },
+      "product_version": "< 25.3.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "c79dd68b-7dac-3ede-8250-50ebc9e3bf75",
+      "vendor": {
+        "name": "dgraph-io"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19361.json b/advisories/2026/04/EUVD-2026-19361.json
new file mode 100644
index 0000000000..e730e114a6
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19361.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19361",
+  "enisaUuid": "04f6d15b-4058-3b58-a371-2e221e670b97",
+  "description": "Aperi'Solve is an open-source steganalysis web platform. Prior to 3.2.1, when uploading a JPEG, a user can specify an optional password to accompany the JPEG. This password is then directly passed into an expect command, which is then subsequently passed into a bash -c command, without any form of sanitization or validation. An unauthenticated attacker can achieve root-level RCE inside the worker container with a single HTTP request, enabling full read/write access to all user-uploaded images, analysis results, and plaintext steganography passwords stored on disk. Because the container shares a Docker network with PostgreSQL and Redis (no authentication on either), the attacker can pivot to dump the entire database or manipulate the job queue to poison results for other users. If Docker socket mounting or host volume mounts are present, this could escalate to full host compromise. This would also include defacement of the website itself. This vulnerability is fixed in 3.2.1.",
+  "datePublished": "Apr 6, 2026, 4:16:35 PM",
+  "dateUpdated": "Apr 6, 2026, 4:16:35 PM",
+  "baseScore": 9.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L",
+  "references": "https://github.com/Zeecka/AperiSolve/security/advisories/GHSA-8r22-62p7-9jrp\nhttps://github.com/Zeecka/AperiSolve/pull/195\nhttps://github.com/Zeecka/AperiSolve/commit/0193ca4a7d8ae9d6ba6cde82d37a6f94953463b4\nhttps://github.com/Zeecka/AperiSolve/releases/tag/3.2.1\n",
+  "aliases": "CVE-2026-34977\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "efa680e9-0116-374e-ab57-5236ed2c0cd3",
+      "product": {
+        "name": "AperiSolve"
+      },
+      "product_version": "< 3.2.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "4c749339-0ab8-34fc-8426-baafe10cc2bf",
+      "vendor": {
+        "name": "Zeecka"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19362.json b/advisories/2026/04/EUVD-2026-19362.json
new file mode 100644
index 0000000000..588d535a81
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19362.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19362",
+  "enisaUuid": "9e04fb52-bb2a-303c-b0b2-e940ac581cab",
+  "description": "The whisperX API is a tool for enhancing and analyzing audio content. From 0.3.1 to 0.5.0, FileService.download_from_url() in app/services/file_service.py calls requests.get(url) with zero URL validation. The file extension check occurs AFTER the HTTP request is already made, and can be bypassed by appending .mp3 to any internal URL. The /speech-to-text-url endpoint is unauthenticated. This vulnerability is fixed in 0.6.0.",
+  "datePublished": "Apr 6, 2026, 4:19:13 PM",
+  "dateUpdated": "Apr 6, 2026, 4:19:13 PM",
+  "baseScore": 5.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
+  "references": "https://github.com/pavelzbornik/whisperX-FastAPI/security/advisories/GHSA-6rc7-r867-c635\nhttps://github.com/pavelzbornik/whisperX-FastAPI/issues/256\nhttps://github.com/pavelzbornik/whisperX-FastAPI/commit/ef78fe2001deede5354031e4200d41c6a7e8cbfc\n",
+  "aliases": "CVE-2026-34981\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "f7214153-b859-377d-afc6-548314aef0ab",
+      "product": {
+        "name": "whisperX-FastAPI"
+      },
+      "product_version": "0.3.1, < 0.6.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "0752ae2d-ae5a-36bf-a68b-7cf10ca3cbcc",
+      "vendor": {
+        "name": "pavelzbornik"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19363.json b/advisories/2026/04/EUVD-2026-19363.json
new file mode 100644
index 0000000000..ed98334d00
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19363.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-19363",
+  "enisaUuid": "f08d2daa-0371-357a-8e80-ad343525efd5",
+  "description": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.",
+  "datePublished": "Apr 6, 2026, 4:22:45 PM",
+  "dateUpdated": "Apr 6, 2026, 4:22:45 PM",
+  "baseScore": 7.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+  "references": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\nhttps://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants\n",
+  "aliases": "GHSA-78h2-9frx-2jm8\nCVE-2026-34986\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "2cd4fef0-9b31-3776-a849-a9da66ae64bb",
+      "product": {
+        "name": "go-jose"
+      },
+      "product_version": "4.0.0, < 4.1.4"
+    },
+    {
+      "id": "8af055e8-0292-3e53-af71-c5e0fc3a3b53",
+      "product": {
+        "name": "go-jose"
+      },
+      "product_version": "< 3.0.5"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "fc23a5ae-d0b2-3591-8813-835ee7dd4d80",
+      "vendor": {
+        "name": "go-jose"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19364.json b/advisories/2026/04/EUVD-2026-19364.json
new file mode 100644
index 0000000000..3c869dbd49
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19364.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19364",
+  "enisaUuid": "f58f72e6-c712-332b-a8d0-2db3e0cdb29d",
+  "description": "A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionality of the file /complaints.sql of the component SQL Database Backup File Handler. The manipulation results in insecure storage of sensitive information. The attack may be performed from remote. The exploit is now public and may be used.",
+  "datePublished": "Apr 6, 2026, 6:33:08 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:08 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355489\nhttps://vuldb.com/vuln/355489/cti\nhttps://vuldb.com/submit/786322\nhttps://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20FIR%20System%20PHP%20Exposed%20Database%20Backup.md\nhttps://code-projects.org/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5666\n",
+  "aliases": "CVE-2026-5666\nGHSA-jhff-3rr5-hh56\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "dc350aae-3065-32ad-b734-1ec7a37470f0",
+      "product": {
+        "name": "Online FIR System"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "e84c7c35-ac8b-30f5-b0a9-6b7c488d08e8",
+      "vendor": {
+        "name": "code-projects"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19365.json b/advisories/2026/04/EUVD-2026-19365.json
new file mode 100644
index 0000000000..57bfdddc58
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19365.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19365",
+  "enisaUuid": "5aec5b1b-4911-3765-99fc-52d6fb4eb25f",
+  "description": "A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown part of the file /admin/Add%20notice/add%20notice.php. This manipulation of the argument $_SERVER['PHP_SELF'] causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 6:33:09 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:09 PM",
+  "baseScore": 4.8,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355490\nhttps://vuldb.com/vuln/355490/cti\nhttps://vuldb.com/submit/785895\nhttps://github.com/Cyber-III/Student-Management-System/issues/239\nhttps://github.com/Cyber-III/Student-Management-System/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5668\n",
+  "aliases": "GHSA-v9r5-qwpw-xpgf\nCVE-2026-5668\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "e0676836-fa9c-3054-bc92-a36f53a5179a",
+      "product": {
+        "name": "Student-Management-System"
+      },
+      "product_version": "1a938fa61e9f735078e9b291d2e6215b4942af3f"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "506e0e7d-752a-39cf-bc8a-b363d8740a05",
+      "vendor": {
+        "name": "Cyber-III"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19374.json b/advisories/2026/04/EUVD-2026-19374.json
new file mode 100644
index 0000000000..b0800f4009
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19374.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19374",
+  "enisaUuid": "92ee79c4-62d6-38b4-afc6-4eeda0052341",
+  "description": "CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM XSS",
+  "datePublished": "Apr 6, 2026, 5:53:02 PM",
+  "dateUpdated": "Apr 6, 2026, 5:53:02 PM",
+  "baseScore": 7.2,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-5ghq-42rg-769x\nhttps://github.com/ci4-cms-erp/ci4ms/releases/tag/0.31.2.0\n",
+  "aliases": "CVE-2026-35035\nGHSA-5ghq-42rg-769x\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "20be0720-b712-37db-8cd8-47a1a2e73033",
+      "product": {
+        "name": "ci4ms"
+      },
+      "product_version": "< 0.31.2.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "8aa3eb7f-75c9-34b8-afdc-355e2f53118a",
+      "vendor": {
+        "name": "ci4-cms-erp"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19388.json b/advisories/2026/04/EUVD-2026-19388.json
new file mode 100644
index 0000000000..b555086792
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19388.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19388",
+  "enisaUuid": "ed5e44e2-5582-3279-9b0f-be53d33564c3",
+  "description": "Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the PUT /api/recipe/batch_update/ endpoint in Tandoor Recipes allows any authenticated user within a Space to modify any recipe in that Space, including recipes marked as private by other users. This bypasses all object-level authorization checks enforced on standard single-recipe endpoints (PUT /api/recipe/{id}/), enabling forced exposure of private recipes, unauthorized self-grant of access via the shared list, and metadata tampering. This vulnerability is fixed in 2.6.4.",
+  "datePublished": "Apr 6, 2026, 5:17:57 PM",
+  "dateUpdated": "Apr 6, 2026, 5:17:57 PM",
+  "baseScore": 8.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
+  "references": "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-v8x3-w674-55p5\nhttps://github.com/TandoorRecipes/recipes/releases/tag/2.6.4\n",
+  "aliases": "CVE-2026-35045\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0d79db0b-3983-3882-a222-19f4d14f5ff1",
+      "product": {
+        "name": "Recipes"
+      },
+      "product_version": "< 2.6.4"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "f6ecb2e1-03e4-3885-a71b-ebae3aea52ab",
+      "vendor": {
+        "name": "TandoorRecipes"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19390.json b/advisories/2026/04/EUVD-2026-19390.json
new file mode 100644
index 0000000000..ee2a2e8c7b
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19390.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19390",
+  "enisaUuid": "aabfb4a9-d2e1-362d-9b38-33e448a08cd9",
+  "description": "Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, Tandoor Recipes allows authenticated users to inject arbitrary <style> tags into recipe step instructions. The bleach.clean() sanitizer explicitly whitelists the <style> tag, causing the backend to persist and serve unsanitized CSS payloads via the API. Any client consuming instructions_markdown from the API and rendering it as HTML without additional sanitization will execute attacker-controlled CSS \u2014 enabling UI redressing, phishing overlays, visual defacement, and CSS-based data exfiltration. This vulnerability is fixed in 2.6.4.",
+  "datePublished": "Apr 6, 2026, 5:20:00 PM",
+  "dateUpdated": "Apr 6, 2026, 5:20:00 PM",
+  "baseScore": 5.4,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+  "references": "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-9hhh-g2fc-r8x2\nhttps://github.com/TandoorRecipes/recipes/releases/tag/2.6.4\n",
+  "aliases": "CVE-2026-35046\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "a7614393-395a-3f9b-929e-d137a74a42be",
+      "product": {
+        "name": "Recipes"
+      },
+      "product_version": "< 2.6.4"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "8e52ad73-eb1b-3a08-b59b-da42939260e3",
+      "vendor": {
+        "name": "TandoorRecipes"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19392.json b/advisories/2026/04/EUVD-2026-19392.json
new file mode 100644
index 0000000000..553e0e296f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19392.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19392",
+  "enisaUuid": "7155ba6b-7871-3172-bfe8-bedf617abbf9",
+  "description": "Brave CMS is an open-source CMS. Prior to 2.0.6, an Unrestricted File Upload vulnerability in the CKEditor endpoint allows attackers to upload arbitrary files, including executable scripts. This may lead to Remote Code Execution (RCE) on the server, potentially resulting in full system compromise, data exfiltration, or service disruption. All users running affected versions of BraveCMS are impacted. This vulnerability is fixed in 2.0.6.",
+  "datePublished": "Apr 6, 2026, 5:25:39 PM",
+  "dateUpdated": "Apr 6, 2026, 5:25:39 PM",
+  "baseScore": 9.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://github.com/Ajax30/BraveCMS-2.0/security/advisories/GHSA-9rcc-w59j-965v\nhttps://github.com/Ajax30/BraveCMS-2.0/pull/122\nhttps://github.com/Ajax30/BraveCMS-2.0/commit/058ee4ed7c2b39d540af8274024afcbc9532aa83\n",
+  "aliases": "CVE-2026-35047\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "15eab703-e9d6-3028-a1bf-c8682d0c1adc",
+      "product": {
+        "name": "BraveCMS-2.0"
+      },
+      "product_version": "< 2.0.6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "5c94eacf-977f-3bee-8655-812b2a0ae513",
+      "vendor": {
+        "name": "Ajax30"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19396.json b/advisories/2026/04/EUVD-2026-19396.json
new file mode 100644
index 0000000000..08cefe58d7
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19396.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19396",
+  "enisaUuid": "97de4bcc-f2be-3655-9056-74c051e1f362",
+  "description": "A vulnerability has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This vulnerability affects unknown code of the file /login.php of the component Parameter Handler. Such manipulation of the argument Password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 6:33:09 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:09 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355491\nhttps://vuldb.com/vuln/355491/cti\nhttps://vuldb.com/submit/785942\nhttps://github.com/Cyber-III/Student-Management-System/issues/240\nhttps://github.com/Cyber-III/Student-Management-System/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5669\n",
+  "aliases": "GHSA-2386-h756-fq9w\nCVE-2026-5669\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "39ca7b05-4988-3a44-80ef-b6344b54b43b",
+      "product": {
+        "name": "Student-Management-System"
+      },
+      "product_version": "1a938fa61e9f735078e9b291d2e6215b4942af3f"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "64578a02-cc3c-31bf-a93a-35384dfced25",
+      "vendor": {
+        "name": "Cyber-III"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19398.json b/advisories/2026/04/EUVD-2026-19398.json
new file mode 100644
index 0000000000..7c0abfbd58
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19398.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19398",
+  "enisaUuid": "5c4da943-a1fd-3e49-baf5-53ee5b08151c",
+  "description": "A vulnerability was found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This issue affects the function move_uploaded_file of the file /AssignmentSection/submission/upload.php. Performing a manipulation of the argument File results in unrestricted upload. The attack can be initiated remotely. The exploit has been made public and could be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 6:33:09 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:09 PM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355492\nhttps://vuldb.com/vuln/355492/cti\nhttps://vuldb.com/submit/786022\nhttps://github.com/Cyber-III/Student-Management-System/issues/241\nhttps://github.com/Cyber-III/Student-Management-System/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5670\n",
+  "aliases": "CVE-2026-5670\nGHSA-2x66-2279-rwjv\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "5e98b602-7b68-3866-b4c2-6dd7d54f18a6",
+      "product": {
+        "name": "Student-Management-System"
+      },
+      "product_version": "1a938fa61e9f735078e9b291d2e6215b4942af3f"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "a74657d7-eaaa-3ff5-969d-9f9b4a9da16a",
+      "vendor": {
+        "name": "Cyber-III"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19400.json b/advisories/2026/04/EUVD-2026-19400.json
new file mode 100644
index 0000000000..0a4a5d0a0f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19400.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19400",
+  "enisaUuid": "d0895b5f-fb67-3894-9370-b7cd2f520e2f",
+  "description": "A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. Impacted is an unknown function of the file /admin/class%20schedule/delete_batch.php of the component Class Schedule Deletion Endpoint. Executing a manipulation of the argument batch can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.",
+  "datePublished": "Apr 6, 2026, 6:33:09 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:09 PM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355493\nhttps://vuldb.com/vuln/355493/cti\nhttps://vuldb.com/submit/786028\nhttps://github.com/Cyber-III/Student-Management-System/issues/242\nhttps://github.com/Cyber-III/Student-Management-System/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5671\n",
+  "aliases": "CVE-2026-5671\nGHSA-wx99-4rxc-gxhv\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "7813b3cd-f306-3592-be3d-a8669d717282",
+      "product": {
+        "name": "Student-Management-System"
+      },
+      "product_version": "1a938fa61e9f735078e9b291d2e6215b4942af3f"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "51f26013-d149-379d-b8c9-65bb470bdbe1",
+      "vendor": {
+        "name": "Cyber-III"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19402.json b/advisories/2026/04/EUVD-2026-19402.json
new file mode 100644
index 0000000000..254613987f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19402.json
@@ -0,0 +1,50 @@
+{
+  "id": "EUVD-2026-19402",
+  "enisaUuid": "d6f7006f-70b9-362a-bb16-848ce8fd61aa",
+  "description": "In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 0.0,
+  "references": "https://source.android.com/security/bulletin/2026-04-01\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-0049\nhttps://source.android.com/docs/security/bulletin/2026/2026-04-01\n",
+  "aliases": "CVE-2026-0049\nGHSA-hxfh-7372-q4ff\n",
+  "assigner": "google_android",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "49f4a5b7-80fe-3244-8173-f0a46ccbf522",
+      "product": {
+        "name": "Android"
+      },
+      "product_version": "15"
+    },
+    {
+      "id": "c5661b1f-ad44-3c47-8515-a260ef537ec5",
+      "product": {
+        "name": "Android"
+      },
+      "product_version": "16"
+    },
+    {
+      "id": "d22d592e-66e2-37d8-a91e-a5b4b19b8c9d",
+      "product": {
+        "name": "Android"
+      },
+      "product_version": "14"
+    },
+    {
+      "id": "f681918f-32ef-3ed9-842a-6d8104d82fef",
+      "product": {
+        "name": "Android"
+      },
+      "product_version": "16-qpr2"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "56288d93-bcd8-39b1-8323-7fd06bdf4817",
+      "vendor": {
+        "name": "Google"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19404.json b/advisories/2026/04/EUVD-2026-19404.json
new file mode 100644
index 0000000000..762984b1f5
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19404.json
@@ -0,0 +1,29 @@
+{
+  "id": "EUVD-2026-19404",
+  "enisaUuid": "8ef37bf2-3651-3398-b24a-413e082383f9",
+  "description": "An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debug interface. An attacker with physical access can connect to the UART interface and obtain sensitive information from the serial console without authentication.",
+  "datePublished": "Apr 6, 2026, 6:33:09 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:09 PM",
+  "baseScore": 0.0,
+  "references": "http://aziot.com\nhttps://github.com/dumbermore/tuya/blob/main/README.md\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-30613\n",
+  "aliases": "CVE-2026-30613\nGHSA-gmxc-m4rh-7pmv\n",
+  "assigner": "mitre",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "3bf4c69e-658a-36b0-96e4-2778e30b130a",
+      "product": {
+        "name": "n/a"
+      },
+      "product_version": "n/a"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "84fbd3f7-cf48-3b5e-85dc-b4d7772c1716",
+      "vendor": {
+        "name": "n/a"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19406.json b/advisories/2026/04/EUVD-2026-19406.json
new file mode 100644
index 0000000000..b8b9050a9e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19406.json
@@ -0,0 +1,21 @@
+{
+  "id": "EUVD-2026-19406",
+  "enisaUuid": "4299f70c-a63f-36f1-8461-e2843c14a274",
+  "description": "Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 0.0,
+  "references": "https://github.com/etcd-io/bbolt/pull/1171/changes/386d5b69785937d1aa20cb25c8439404cf398143\nhttps://github.com/golang/vulndb/issues/4923\nhttps://pkg.go.dev/vuln/GO-2026-4923\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-33817\n",
+  "aliases": "CVE-2026-33817\nGHSA-6jwv-w5xf-7j27\n",
+  "assigner": "Go",
+  "epss": 0.0,
+  "enisaIdProduct": [],
+  "enisaIdVendor": [
+    {
+      "id": "5cdf6424-9aee-31fb-bdd5-e0e7fdf9a12d",
+      "vendor": {
+        "name": "go.etcd.io/bbolt"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19408.json b/advisories/2026/04/EUVD-2026-19408.json
new file mode 100644
index 0000000000..d8b7951826
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19408.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19408",
+  "enisaUuid": "8b02e09c-98e1-3a1d-bfaa-c13cc8649428",
+  "description": "text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in \"py\" format and in the app root directory. This allows to overwrite python files, for instance the \"download-model.py\" file could be overwritten. Then, this python file can be triggered to get executed from \"Model\" menu when requesting to download a new model. This vulnerability is fixed in 4.1.1.",
+  "datePublished": "Apr 6, 2026, 5:30:20 PM",
+  "dateUpdated": "Apr 6, 2026, 5:30:20 PM",
+  "baseScore": 9.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
+  "references": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jg96-p5p6-q3cv\n",
+  "aliases": "CVE-2026-35050\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "76d61ce7-3a4f-3fd9-a386-0acd75985824",
+      "product": {
+        "name": "text-generation-webui"
+      },
+      "product_version": "< 4.1.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "956a72ae-2954-3954-974e-b8bedefdba4d",
+      "vendor": {
+        "name": "oobabooga"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19412.json b/advisories/2026/04/EUVD-2026-19412.json
new file mode 100644
index 0000000000..0cd2f46d6f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19412.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19412",
+  "enisaUuid": "2c1a01a3-a2be-38b7-879a-251658e8ebcc",
+  "description": "Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestricted file upload vulnerability exists in the CKEditor upload functionality. It is found in app/Http/Controllers/Dashboard/CkEditorController.php within the ckupload method. The method fails to validate uploaded file types and relies entirely on user input. This allows an authenticated user to upload executable PHP scripts and gain Remote Code Execution. This vulnerability is fixed in 2.0.6.",
+  "datePublished": "Apr 6, 2026, 5:33:33 PM",
+  "dateUpdated": "Apr 6, 2026, 5:33:33 PM",
+  "baseScore": 8.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/Ajax30/BraveCMS-2.0/security/advisories/GHSA-2j4q-6p52-4rhw\n",
+  "aliases": "CVE-2026-35164\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c9ee1ecc-2c80-3e0c-a3d7-b34c56569940",
+      "product": {
+        "name": "BraveCMS-2.0"
+      },
+      "product_version": "< 2.0.6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "6db2fba5-fea5-3d73-bb60-04268ea82fd0",
+      "vendor": {
+        "name": "Ajax30"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19416.json b/advisories/2026/04/EUVD-2026-19416.json
new file mode 100644
index 0000000000..0ecf7a35c0
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19416.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19416",
+  "enisaUuid": "270dd801-d875-324b-af37-e793a5dbbf5f",
+  "description": "Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_path() method in kedro/io/core.py constructs filesystem paths by directly interpolating user-supplied version strings without sanitization. Because version strings are used as path components, traversal sequences such as ../ are preserved and can escape the intended versioned dataset directory.\nThis is reachable through multiple entry points: catalog.load(..., version=...), DataCatalog.from_config(..., load_versions=...), and the CLI via kedro run --load-versions=dataset:../../../secrets. An attacker who can influence the version string can force Kedro to load files from outside the intended version directory, enabling unauthorized file reads, data poisoning, or cross-tenant data access in shared environments. This vulnerability is fixed in 1.3.0.",
+  "datePublished": "Apr 6, 2026, 5:43:21 PM",
+  "dateUpdated": "Apr 6, 2026, 5:43:21 PM",
+  "baseScore": 7.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
+  "references": "https://github.com/kedro-org/kedro/security/advisories/GHSA-6326-w46w-ppjw\nhttps://github.com/kedro-org/kedro/pull/5442\n",
+  "aliases": "CVE-2026-35167\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "610ffde8-55a5-370d-adfe-5b595626c228",
+      "product": {
+        "name": "kedro"
+      },
+      "product_version": "< 1.3.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "6e3bec05-18c0-3cc4-ae71-24308112a976",
+      "vendor": {
+        "name": "kedro-org"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19420.json b/advisories/2026/04/EUVD-2026-19420.json
new file mode 100644
index 0000000000..cdefbb703e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19420.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19420",
+  "enisaUuid": "3c341a8f-e7db-380e-9c6a-a5a8e98dbdaf",
+  "description": "Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions (Edit Post, Edit Draft, Edit Own Post, Edit Own Draft) to modify posts they do not own and do not have permission to edit. By passing internal class properties such as id into the post_attributes payload, an attacker can alter the object being instantiated. As a result, further actions are performed on another user\u2019s post rather than the attacker\u2019s own post, effectively enabling post takeover. This vulnerability is fixed in 2026.01.",
+  "datePublished": "Apr 6, 2026, 5:48:52 PM",
+  "dateUpdated": "Apr 6, 2026, 5:48:52 PM",
+  "baseScore": 6.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
+  "references": "https://github.com/xenocrat/chyrp-lite/security/advisories/GHSA-8c3h-rh2j-fxr9\n",
+  "aliases": "CVE-2026-35173\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "28545782-8bb7-3922-b9fa-3cf998c5c986",
+      "product": {
+        "name": "chyrp-lite"
+      },
+      "product_version": "< 2026.01"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "8fd0cf9b-4774-3042-a0fd-d4a0bf074265",
+      "vendor": {
+        "name": "xenocrat"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19422.json b/advisories/2026/04/EUVD-2026-19422.json
new file mode 100644
index 0000000000..62aff75048
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19422.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19422",
+  "enisaUuid": "a78bbead-67de-3745-8c5b-e1655f5bafab",
+  "description": "Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, a path traversal vulnerability exists in the administration console that allows an administrator or a user with Change Settings permission to change the uploads path to any folder. This vulnerability allows the user to download any file on the server, including config.json.php with database credentials and overwrite critical system files, leading to remote code execution. This vulnerability is fixed in 2026.01.",
+  "datePublished": "Apr 6, 2026, 5:50:04 PM",
+  "dateUpdated": "Apr 6, 2026, 5:50:04 PM",
+  "baseScore": 9.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
+  "references": "https://github.com/xenocrat/chyrp-lite/security/advisories/GHSA-p6pf-2grm-8257\n",
+  "aliases": "CVE-2026-35174\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "dec4b72f-a611-3298-a8ea-79e8428c174e",
+      "product": {
+        "name": "chyrp-lite"
+      },
+      "product_version": "< 2026.01"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "db9e2213-9f07-39a1-a608-65bed6aaefa8",
+      "vendor": {
+        "name": "xenocrat"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19426.json b/advisories/2026/04/EUVD-2026-19426.json
new file mode 100644
index 0000000000..b302cdfa0a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19426.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19426",
+  "enisaUuid": "fbc6a4b4-f8ac-3800-806c-f65db4406a67",
+  "description": "Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.",
+  "datePublished": "Apr 6, 2026, 5:54:42 PM",
+  "dateUpdated": "Apr 6, 2026, 5:54:42 PM",
+  "baseScore": 4.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L",
+  "references": "https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24\n",
+  "aliases": "CVE-2026-35177\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "5f7fe53b-1e53-3c78-959a-a9f4bf1a0b69",
+      "product": {
+        "name": "vim"
+      },
+      "product_version": "< 9.2.0280"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "bdd39aaa-6c36-3d8d-bc5c-33265d1eedc3",
+      "vendor": {
+        "name": "vim"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19430.json b/advisories/2026/04/EUVD-2026-19430.json
new file mode 100644
index 0000000000..88aab22109
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19430.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19430",
+  "enisaUuid": "0206113a-1207-340d-b80f-d26d1261c40a",
+  "description": "A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /edit-category.php of the component Parameter Handler. The manipulation of the argument cat_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "datePublished": "Apr 6, 2026, 6:33:09 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:09 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355500\nhttps://vuldb.com/vuln/355500/cti\nhttps://vuldb.com/submit/792389\nhttps://github.com/Czhan1156/Czhan/issues/1\nhttps://code-projects.org/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5672\n",
+  "aliases": "CVE-2026-5672\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "e5fdb540-58a0-3d6f-86b4-be9c9834331f",
+      "product": {
+        "name": "Simple IT Discussion Forum"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "bf193248-393a-31dc-98ab-f412a4bcc903",
+      "vendor": {
+        "name": "code-projects"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19432.json b/advisories/2026/04/EUVD-2026-19432.json
new file mode 100644
index 0000000000..13f3e8696b
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19432.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19432",
+  "enisaUuid": "97873129-0285-3a6b-951a-97fff6a4df8f",
+  "description": "A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /borrowed_tool.php of the component Parameter Handler. The manipulation of the argument emp results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.",
+  "datePublished": "Apr 6, 2026, 6:33:09 PM",
+  "dateUpdated": "Apr 6, 2026, 6:33:09 PM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355501\nhttps://vuldb.com/vuln/355501/cti\nhttps://vuldb.com/submit/792392\nhttps://github.com/1234234215235/report/issues/1\nhttps://itsourcecode.com/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5675\n",
+  "aliases": "CVE-2026-5675\nGHSA-wfv2-j65x-gcwf\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ba710f34-f91a-33c5-a249-8bc8aed5ffbd",
+      "product": {
+        "name": "Construction Management System"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "a118944a-1065-370d-9122-7b2205d9a897",
+      "vendor": {
+        "name": "itsourcecode"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19434.json b/advisories/2026/04/EUVD-2026-19434.json
new file mode 100644
index 0000000000..d76087d929
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19434.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19434",
+  "enisaUuid": "afe961a2-dc85-3227-84b3-84df74ec2abb",
+  "description": "A vulnerability was identified in Totolink A8000R 5.9c.681_B20180413. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument langType leads to missing authentication. The attack can be launched remotely. The exploit is publicly available and might be used.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355503\nhttps://vuldb.com/vuln/355503/cti\nhttps://vuldb.com/submit/792433\nhttps://github.com/skeetabc/CVE-TOTOLINK-A800R/blob/main/vuln1_auth_bypass.md\nhttps://www.totolink.net/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5676\n",
+  "aliases": "CVE-2026-5676\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "9ac11144-e43f-34c2-ad83-cf81843d480b",
+      "product": {
+        "name": "A8000R"
+      },
+      "product_version": "5.9c.681_B20180413"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "22133a1f-ff62-30fd-9d24-cc877e86f04d",
+      "vendor": {
+        "name": "Totolink"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19436.json b/advisories/2026/04/EUVD-2026-19436.json
new file mode 100644
index 0000000000..c3b834e947
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19436.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19436",
+  "enisaUuid": "fb1aa2ba-8635-3154-a4b0-9318a6b81e2b",
+  "description": "A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument resetFlags results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355504\nhttps://vuldb.com/vuln/355504/cti\nhttps://vuldb.com/submit/792606\nhttps://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_184/README.md\nhttps://www.totolink.net/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5677\n",
+  "aliases": "CVE-2026-5677\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "a9a37f4a-826c-37a8-b4f7-a351938fa523",
+      "product": {
+        "name": "A7100RU"
+      },
+      "product_version": "7.4cu.2313_b20191024"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "b8eaa70e-8b26-35ab-85e7-0ebf33e48ec8",
+      "vendor": {
+        "name": "Totolink"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19438.json b/advisories/2026/04/EUVD-2026-19438.json
new file mode 100644
index 0000000000..62dd918687
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19438.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-19438",
+  "enisaUuid": "c4223b5f-c453-32b5-b83b-00e93a5c90b6",
+  "description": "Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the command lookup helper and deep-link terminal launcher that allows local attackers to execute arbitrary commands by manipulating the TERMINAL environment variable. Attackers can inject shell metacharacters into the TERMINAL variable which are interpreted by /bin/sh when the command lookup helper constructs and executes shell commands with shell=true. The vulnerability can be triggered during normal CLI execution as well as via the deep-link handler path, resulting in arbitrary command execution with the privileges of the user running the CLI.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 8.6,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://phoenix.security/critical-ci-cd-nightmare-3-command-injection-flaws-in-claude-code-cli-allow-credential-exfiltration/\nhttps://www.vulncheck.com/advisories/anthropic-claude-code-agent-sdk-os-command-injection-via-terminal-environment-variable\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35020\n",
+  "aliases": "CVE-2026-35020\n",
+  "assigner": "VulnCheck",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "483c28c4-ae5b-3550-8ac3-1ff4ccc30d0f",
+      "product": {
+        "name": "Claude Agent SDK for Python"
+      },
+      "product_version": "0 \u22640.1.55"
+    },
+    {
+      "id": "5616e8c8-e40a-371f-86fc-78e3faf02f1d",
+      "product": {
+        "name": "Claude Code"
+      },
+      "product_version": "0 \u22642.1.91"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "72f7278e-2631-3f09-9617-ef867e4d794e",
+      "vendor": {
+        "name": "Anthropic"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19440.json b/advisories/2026/04/EUVD-2026-19440.json
new file mode 100644
index 0000000000..55dc35dd68
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19440.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-19440",
+  "enisaUuid": "80730d2a-cd91-3088-b252-cdc2bf06187c",
+  "description": "Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the prompt editor invocation utility that allows attackers to execute arbitrary commands by crafting malicious file paths. Attackers can inject shell metacharacters such as $() or backtick expressions into file paths that are interpolated into shell commands executed via execSync. Although the file path is wrapped in double quotes, POSIX shell semantics (POSIX \u00a72.2.3) do not prevent command substitution within double quotes, allowing injected expressions to be evaluated and resulting in arbitrary command execution with the privileges of the user running the CLI.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 8.4,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://phoenix.security/critical-ci-cd-nightmare-3-command-injection-flaws-in-claude-code-cli-allow-credential-exfiltration/\nhttps://www.vulncheck.com/advisories/anthropic-claude-code-agent-sdk-os-command-injection-via-prompteditor-ts\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35021\n",
+  "aliases": "CVE-2026-35021\nGHSA-72p2-f44p-v65f\n",
+  "assigner": "VulnCheck",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "4151fd1f-c312-3390-a98b-d014e0ebeb37",
+      "product": {
+        "name": "Claude Code"
+      },
+      "product_version": "0 \u22642.1.91"
+    },
+    {
+      "id": "508c041f-48c9-368f-ab32-a0c0856e16b2",
+      "product": {
+        "name": "Claude Agent SDK for Python"
+      },
+      "product_version": "0 \u22640.1.55"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "c177e861-f671-3a36-a60b-354f9f278ddb",
+      "vendor": {
+        "name": "Anthropic"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19442.json b/advisories/2026/04/EUVD-2026-19442.json
new file mode 100644
index 0000000000..848cdee72c
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19442.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-19442",
+  "enisaUuid": "c2712b9c-03f1-3f6e-8523-4300520b296d",
+  "description": "Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in authentication helper execution where helper configuration values are executed using shell=true without input validation. Attackers who can influence authentication settings can inject shell metacharacters through parameters like apiKeyHelper, awsAuthRefresh, awsCredentialExport, and gcpAuthRefresh to execute arbitrary commands with the privileges of the user or automation environment, enabling credential theft and environment variable exfiltration.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 9.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://phoenix.security/critical-ci-cd-nightmare-3-command-injection-flaws-in-claude-code-cli-allow-credential-exfiltration/\nhttps://www.vulncheck.com/advisories/anthropic-claude-code-agent-sdk-os-command-injection-via-authentication-helper\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35022\n",
+  "aliases": "GHSA-479q-mw77-pmr5\nCVE-2026-35022\n",
+  "assigner": "VulnCheck",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0c91b90f-7f93-3bec-8e4d-cd0ea6d80af1",
+      "product": {
+        "name": "Claude Agent SDK for Python"
+      },
+      "product_version": "0 \u22640.1.55"
+    },
+    {
+      "id": "852aca61-b0ee-36d6-8db6-f1da24b6c9fd",
+      "product": {
+        "name": "Claude Code"
+      },
+      "product_version": "0 \u22642.1.91"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "b322319f-ce78-32ba-baae-ef1e74bb4c80",
+      "vendor": {
+        "name": "Anthropic"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19444.json b/advisories/2026/04/EUVD-2026-19444.json
new file mode 100644
index 0000000000..0e687a9fbc
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19444.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19444",
+  "enisaUuid": "62cabe4a-f14f-32e3-9e3f-3030c9310792",
+  "description": "openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in BitParser::parseHeader() that allows out-of-bounds heap memory access when parsing a crafted .bit file. No FPGA hardware is required to trigger this vulnerability.",
+  "datePublished": "Apr 6, 2026, 6:59:04 PM",
+  "dateUpdated": "Apr 6, 2026, 6:59:04 PM",
+  "baseScore": 7.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
+  "references": "https://github.com/trabucayre/openFPGALoader/security/advisories/GHSA-v59x-fvpj-j22x\n",
+  "aliases": "CVE-2026-35170\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "01a44b18-9a39-32ac-b96a-7ecf143af3d6",
+      "product": {
+        "name": "openFPGALoader"
+      },
+      "product_version": "\u2264 1.1.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "4ca67c7c-0e52-3c28-8477-15dd58723909",
+      "vendor": {
+        "name": "trabucayre"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19446.json b/advisories/2026/04/EUVD-2026-19446.json
new file mode 100644
index 0000000000..3c94ac2a2e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19446.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19446",
+  "enisaUuid": "df79f85d-7f81-3806-b2d6-4cab03637a1d",
+  "description": "Distribution: stale blob access resurrection via repo-scoped redis descriptor cache invalidation",
+  "datePublished": "Apr 6, 2026, 5:53:40 PM",
+  "dateUpdated": "Apr 6, 2026, 5:53:40 PM",
+  "baseScore": 7.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+  "references": "https://github.com/distribution/distribution/security/advisories/GHSA-f2g3-hh2r-cwgc\nhttps://github.com/distribution/distribution/commit/078b0783f239b4115d1a979e66f08832084e9d1d\n",
+  "aliases": "CVE-2026-35172\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "dd4e401c-8c4d-348b-a194-f275e4c6cde1",
+      "product": {
+        "name": "distribution"
+      },
+      "product_version": "< 3.1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "37b6aae8-0b6c-3e59-93c3-7bf1d4f61452",
+      "vendor": {
+        "name": "distribution"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19448.json b/advisories/2026/04/EUVD-2026-19448.json
new file mode 100644
index 0000000000..d1257d2c9c
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19448.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19448",
+  "enisaUuid": "6bb67232-4dbe-34fe-b6bd-21446344c425",
+  "description": "openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in POFParser::parseSection() that allows out-of-bounds heap memory access when parsing a crafted .pof file. No FPGA hardware is required to trigger this vulnerability.",
+  "datePublished": "Apr 6, 2026, 6:59:58 PM",
+  "dateUpdated": "Apr 6, 2026, 6:59:58 PM",
+  "baseScore": 7.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
+  "references": "https://github.com/trabucayre/openFPGALoader/security/advisories/GHSA-9x7m-m8gv-px2j\n",
+  "aliases": "CVE-2026-35176\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "e0546973-61a1-3ab7-9669-a4bf1c87c929",
+      "product": {
+        "name": "openFPGALoader"
+      },
+      "product_version": "\u2264 1.1.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "ea48581b-4227-314a-b9b7-c7a1307c44c3",
+      "vendor": {
+        "name": "trabucayre"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19450.json b/advisories/2026/04/EUVD-2026-19450.json
new file mode 100644
index 0000000000..dd54a11bcb
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19450.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19450",
+  "enisaUuid": "fecbeb1a-8525-3e26-9cbb-4a64be2752e5",
+  "description": "Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains remote code execution vulnerability in the timezone conversion flow, which processes attacker-controlled cookie values in an unsafe manner. This vulnerability is fixed in 65.0.0.",
+  "datePublished": "Apr 6, 2026, 7:01:21 PM",
+  "dateUpdated": "Apr 6, 2026, 7:01:21 PM",
+  "baseScore": 9.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
+  "references": "https://github.com/forceworkbench/forceworkbench/security/advisories/GHSA-jw63-m86r-2jxc\nhttps://github.com/forceworkbench/forceworkbench/pull/869\n",
+  "aliases": "CVE-2026-35178\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "377f2a48-0ed7-3e79-bd51-c665c37bc6cd",
+      "product": {
+        "name": "forceworkbench"
+      },
+      "product_version": "< 65.0.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "baf4a3b0-a17c-3256-8ee6-2edd11d1d01b",
+      "vendor": {
+        "name": "forceworkbench"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19454.json b/advisories/2026/04/EUVD-2026-19454.json
new file mode 100644
index 0000000000..095a7141d7
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19454.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19454",
+  "enisaUuid": "7f169c14-0f4d-34d9-8c02-b0044b59f5d2",
+  "description": "WWBN AVideo is an open source video platform. In versions 26.0 and prior, the site customization endpoint at admin/customize_settings_nativeUpdate.json.php lacks CSRF token validation and writes uploaded logo files to disk before the ORM's domain-based security check executes. Combined with SameSite=None cookie policy, a cross-origin POST can overwrite the platform's logo with attacker-controlled content.",
+  "datePublished": "Apr 6, 2026, 7:06:46 PM",
+  "dateUpdated": "Apr 6, 2026, 7:06:46 PM",
+  "baseScore": 4.3,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+  "references": "https://github.com/WWBN/AVideo/security/advisories/GHSA-5572-2jgx-fc7c\n",
+  "aliases": "CVE-2026-35180\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "e80ee0bb-ddc2-3c30-b737-4ba1e302e003",
+      "product": {
+        "name": "AVideo"
+      },
+      "product_version": "\u2264 26.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "8c4510de-39ee-3d93-833b-980e82368820",
+      "vendor": {
+        "name": "WWBN"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19458.json b/advisories/2026/04/EUVD-2026-19458.json
new file mode 100644
index 0000000000..c9b46ce625
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19458.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19458",
+  "enisaUuid": "7feaa082-1742-3c76-9cdd-8c63daf69827",
+  "description": "Brave CMS is an open-source CMS. Prior to 2.0.6, this vulnerability is a missing authorization check found in the update role endpoint at routes/web.php. The POST route for /rights/update-role/{id} lacks the checkUserPermissions:assign-user-roles middleware. This allows any authenticated user to change account roles and promote themselves to Super Admin. This vulnerability is fixed in 2.0.6.",
+  "datePublished": "Apr 6, 2026, 7:10:28 PM",
+  "dateUpdated": "Apr 6, 2026, 7:10:28 PM",
+  "baseScore": 8.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/Ajax30/BraveCMS-2.0/security/advisories/GHSA-g58h-mvjw-f4hv\n",
+  "aliases": "CVE-2026-35182\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "2d5275a3-2a4d-39b9-800d-cac0f40ec5c9",
+      "product": {
+        "name": "BraveCMS-2.0"
+      },
+      "product_version": "< 2.0.6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "8afe3ec2-76c0-3629-8426-29168cddf5a1",
+      "vendor": {
+        "name": "Ajax30"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19460.json b/advisories/2026/04/EUVD-2026-19460.json
new file mode 100644
index 0000000000..c3b46f1b87
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19460.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19460",
+  "enisaUuid": "b86b1c69-cf20-3950-a32f-1c1e3aa656c2",
+  "description": "Brave CMS is an open-source CMS. Prior to 2.0.6, an Insecure Direct Object Reference (IDOR) vulnerability exists in the article image deletion feature. It is located in app/Http/Controllers/Dashboard/ArticleController.php within the deleteImage method. The endpoint accepts a filename from the URL but does not verify ownership. This allows an authenticated user with edit permissions to delete images attached to articles owned by other users. This vulnerability is fixed in 2.0.6.",
+  "datePublished": "Apr 6, 2026, 7:11:28 PM",
+  "dateUpdated": "Apr 6, 2026, 7:11:28 PM",
+  "baseScore": 7.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
+  "references": "https://github.com/Ajax30/BraveCMS-2.0/security/advisories/GHSA-cpf3-fxwg-cwr3\n",
+  "aliases": "CVE-2026-35183\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "f9081536-af35-3f82-b10b-4bfa3afa75cb",
+      "product": {
+        "name": "BraveCMS-2.0"
+      },
+      "product_version": "< 2.0.6"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "6f83b835-3f62-3db4-9519-7e94407608f6",
+      "vendor": {
+        "name": "Ajax30"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19462.json b/advisories/2026/04/EUVD-2026-19462.json
new file mode 100644
index 0000000000..1c43c6b66e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19462.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19462",
+  "enisaUuid": "9a092d9b-96b5-3741-8913-30a5b747098a",
+  "description": "A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument mode can lead to os command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.",
+  "datePublished": "Apr 6, 2026, 9:31:34 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:34 PM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355505\nhttps://vuldb.com/vuln/355505/cti\nhttps://vuldb.com/submit/792608\nhttps://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_185/README.md\nhttps://www.totolink.net/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5678\n",
+  "aliases": "CVE-2026-5678\nGHSA-h49p-xq2j-gmrw\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ffcb50e5-486a-30cd-bc0f-17cdd18cef5d",
+      "product": {
+        "name": "A7100RU"
+      },
+      "product_version": "7.4cu.2313_b20191024"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "482e093a-1cb9-3db7-aa71-81557c0a488a",
+      "vendor": {
+        "name": "Totolink"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19464.json b/advisories/2026/04/EUVD-2026-19464.json
new file mode 100644
index 0000000000..9e1d94e2c2
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19464.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19464",
+  "enisaUuid": "4a9a0c5f-4dd0-3006-a862-ece0124f8d95",
+  "description": "A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_B20221024. The impacted element is the function vsetTr069Cfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument stun_pass leads to os command injection. The exploit has been disclosed publicly and may be used.",
+  "datePublished": "Apr 6, 2026, 9:31:35 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:35 PM",
+  "baseScore": 5.1,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355506\nhttps://vuldb.com/vuln/355506/cti\nhttps://vuldb.com/submit/792650\nhttps://vuldb.com/submit/792798\nhttps://github.com/Svigo-o/TOTOLINK-Vul/tree/main/totolink-a3300r-stun-pass-cmd-injection\nhttps://www.totolink.net/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5679\n",
+  "aliases": "CVE-2026-5679\nGHSA-cmq3-f6cg-p3p7\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "5553190d-7aa6-3c1c-8fa7-19e33ffbd4b2",
+      "product": {
+        "name": "A3300R"
+      },
+      "product_version": "17.0.0cu.557_B20221024"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d88ab546-e483-33b6-ae7a-ea7e40df1404",
+      "vendor": {
+        "name": "Totolink"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19466.json b/advisories/2026/04/EUVD-2026-19466.json
new file mode 100644
index 0000000000..9d2180ed3e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19466.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19466",
+  "enisaUuid": "88fed9e1-6b9f-3a5d-a1fb-bff4aec47099",
+  "description": "A flaw has been found in itsourcecode sanitize or validate this input 1.0. This impacts an unknown function of the file /borrowedequip.php of the component Parameter Handler. This manipulation of the argument emp_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.",
+  "datePublished": "Apr 6, 2026, 9:31:35 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:35 PM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355508\nhttps://vuldb.com/vuln/355508/cti\nhttps://vuldb.com/submit/792688\nhttps://github.com/ltranquility/submit/issues/6\nhttps://itsourcecode.com/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5681\n",
+  "aliases": "CVE-2026-5681\nGHSA-p8gg-wgph-qc82\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "e47223cc-0d22-3a0f-b2f0-908d9a822b77",
+      "product": {
+        "name": "sanitize or validate this input"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "3ffa994e-ddce-3ab7-83f0-7101e2121f11",
+      "vendor": {
+        "name": "itsourcecode"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19468.json b/advisories/2026/04/EUVD-2026-19468.json
new file mode 100644
index 0000000000..1480cc85b5
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19468.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19468",
+  "enisaUuid": "17daacb0-5026-3df4-823d-4e34ef68c873",
+  "description": "EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom and value parameters. This vulnerability is fixed in 8.0.0.",
+  "datePublished": "Apr 6, 2026, 7:21:22 PM",
+  "dateUpdated": "Apr 6, 2026, 7:21:22 PM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://github.com/phili67/ecclesiacrm/security/advisories/GHSA-gjw3-73q9-v2qh\nhttps://github.com/phili67/ecclesiacrm/pull/2861\nhttps://github.com/phili67/ecclesiacrm/commit/f743b97f89da469a4c70b82bd61d0a59a3a957a9\nhttps://gist.github.com/NicolasPauferro/d877992327592f1e8eb4e2c9dce1ae9b\n",
+  "aliases": "CVE-2026-35184\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "5847aad2-855f-3eea-b8ec-68f02bb4d870",
+      "product": {
+        "name": "ecclesiacrm"
+      },
+      "product_version": "< 8.0.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "214ac298-1faf-391a-9be6-c5439592ccc3",
+      "vendor": {
+        "name": "phili67"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19469.json b/advisories/2026/04/EUVD-2026-19469.json
new file mode 100644
index 0000000000..2a80dacb7a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19469.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19469",
+  "enisaUuid": "a6aea546-61ba-3d43-b784-e2a4593b9f52",
+  "description": "HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to 25.0.0, the /server-status endpoint is publicly accessible and exposes sensitive information including authentication tokens (user_token), user activity, client IP addresses, and server configuration details. This allows any unauthenticated user to monitor real-time user interactions and gather internal infrastructure information. This vulnerability is fixed in 25.0.0.",
+  "datePublished": "Apr 6, 2026, 7:24:57 PM",
+  "dateUpdated": "Apr 6, 2026, 7:24:57 PM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
+  "references": "https://github.com/haxtheweb/issues/security/advisories/GHSA-3676-wj6r-hwh7\n",
+  "aliases": "CVE-2026-35185\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "f33574f2-9f28-3d63-b9a7-0b1320cd0a50",
+      "product": {
+        "name": "HAXiam"
+      },
+      "product_version": "< 25.0.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "e9181bcf-e0e8-3a1a-8827-e0cf945d0fa6",
+      "vendor": {
+        "name": "haxtheweb"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19471.json b/advisories/2026/04/EUVD-2026-19471.json
new file mode 100644
index 0000000000..ad30dda922
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19471.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19471",
+  "enisaUuid": "e2c20dd9-6bbb-334c-97de-3904da8486f9",
+  "description": "dye is a portable and respectful color library for shell scripts. Prior to 1.1.1, certain dye template expressions would result in execution of arbitrary code. This issue was discovered and fixed by dye's author, and is not known to be exploited. This vulnerability is fixed in 1.1.1.",
+  "datePublished": "Apr 6, 2026, 7:39:23 PM",
+  "dateUpdated": "Apr 6, 2026, 7:39:23 PM",
+  "baseScore": 6.6,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
+  "references": "https://github.com/mattieb/dye/security/advisories/GHSA-3v4r-5vfh-3wjr\nhttps://mattiebee.io/dye-template-advisory\n",
+  "aliases": "CVE-2026-35197\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "b32d100d-e650-39df-81e5-c24e79cfe9e2",
+      "product": {
+        "name": "dye"
+      },
+      "product_version": "< 1.1.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "865dcf05-4ba9-3f7e-9059-8efdede41e6a",
+      "vendor": {
+        "name": "mattieb"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19472.json b/advisories/2026/04/EUVD-2026-19472.json
new file mode 100644
index 0000000000..5943cc8f65
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19472.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19472",
+  "enisaUuid": "dbc8d992-f97d-308f-8af9-6eae2acd601b",
+  "description": "SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height >= 32 (which includes standard predefined parameters), this causes silent truncation to zero, resulting in a drastically undersized scratch buffer allocation followed by a heap buffer overflow during signature computation. Exploiting this issue would require an application using SymCrypt to perform an XMSS^MT signature using an attacker-controlled parameter set. It is uncommon for applications to allow the use of attacker-controlled parameter sets for signing, since signing is a private key operation, and private keys must be trusted by definition. Additionally, XMSS(^MT) signing should only be performed in a Hardware Security Module (HSM). XMSS(^MT) signing is provided in SymCrypt only for testing purposes. This is a general rule irrespective of this CVE; XMSS(^MT) and other stateful signature schemes are only cryptographically secure when it is guaranteed that the same state cannot be reused for two different signatures, which cannot be guaranteed by software alone. For this reason, XMSS(^MT) signing is also not FIPS approved when performed outside of an HSM. Fixed in version 103.11.0.",
+  "datePublished": "Apr 6, 2026, 7:44:31 PM",
+  "dateUpdated": "Apr 6, 2026, 7:44:56 PM",
+  "baseScore": 6.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
+  "references": "https://github.com/microsoft/SymCrypt/security/advisories/GHSA-rvj8-8h6x-hjmg\n",
+  "aliases": "CVE-2026-35199\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "64e79856-d19a-32d9-a0ae-c3f524e90ff6",
+      "product": {
+        "name": "SymCrypt"
+      },
+      "product_version": "103.5.0, < 103.11.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "bdeac832-62c7-3e9c-819a-2bb2359adb26",
+      "vendor": {
+        "name": "Microsoft"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19474.json b/advisories/2026/04/EUVD-2026-19474.json
new file mode 100644
index 0000000000..f5f29cda08
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19474.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19474",
+  "enisaUuid": "3bfd2791-88d4-33ac-bbe0-7594ed9391e0",
+  "description": "rdiscount has an Out-of-bounds Read",
+  "datePublished": "Apr 6, 2026, 5:53:59 PM",
+  "dateUpdated": "Apr 6, 2026, 5:53:59 PM",
+  "baseScore": 5.9,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
+  "references": "https://github.com/davidfstr/rdiscount/security/advisories/GHSA-6r34-94wq-jhrc\nhttps://github.com/davidfstr/rdiscount/commit/b1a16445e92e0d12c07594dedcdc56f80b317761\nhttp://github.com/davidfstr/rdiscount/releases/tag/2.2.7.4\n",
+  "aliases": "CVE-2026-35201\nGHSA-6r34-94wq-jhrc\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "4c7d851c-7745-3c96-8e46-aa1b81d9f3a6",
+      "product": {
+        "name": "rdiscount"
+      },
+      "product_version": "1.3.1.1, < 2.2.7.4"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "0dfff8c2-5063-3f3a-94c8-b5d13811a7b5",
+      "vendor": {
+        "name": "davidfstr"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19475.json b/advisories/2026/04/EUVD-2026-19475.json
new file mode 100644
index 0000000000..6e60278e9b
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19475.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19475",
+  "enisaUuid": "9b8088a2-4446-3c5b-811d-7581e30b5775",
+  "description": "ZLMediaKit is a streaming media service framework. the VP9 RTP payload parser in ext-codec/VP9Rtp.cpp reads multiple fields from the RTP payload based on flag bits in the first byte, without verifying that sufficient data exists in the buffer. A crafted VP9 RTP packet with a 1-byte payload (0xFF, all flags set) causes the parser to read past the end of the allocated buffer, resulting in a heap-buffer-overflow. This vulnerability is fixed with commit 435dcbcbbf700fd63b2ca9eac6cef3b5ea75169d.",
+  "datePublished": "Apr 6, 2026, 7:54:45 PM",
+  "dateUpdated": "Apr 6, 2026, 7:54:45 PM",
+  "baseScore": 7.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+  "references": "https://github.com/ZLMediaKit/ZLMediaKit/security/advisories/GHSA-gxr3-fwc7-q99h\nhttps://github.com/ZLMediaKit/ZLMediaKit/commit/435dcbcbbf700fd63b2ca9eac6cef3b5ea75169d\n",
+  "aliases": "CVE-2026-35203\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "bbdc85df-c02e-3ef7-940a-f1dbfc44db22",
+      "product": {
+        "name": "ZLMediaKit"
+      },
+      "product_version": "< 435dcbcbbf700fd63b2ca9eac6cef3b5ea75169d"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "bb717d86-1f86-37ba-87ac-19f2727e8f38",
+      "vendor": {
+        "name": "ZLMediaKit"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19476.json b/advisories/2026/04/EUVD-2026-19476.json
new file mode 100644
index 0000000000..72a560db2a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19476.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19476",
+  "enisaUuid": "2b4ba702-47c9-3a40-a533-05e453f35ef2",
+  "description": "lichess.org is the forever free, adless and open source chess server. Any approved streamer can inject arbitrary HTML into /streamer and the homepage \u201cLive streams\u201d widget by placing markup in their Twitch/YouTube stream title. CSP is present and blocks inline script execution, but the issue is still a server-side HTML injection sink. To trigger this, a Lichess account only needs to satisfy the normal streamer requirements and get approved. Per Streamer.canApply, that means an account older than 2 days with at least 15 games, or a verified/titled account. After moderator approval, once the streamer goes live, Lichess pulls the platform title and renders it into the UI as-is. No extra privileges are needed beyond a normal approved streamer profile. This vulnerability is fixed with commit 0d5002696ae705e1888bf77de107c73de57bb1b3.",
+  "datePublished": "Apr 6, 2026, 8:06:25 PM",
+  "dateUpdated": "Apr 6, 2026, 8:06:25 PM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
+  "references": "https://github.com/lichess-org/lila/security/advisories/GHSA-v7gh-939r-pfjq\nhttps://github.com/lichess-org/lila/commit/0d5002696ae705e1888bf77de107c73de57bb1b3\nhttps://vimeo.com/1175908262\n",
+  "aliases": "CVE-2026-35208\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "d6ee5437-50a8-34b3-9a42-b88a73f7300f",
+      "product": {
+        "name": "Lila"
+      },
+      "product_version": "< 0d5002696ae705e1888bf77de107c73de57bb1b3"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "6a32a79d-baff-3337-95d6-5e9ec0d55829",
+      "vendor": {
+        "name": "lichess-org"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19478.json b/advisories/2026/04/EUVD-2026-19478.json
new file mode 100644
index 0000000000..ab6e64600e
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19478.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19478",
+  "enisaUuid": "880dd6ae-f52f-3c72-8f07-580db82e8e54",
+  "description": "Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, S/MIME signature verification did not validate the certificate trust chain (checkChain: false). Any email signed with a self-signed or untrusted certificate was displayed as having a valid signature. This vulnerability is fixed in 1.4.11.",
+  "datePublished": "Apr 6, 2026, 8:11:56 PM",
+  "dateUpdated": "Apr 6, 2026, 8:13:14 PM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
+  "references": "https://github.com/bulwarkmail/webmail/security/advisories/GHSA-v6w6-338p-p256\n",
+  "aliases": "CVE-2026-35389\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "fa50e0c3-b5d8-3b28-b5bf-367d81d0c69e",
+      "product": {
+        "name": "Webmail"
+      },
+      "product_version": "< 1.4.11"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "363c088d-88aa-334a-9db8-dfd0700fcaf8",
+      "vendor": {
+        "name": "bulwarkmail"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19479.json b/advisories/2026/04/EUVD-2026-19479.json
new file mode 100644
index 0000000000..12757a2c8b
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19479.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19479",
+  "enisaUuid": "378b7730-f819-30ab-b52e-536946c00c4a",
+  "description": "Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, the reverse proxy (proxy.ts) set the Content-Security-Policy-Report-Only header instead of the enforcing Content-Security-Policy header. This means cross-site scripting (XSS) attacks were logged but not blocked. Any user who could inject script content (e.g., via crafted email HTML) could execute arbitrary JavaScript in the context of the application, potentially stealing session tokens or performing actions on behalf of the user. This vulnerability is fixed in 1.4.11.",
+  "datePublished": "Apr 6, 2026, 8:13:30 PM",
+  "dateUpdated": "Apr 6, 2026, 8:13:30 PM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
+  "references": "https://github.com/bulwarkmail/webmail/security/advisories/GHSA-6q52-98cr-qx65\n",
+  "aliases": "CVE-2026-35390\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "18ec631d-1a4a-3cdb-bd9d-f3d62dc4567c",
+      "product": {
+        "name": "Webmail"
+      },
+      "product_version": "< 1.4.11"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "add1252f-8f19-315a-b1b9-86fbb9dd89ec",
+      "vendor": {
+        "name": "bulwarkmail"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19480.json b/advisories/2026/04/EUVD-2026-19480.json
new file mode 100644
index 0000000000..27bd70232c
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19480.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19480",
+  "enisaUuid": "fcb7cd7a-d5a5-3c34-8fb2-ea95e60a12e7",
+  "description": "Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, the getClientIP() function in lib/admin/session.ts trusted the first (leftmost) entry of the X-Forwarded-For header, which is fully controlled by the client. An attacker could forge their source IP address to bypass IP-based rate limiting (enabling brute-force attacks against the admin login) or forge audit log entries (making malicious activity appear to originate from arbitrary IP addresses). This vulnerability is fixed in 1.4.11.",
+  "datePublished": "Apr 6, 2026, 8:17:39 PM",
+  "dateUpdated": "Apr 6, 2026, 8:17:39 PM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
+  "references": "https://github.com/bulwarkmail/webmail/security/advisories/GHSA-7pj2-232x-6698\n",
+  "aliases": "CVE-2026-35391\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "cb98eb97-074e-3550-910d-c4bb373ae878",
+      "product": {
+        "name": "Webmail"
+      },
+      "product_version": "< 1.4.11"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "e4fbe5d2-4bc3-38b2-a5e7-6c29f641037a",
+      "vendor": {
+        "name": "bulwarkmail"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19482.json b/advisories/2026/04/EUVD-2026-19482.json
new file mode 100644
index 0000000000..845319ec5a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19482.json
@@ -0,0 +1,52 @@
+{
+  "id": "EUVD-2026-19482",
+  "enisaUuid": "ccb19b1b-5f60-3695-9886-ea45568bcb90",
+  "description": "A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android. Affected is an unknown function of the file /api/endpoint of the component com.meesho.supply. Such manipulation leads to risky cryptographic algorithm. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.",
+  "datePublished": "Apr 6, 2026, 9:31:35 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:35 PM",
+  "baseScore": 6.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355509\nhttps://vuldb.com/vuln/355509/cti\nhttps://vuldb.com/submit/792717\nhttps://github.com/honestcorrupt/MEESHO-CVE\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5682\n",
+  "aliases": "CVE-2026-5682\nGHSA-2j2r-9pgw-95hp\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "21cfba2e-f000-3536-907c-b4fa045db829",
+      "product": {
+        "name": "Online Shopping App"
+      },
+      "product_version": "27.0"
+    },
+    {
+      "id": "882cd35a-6ea8-3e4d-a57e-acd5bd67b5c2",
+      "product": {
+        "name": "Online Shopping App"
+      },
+      "product_version": "27.3"
+    },
+    {
+      "id": "a1f22a3d-31de-363c-9445-bcf0eaeaa74a",
+      "product": {
+        "name": "Online Shopping App"
+      },
+      "product_version": "27.1"
+    },
+    {
+      "id": "a97ca78b-9f8f-32f4-8fcc-d07869108bc7",
+      "product": {
+        "name": "Online Shopping App"
+      },
+      "product_version": "27.2"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "565d3a6e-9045-3d50-9eaa-f2ae2c381f6e",
+      "vendor": {
+        "name": "Meesho"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19484.json b/advisories/2026/04/EUVD-2026-19484.json
new file mode 100644
index 0000000000..d52220ee02
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19484.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-19484",
+  "enisaUuid": "451f95b4-ea04-35a5-b9d5-22d5dd32bb85",
+  "description": "OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript by submitting malicious User-Agent HTTP headers to the /ocsinventory endpoint. Attackers can register rogue agents or craft requests with malicious User-Agent values that are stored without sanitation and rendered with insufficient encoding in the web console, leading to arbitrary JavaScript execution in the browsers of authenticated users viewing the statistics dashboard.",
+  "datePublished": "Apr 7, 2026, 12:30:21 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:21 AM",
+  "baseScore": 5.1,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
+  "references": "https://github.com/OCSInventory-NG/OCSInventory-Server/pull/483\nhttps://github.com/OCSInventory-NG/OCSInventory-Server/commit/78faf2ca8b897141ba4d337d75692ab8e405bd4e\nhttps://www.vulncheck.com/advisories/ocs-inventory-ng-server-stored-xss-via-user-agent\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-22675\n",
+  "aliases": "GHSA-xwcw-3qx7-8hxm\nCVE-2026-22675\n",
+  "assigner": "VulnCheck",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "963a4639-3b7e-3a65-8914-11c12f8727ae",
+      "product": {
+        "name": "OCS Inventory NG Server"
+      },
+      "product_version": "0 \u22642.12.3"
+    },
+    {
+      "id": "fbc97622-f49e-3afd-86e6-d99073f6961d",
+      "product": {
+        "name": "OCS Inventory NG Server"
+      },
+      "product_version": ""
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "65c30778-985a-35ea-ace1-bba025b4f3e2",
+      "vendor": {
+        "name": "OCS Inventory"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19486.json b/advisories/2026/04/EUVD-2026-19486.json
new file mode 100644
index 0000000000..8014e30b90
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19486.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19486",
+  "enisaUuid": "76c4399b-6587-3bc6-bc3a-9e6950d172e9",
+  "description": "OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. From 1.8.0 to 1.13.1, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement. This vulnerability is fixed in 1.14.0.",
+  "datePublished": "Apr 6, 2026, 8:41:33 PM",
+  "dateUpdated": "Apr 6, 2026, 8:41:33 PM",
+  "baseScore": 5.0,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
+  "references": "https://github.com/openfga/openfga/security/advisories/GHSA-jwvj-g8pc-cx45\n",
+  "aliases": "CVE-2026-34972\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0d24dd70-993f-328a-88ab-c6e1d5f174be",
+      "product": {
+        "name": "openfga"
+      },
+      "product_version": "1.8.0, < 1.14.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "4689d202-ef84-3c6d-b98a-8ec01a39caf1",
+      "vendor": {
+        "name": "openfga"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19488.json b/advisories/2026/04/EUVD-2026-19488.json
new file mode 100644
index 0000000000..245b43372f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19488.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19488",
+  "enisaUuid": "7fed9fb6-24d5-38ef-ab8d-4d3346b5ded8",
+  "description": "goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, PUT upload in httpserver/updown.go has no path sanitization. This vulnerability is fixed in 2.0.0-beta.3.",
+  "datePublished": "Apr 6, 2026, 8:48:56 PM",
+  "dateUpdated": "Apr 6, 2026, 8:48:56 PM",
+  "baseScore": 9.8,
+  "baseScoreVersion": "3.0",
+  "baseScoreVector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/patrickhener/goshs/security/advisories/GHSA-g8mv-vp7j-qp64\n",
+  "aliases": "CVE-2026-35392\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "3d3baf5a-bedc-3e09-ae91-e930493266bc",
+      "product": {
+        "name": "goshs"
+      },
+      "product_version": "< 2.0.0-beta.3"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "81b1b080-5d2d-3e4e-91e5-53a22135fa11",
+      "vendor": {
+        "name": "patrickhener"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19490.json b/advisories/2026/04/EUVD-2026-19490.json
new file mode 100644
index 0000000000..a604e80b9f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19490.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19490",
+  "enisaUuid": "d79c9ae9-a207-30e0-ae0a-6dd11107fb3b",
+  "description": "goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, the POST multipart upload directory not sanitized. This vulnerability is fixed in 2.0.0-beta.3.",
+  "datePublished": "Apr 6, 2026, 8:50:25 PM",
+  "dateUpdated": "Apr 6, 2026, 8:50:25 PM",
+  "baseScore": 9.8,
+  "baseScoreVersion": "3.0",
+  "baseScoreVector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/patrickhener/goshs/security/advisories/GHSA-jg56-wf8x-qrv5\n",
+  "aliases": "CVE-2026-35393\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "8808e999-7c62-372d-afdc-f3454bcb6c05",
+      "product": {
+        "name": "goshs"
+      },
+      "product_version": "< 2.0.0-beta.3"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "d7642718-8cf7-38a5-96ab-3ffb8583e659",
+      "vendor": {
+        "name": "patrickhener"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19495.json b/advisories/2026/04/EUVD-2026-19495.json
new file mode 100644
index 0000000000..19d3382d06
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19495.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19495",
+  "enisaUuid": "22579760-8b5d-307f-8dab-752c168640ee",
+  "description": "WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, WeGIA (Web gerenciador para institui\u00e7\u00f5es assistenciais) contains a SQL injection vulnerability in dao/memorando/DespachoDAO.php. The id_memorando parameter is extracted from $_REQUEST without validation and directly interpolated into SQL queries, allowing any authenticated user to execute arbitrary SQL commands against the database. This vulnerability is fixed in 3.6.9.",
+  "datePublished": "Apr 6, 2026, 9:01:28 PM",
+  "dateUpdated": "Apr 6, 2026, 9:01:28 PM",
+  "baseScore": 8.8,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+  "references": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-43jm-pcrq-w7gv\n",
+  "aliases": "CVE-2026-35395\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "30cabc05-41b9-3883-b7c3-199f82d90a12",
+      "product": {
+        "name": "WeGIA"
+      },
+      "product_version": "< 3.6.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "166f3b48-2ec3-3656-b6db-c52e402bce39",
+      "vendor": {
+        "name": "LabRedesCefetRJ"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19496.json b/advisories/2026/04/EUVD-2026-19496.json
new file mode 100644
index 0000000000..ee52bff1ea
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19496.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19496",
+  "enisaUuid": "13127f28-c56e-392d-b2ca-c909f448989a",
+  "description": "WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and nomeClasse=IsaidaControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.9.",
+  "datePublished": "Apr 6, 2026, 9:02:37 PM",
+  "dateUpdated": "Apr 6, 2026, 9:02:37 PM",
+  "baseScore": 5.1,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
+  "references": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-4qxc-5j5f-4gp5\n",
+  "aliases": "CVE-2026-35396\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c3a05567-7847-337c-a66d-ef2b93f2948d",
+      "product": {
+        "name": "WeGIA"
+      },
+      "product_version": "< 3.6.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "520b3bf9-204b-3f24-ac8b-90e2d3c3586f",
+      "vendor": {
+        "name": "LabRedesCefetRJ"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19498.json b/advisories/2026/04/EUVD-2026-19498.json
new file mode 100644
index 0000000000..d71dd13536
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19498.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19498",
+  "enisaUuid": "8f4ef63c-4f03-3201-9931-ca32d2635e53",
+  "description": "WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos & listarId_Nome and nomeClasse=OrigemControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.9.",
+  "datePublished": "Apr 6, 2026, 9:04:20 PM",
+  "dateUpdated": "Apr 6, 2026, 9:04:20 PM",
+  "baseScore": 5.1,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
+  "references": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-jvmq-528w-q4xp\n",
+  "aliases": "CVE-2026-35398\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "a1ccec44-8244-303e-a35b-c5304f84b823",
+      "product": {
+        "name": "WeGIA"
+      },
+      "product_version": "< 3.6.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2ea95c83-ee9f-30f4-898b-58366f9cc444",
+      "vendor": {
+        "name": "LabRedesCefetRJ"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19500.json b/advisories/2026/04/EUVD-2026-19500.json
new file mode 100644
index 0000000000..9458d8bfe8
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19500.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19500",
+  "enisaUuid": "c44f81f3-1da9-3c59-a867-24452eb030c0",
+  "description": "WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, a stored XSS vulnerability allows an attacker to inject malicious scripts through a backup filename. This could lead to unauthorized execution of malicious code in the victim's browser, compromising session data or executing actions on behalf of the user. This vulnerability is fixed in 3.6.9.",
+  "datePublished": "Apr 6, 2026, 9:06:33 PM",
+  "dateUpdated": "Apr 6, 2026, 9:06:33 PM",
+  "baseScore": 8.5,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
+  "references": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-fmwv-62wf-2hgx\n",
+  "aliases": "CVE-2026-35399\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "e4e6cf42-decd-335e-beee-d0dd5553b996",
+      "product": {
+        "name": "WeGIA"
+      },
+      "product_version": "< 3.6.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "af9cbcc1-a0bd-32cb-94e8-96f3dccee950",
+      "vendor": {
+        "name": "LabRedesCefetRJ"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19502.json b/advisories/2026/04/EUVD-2026-19502.json
new file mode 100644
index 0000000000..5abe29b5af
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19502.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19502",
+  "enisaUuid": "a404960e-cbaf-341d-a5b8-05d2c7404675",
+  "description": "Open edX Platform enables the authoring and delivery of online learning at any scale. he view_survey endpoint accepts a redirect_url GET parameter that is passed directly to HttpResponseRedirect() without any URL validation. When a non-existent survey name is provided, the server issues an immediate HTTP 302 redirect to the attacker-controlled URL. Additionally, the same unvalidated URL is embedded in a hidden form field and returned in a JSON response after form submission, where client-side JavaScript performs location.href = url. This enables phishing and credential theft attacks against authenticated Open edX users. This vulnerability is fixed with commit 76462f1e5fa9b37d2621ad7ad19514b403908970.",
+  "datePublished": "Apr 6, 2026, 9:22:29 PM",
+  "dateUpdated": "Apr 6, 2026, 9:22:29 PM",
+  "baseScore": 4.7,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
+  "references": "https://github.com/openedx/openedx-platform/security/advisories/GHSA-2843-x998-f8r2\nhttps://github.com/openedx/openedx-platform/commit/76462f1e5fa9b37d2621ad7ad19514b403908970\n",
+  "aliases": "CVE-2026-35404\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c25b814c-df6e-3b52-a19a-bfe250456e86",
+      "product": {
+        "name": "openedx-platform"
+      },
+      "product_version": "< 76462f1e5fa9b37d2621ad7ad19514b403908970"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "fc3ceeff-c2f7-3c9b-b69d-90bed592607a",
+      "vendor": {
+        "name": "openedx"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19504.json b/advisories/2026/04/EUVD-2026-19504.json
new file mode 100644
index 0000000000..4b3ebe4eda
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19504.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19504",
+  "enisaUuid": "3c211169-76f4-37fa-9b1e-504c2aeebd4e",
+  "description": "WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=EstoqueControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.9.",
+  "datePublished": "Apr 6, 2026, 9:05:26 PM",
+  "dateUpdated": "Apr 6, 2026, 9:05:26 PM",
+  "baseScore": 5.1,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
+  "references": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-h8wm-6xhv-r547\n",
+  "aliases": "CVE-2026-35472\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "db314b66-6cd2-3fef-8b00-a0cf85a60663",
+      "product": {
+        "name": "WeGIA"
+      },
+      "product_version": "< 3.6.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "756d5fbb-6855-3fe7-a47e-e9ebfbd5cb2c",
+      "vendor": {
+        "name": "LabRedesCefetRJ"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19506.json b/advisories/2026/04/EUVD-2026-19506.json
new file mode 100644
index 0000000000..e8932907ba
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19506.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19506",
+  "enisaUuid": "4c23ac66-afa3-3c5b-afc1-2e93ceb72994",
+  "description": "WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and nomeClasse=IentradaControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.9.",
+  "datePublished": "Apr 6, 2026, 9:12:35 PM",
+  "dateUpdated": "Apr 6, 2026, 9:12:35 PM",
+  "baseScore": 5.1,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
+  "references": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-q72f-4qx3-cvp7\n",
+  "aliases": "CVE-2026-35473\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "bc31797d-3701-3ae8-bb3f-ebf165c958bc",
+      "product": {
+        "name": "WeGIA"
+      },
+      "product_version": "< 3.6.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "39e18adc-4a08-390d-a5aa-ba1271da7d88",
+      "vendor": {
+        "name": "LabRedesCefetRJ"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19508.json b/advisories/2026/04/EUVD-2026-19508.json
new file mode 100644
index 0000000000..a0873f4c0b
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19508.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19508",
+  "enisaUuid": "1646810a-9240-3843-9a37-30331b6e3304",
+  "description": "WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken directly from $_GET with no URL validation or whitelist check, then used verbatim in a header(\"Location: ...\") call. This vulnerability is fixed in 3.6.9.",
+  "datePublished": "Apr 6, 2026, 9:13:25 PM",
+  "dateUpdated": "Apr 6, 2026, 9:13:25 PM",
+  "baseScore": 5.1,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
+  "references": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-7935-g3wg-h55w\n",
+  "aliases": "CVE-2026-35474\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "cd2b246d-9ba9-31da-af3d-a6844ef5b100",
+      "product": {
+        "name": "WeGIA"
+      },
+      "product_version": "< 3.6.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "17aa9c21-2043-36b9-90c6-95c947573785",
+      "vendor": {
+        "name": "LabRedesCefetRJ"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19510.json b/advisories/2026/04/EUVD-2026-19510.json
new file mode 100644
index 0000000000..ec57005583
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19510.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19510",
+  "enisaUuid": "11849fa3-6b8c-37e3-b949-dfd63d21af2d",
+  "description": "WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, the redirect parameter is taken directly from $_GET with no URL validation or whitelist check, then used verbatim in a header(\"Location: ...\") call. This vulnerability is fixed in 3.6.9.",
+  "datePublished": "Apr 6, 2026, 9:17:04 PM",
+  "dateUpdated": "Apr 6, 2026, 9:17:04 PM",
+  "baseScore": 5.1,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
+  "references": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-qfpg-6jh6-jx6p\n",
+  "aliases": "CVE-2026-35475\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c336f227-c28c-37d6-ae60-79fb169f4bc2",
+      "product": {
+        "name": "WeGIA"
+      },
+      "product_version": "< 3.6.9"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "5296eb21-f3f5-3f3e-a64b-5cd88cf0390e",
+      "vendor": {
+        "name": "LabRedesCefetRJ"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19512.json b/advisories/2026/04/EUVD-2026-19512.json
new file mode 100644
index 0000000000..db92688344
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19512.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19512",
+  "enisaUuid": "f3fca372-25fb-3fbe-aa8d-999c4bbd1d6f",
+  "description": "A vulnerability was found in Tenda CX12L 16.03.53.12. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack must originate from the local network. The exploit has been made public and could be used.",
+  "datePublished": "Apr 6, 2026, 9:31:35 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:35 PM",
+  "baseScore": 5.1,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355510\nhttps://vuldb.com/vuln/355510/cti\nhttps://vuldb.com/submit/792777\nhttps://github.com/cve-a/lvdan/issues/1\nhttps://www.tenda.com.cn/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5683\n",
+  "aliases": "CVE-2026-5683\nGHSA-r6ph-fxqg-vg33\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "51a47313-d249-37fa-bb31-5b410b93bd89",
+      "product": {
+        "name": "CX12L"
+      },
+      "product_version": "16.03.53.12"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "444a9c03-d77f-3e1d-9b89-ef3c31da0b06",
+      "vendor": {
+        "name": "Tenda"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19514.json b/advisories/2026/04/EUVD-2026-19514.json
new file mode 100644
index 0000000000..5de422e88a
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19514.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19514",
+  "enisaUuid": "711a745e-28aa-3b5c-9e44-f17726834328",
+  "description": "A vulnerability was determined in Tenda CX12L 16.03.53.12. Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack requires access to the local network. The exploit has been publicly disclosed and may be utilized.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 8.6,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355511\nhttps://vuldb.com/vuln/355511/cti\nhttps://vuldb.com/submit/792781\nhttps://github.com/cve-a/lvdan/issues/2\nhttps://www.tenda.com.cn/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5684\n",
+  "aliases": "GHSA-phcm-xmm8-7jpc\nCVE-2026-5684\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "bee14745-6056-3702-b400-bc959a85b34e",
+      "product": {
+        "name": "CX12L"
+      },
+      "product_version": "16.03.53.12"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "2be5bbab-db76-3d80-92c7-eb3eadb71103",
+      "vendor": {
+        "name": "Tenda"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19517.json b/advisories/2026/04/EUVD-2026-19517.json
new file mode 100644
index 0000000000..f2ef268c6d
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19517.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19517",
+  "enisaUuid": "bd5a167f-f71c-394b-bc92-5fd96294f813",
+  "description": "Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.0, a Server-Side Request Forgery (SSRF) protection bypass has been identified and fixed in Directus. The IP address validation mechanism used to block requests to local and private networks could be circumvented using IPv4-Mapped IPv6 address notation. This vulnerability is fixed in 11.16.0.",
+  "datePublished": "Apr 6, 2026, 9:31:13 PM",
+  "dateUpdated": "Apr 6, 2026, 9:31:13 PM",
+  "baseScore": 7.7,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
+  "references": "https://github.com/directus/directus/security/advisories/GHSA-wv3h-5fx7-966h\n",
+  "aliases": "GHSA-wv3h-5fx7-966h\nCVE-2026-35409\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "7755215c-ca57-344b-aa54-ece073216035",
+      "product": {
+        "name": "directus"
+      },
+      "product_version": "< 11.16.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "8d24c715-eb27-3c49-9d32-5e99b599b628",
+      "vendor": {
+        "name": "directus"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19518.json b/advisories/2026/04/EUVD-2026-19518.json
new file mode 100644
index 0000000000..9c1e302d85
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19518.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19518",
+  "enisaUuid": "3a696102-fc73-3fb5-a3db-baef15b7b221",
+  "description": "Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, an open redirect vulnerability exists in the login redirection logic. The isLoginRedirectAllowed function fails to correctly identify certain malformed URLs as external, allowing attackers to bypass redirect allow-list validation and redirect users to arbitrary external domains upon successful authentication. This vulnerability is fixed in 11.16.1.",
+  "datePublished": "Apr 6, 2026, 9:32:13 PM",
+  "dateUpdated": "Apr 6, 2026, 9:32:13 PM",
+  "baseScore": 6.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+  "references": "https://github.com/directus/directus/security/advisories/GHSA-cf45-hxwj-4cfj\n",
+  "aliases": "CVE-2026-35410\nGHSA-cf45-hxwj-4cfj\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "c3b3f42f-47b3-3890-aa8a-4c5a4e1f7578",
+      "product": {
+        "name": "directus"
+      },
+      "product_version": "< 11.16.1"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "03a874cb-bdf1-34ac-a814-23bef658f080",
+      "vendor": {
+        "name": "directus"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19527.json b/advisories/2026/04/EUVD-2026-19527.json
new file mode 100644
index 0000000000..7263c0ffd1
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19527.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19527",
+  "enisaUuid": "ce42ce74-ca12-3fb2-bf2f-6776db739cfe",
+  "description": "SDL_image is a library to load images of various formats as SDL surfaces. In do_layer_surface() in src/IMG_xcf.c, pixel index values from decoded XCF tile data are used directly as colormap indices without validating them against the colormap size (cm_num). A crafted .xcf file with a small colormap and out-of-range pixel indices causes heap out-of-bounds reads of up to 762 bytes past the colormap allocation. Both IMAGE_INDEXED code paths are affected (bpp=1 and bpp=2). The leaked heap bytes are written into the output surface pixel data, making them potentially observable in the rendered image. This vulnerability is fixed with commit 996bf12888925932daace576e09c3053410896f8.",
+  "datePublished": "Apr 6, 2026, 9:44:05 PM",
+  "dateUpdated": "Apr 6, 2026, 9:44:05 PM",
+  "baseScore": 7.1,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
+  "references": "https://github.com/libsdl-org/SDL_image/security/advisories/GHSA-gq8w-x74c-h6p7\n",
+  "aliases": "CVE-2026-35444\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "db948c4c-445d-3850-a472-5d0e9eeef52d",
+      "product": {
+        "name": "SDL_image"
+      },
+      "product_version": "< 996bf12888925932daace576e09c3053410896f8"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "7b4dc1fa-7f19-3f62-b7c5-c11857141727",
+      "vendor": {
+        "name": "libsdl-org"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19537.json b/advisories/2026/04/EUVD-2026-19537.json
new file mode 100644
index 0000000000..9cfc21bde7
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19537.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19537",
+  "enisaUuid": "ab364759-7c6a-317c-85dc-ff056cfb7b78",
+  "description": "The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketplace allowed a malicious VSIX file to write arbitrary files outside the extension directory. ExtractZip passed raw zip entry names to a callback that wrote files via filepath.Join with no boundary check; filepath.Join resolved .. components but did not prevent the result from escaping the base path. This vulnerability is fixed in 2.4.2.",
+  "datePublished": "Apr 6, 2026, 9:51:53 PM",
+  "dateUpdated": "Apr 6, 2026, 9:51:53 PM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
+  "references": "https://github.com/coder/code-marketplace/security/advisories/GHSA-8x9r-hvwg-c55h\nhttps://github.com/coder/code-marketplace/releases/tag/v2.4.2\n",
+  "aliases": "CVE-2026-35454\n",
+  "assigner": "GitHub_M",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "5024a6e7-2808-3065-9267-e597183377f8",
+      "product": {
+        "name": "code-marketplace"
+      },
+      "product_version": "< 2.4.2"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "956d4352-bf9f-32c3-bffd-4230fbbd1693",
+      "vendor": {
+        "name": "coder"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19541.json b/advisories/2026/04/EUVD-2026-19541.json
new file mode 100644
index 0000000000..eebea5b531
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19541.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19541",
+  "enisaUuid": "70cc2e3b-ccbf-3afa-b827-50c0e113c305",
+  "description": "A vulnerability was identified in Tenda CX12L 16.03.53.12. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355512\nhttps://vuldb.com/vuln/355512/cti\nhttps://vuldb.com/submit/792782\nhttps://github.com/cve-a/lvdan/issues/3\nhttps://www.tenda.com.cn/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5685\n",
+  "aliases": "CVE-2026-5685\nGHSA-frp6-hv3g-9wcp\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0557cae2-9b6b-385f-88ac-99e5a9619e65",
+      "product": {
+        "name": "CX12L"
+      },
+      "product_version": "16.03.53.12"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "c9b39abf-0ec8-35a3-af58-0cfa011dd188",
+      "vendor": {
+        "name": "Tenda"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19543.json b/advisories/2026/04/EUVD-2026-19543.json
new file mode 100644
index 0000000000..10c4a14b98
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19543.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19543",
+  "enisaUuid": "3bf7ed3b-2db6-3272-8717-31dbdae1327e",
+  "description": "A security flaw has been discovered in Tenda CX12L 16.03.53.12. This vulnerability affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355513\nhttps://vuldb.com/vuln/355513/cti\nhttps://vuldb.com/submit/792783\nhttps://github.com/cve-a/lvdan/issues/4\nhttps://www.tenda.com.cn/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5686\n",
+  "aliases": "CVE-2026-5686\nGHSA-fc6j-rjwv-62c9\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "3e4e780a-2f3d-35d6-94d2-ddc818b86454",
+      "product": {
+        "name": "CX12L"
+      },
+      "product_version": "16.03.53.12"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "739e1bd8-7b75-333a-81a9-e923d7d99663",
+      "vendor": {
+        "name": "Tenda"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19545.json b/advisories/2026/04/EUVD-2026-19545.json
new file mode 100644
index 0000000000..fe16f3877f
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19545.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19545",
+  "enisaUuid": "c8089272-f2eb-3b0a-a539-b40f6e28a15a",
+  "description": "A weakness has been identified in Tenda CX12L 16.03.53.12. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. This manipulation of the argument page causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355514\nhttps://vuldb.com/vuln/355514/cti\nhttps://vuldb.com/submit/792785\nhttps://github.com/cve-a/lvdan/issues/5\nhttps://www.tenda.com.cn/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5687\n",
+  "aliases": "GHSA-qchm-r69c-gh59\nCVE-2026-5687\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "8b7d63cc-e7a1-33a4-b4f5-523469401af1",
+      "product": {
+        "name": "CX12L"
+      },
+      "product_version": "16.03.53.12"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "29e87e55-1e34-3274-a196-c3334e0f25eb",
+      "vendor": {
+        "name": "Tenda"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19547.json b/advisories/2026/04/EUVD-2026-19547.json
new file mode 100644
index 0000000000..ced4bc6fd0
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19547.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19547",
+  "enisaUuid": "be558e39-a6e7-33b2-825e-71f4d2cb6a15",
+  "description": "A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument provider leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355515\nhttps://vuldb.com/vuln/355515/cti\nhttps://vuldb.com/submit/792945\nhttps://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_186/README.md\nhttps://www.totolink.net/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5688\n",
+  "aliases": "GHSA-r8h7-vx32-9qj2\nCVE-2026-5688\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "ae120006-7ef9-3e6c-81e0-707c6fd1d799",
+      "product": {
+        "name": "A7100RU"
+      },
+      "product_version": "7.4cu.2313_b20191024"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "1c7b0511-03c7-3303-b5d5-91c21465e68c",
+      "vendor": {
+        "name": "Totolink"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19548.json b/advisories/2026/04/EUVD-2026-19548.json
new file mode 100644
index 0000000000..2d1cba402b
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19548.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19548",
+  "enisaUuid": "b126a0f3-abc5-3569-b7e9-c53343989afb",
+  "description": "Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES)\u00a0version 2025.03 through 2025.12.01\u00a0might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name.\n\nTo remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://github.com/aws/res/releases/tag/2026.03\nhttps://github.com/aws/res/issues/151\nhttps://aws.amazon.com/security/security-bulletins/2026-014-aws/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5707\n",
+  "aliases": "CVE-2026-5707\nGHSA-gxfh-rxpm-86pc\n",
+  "assigner": "AMZN",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "118c38eb-5744-3df4-bd93-ecc3bf359936",
+      "product": {
+        "name": "Research and Engineering Studio (RES)"
+      },
+      "product_version": "2025.03 \u22642025.12.01"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "4f1dbd61-b9b2-3e7b-9022-67270dbc5165",
+      "vendor": {
+        "name": "aws"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19549.json b/advisories/2026/04/EUVD-2026-19549.json
new file mode 100644
index 0000000000..47d6adfa28
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19549.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19549",
+  "enisaUuid": "426520cf-82eb-34a5-82b4-c087bba102b2",
+  "description": "Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to escalate privileges, assume the virtual desktop host instance profile permissions, and interact with AWS resources and services via a crafted API request.\n\nTo remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 8.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://github.com/aws/res/releases/tag/2026.03\nhttps://github.com/aws/res/issues/149\nhttps://aws.amazon.com/security/security-bulletins/2026-014-aws/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5708\n",
+  "aliases": "GHSA-fpff-pjfw-gfg7\nCVE-2026-5708\n",
+  "assigner": "AMZN",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "b7c75c12-dc8f-3303-91ca-3360a1fa8236",
+      "product": {
+        "name": "Research and Engineering Studio (RES)"
+      },
+      "product_version": "2023.11 \u22642025.12.01"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "c84780b4-c380-344f-a2d2-8cbae6dd615c",
+      "vendor": {
+        "name": "aws"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19550.json b/advisories/2026/04/EUVD-2026-19550.json
new file mode 100644
index 0000000000..fcf67ec776
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19550.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19550",
+  "enisaUuid": "708d4380-b030-35e9-920b-973bd56c4fad",
+  "description": "Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 instance via crafted input when using the FileBrowser functionality.\n\nTo remediate this issue, users are advised to upgrade to RES version 2026.03 or apply the corresponding mitigation patch to their existing environment.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 7.7,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+  "references": "https://github.com/aws/res/releases/tag/2026.03\nhttps://github.com/aws/res/issues/150\nhttps://aws.amazon.com/security/security-bulletins/2026-014-aws/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5709\n",
+  "aliases": "GHSA-6vq3-2fhj-j6wx\nCVE-2026-5709\n",
+  "assigner": "AMZN",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "0b802eee-7ff2-3328-94c7-dea05becc4e1",
+      "product": {
+        "name": "Research and Engineering Studio (RES)"
+      },
+      "product_version": "2024.10 \u22642025.12.01"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "bb83c254-104b-3a3b-8b2d-02a4e4499e1e",
+      "vendor": {
+        "name": "aws"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19551.json b/advisories/2026/04/EUVD-2026-19551.json
new file mode 100644
index 0000000000..3d60acc1c0
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19551.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19551",
+  "enisaUuid": "b97e1fbf-1c75-37ae-8c33-620f20afa96f",
+  "description": "A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument tz results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355516\nhttps://vuldb.com/vuln/355516/cti\nhttps://vuldb.com/submit/792946\nhttps://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_187/README.md\nhttps://www.totolink.net/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5689\n",
+  "aliases": "CVE-2026-5689\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "d8315436-48dd-3f31-b95d-c0a319424e3d",
+      "product": {
+        "name": "A7100RU"
+      },
+      "product_version": "7.4cu.2313_b20191024"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "c62dfcae-e981-3eb4-99a2-37a56de7412c",
+      "vendor": {
+        "name": "Totolink"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19553.json b/advisories/2026/04/EUVD-2026-19553.json
new file mode 100644
index 0000000000..ca2f4b7b49
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19553.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19553",
+  "enisaUuid": "2a588c50-e6d1-3a3e-a78d-c56f09304922",
+  "description": "A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setRemoteCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument enable can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355517\nhttps://vuldb.com/vuln/355517/cti\nhttps://vuldb.com/submit/792947\nhttps://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_188/README.md\nhttps://www.totolink.net/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5690\n",
+  "aliases": "GHSA-wvc4-2vwc-mwh2\nCVE-2026-5690\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "6a48268c-1b79-340a-8f57-b79ae2c8f1b8",
+      "product": {
+        "name": "A7100RU"
+      },
+      "product_version": "7.4cu.2313_b20191024"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "1163af75-1fea-3e9c-8d71-5c75760c8a26",
+      "vendor": {
+        "name": "Totolink"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19555.json b/advisories/2026/04/EUVD-2026-19555.json
new file mode 100644
index 0000000000..498a38f48b
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19555.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19555",
+  "enisaUuid": "9528488b-f24f-30b3-b732-24d8edfb7ed0",
+  "description": "A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setFirewallType of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument firewallType leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355518\nhttps://vuldb.com/vuln/355518/cti\nhttps://vuldb.com/submit/792962\nhttps://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_189/README.md\nhttps://www.totolink.net/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5691\n",
+  "aliases": "CVE-2026-5691\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "cd46e445-6cdc-300a-b94f-d0283b7d5af3",
+      "product": {
+        "name": "A7100RU"
+      },
+      "product_version": "7.4cu.2313_b20191024"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "50456a6c-7bff-34fe-9565-1cfd41ae68bf",
+      "vendor": {
+        "name": "Totolink"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19557.json b/advisories/2026/04/EUVD-2026-19557.json
new file mode 100644
index 0000000000..9a53612a89
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19557.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19557",
+  "enisaUuid": "36855a08-e007-371c-a6d2-4ce01466c9d0",
+  "description": "A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 6.9,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355519\nhttps://vuldb.com/vuln/355519/cti\nhttps://vuldb.com/submit/792963\nhttps://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_190/README.md\nhttps://www.totolink.net/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5692\n",
+  "aliases": "CVE-2026-5692\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "7a50d143-9b25-3f87-af83-7e29cd4b197e",
+      "product": {
+        "name": "A7100RU"
+      },
+      "product_version": "7.4cu.2313_b20191024"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "790f6e46-1f51-3c8d-8c41-f9e9cd7400f9",
+      "vendor": {
+        "name": "Totolink"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-19559.json b/advisories/2026/04/EUVD-2026-19559.json
new file mode 100644
index 0000000000..a78b4c5192
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-19559.json
@@ -0,0 +1,31 @@
+{
+  "id": "EUVD-2026-19559",
+  "enisaUuid": "31efc2b8-7469-3a93-b5f5-ceb894efa2ab",
+  "description": "A vulnerability was identified in code-projects Online Hotel Booking 1.0. Affected by this vulnerability is an unknown functionality of the file /booknow.php of the component Booking Endpoint. Such manipulation of the argument roomname leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used.",
+  "datePublished": "Apr 7, 2026, 12:30:22 AM",
+  "dateUpdated": "Apr 7, 2026, 12:30:22 AM",
+  "baseScore": 5.3,
+  "baseScoreVersion": "4.0",
+  "baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
+  "references": "https://vuldb.com/vuln/355521\nhttps://vuldb.com/vuln/355521/cti\nhttps://vuldb.com/submit/786325\nhttps://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Reflected%20Cross-Site%20Scripting%20(XSS)%20in%20Online%20Hotel%20Booking%20System%20roomname%20Parameter.md\nhttps://code-projects.org/\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5705\n",
+  "aliases": "CVE-2026-5705\n",
+  "assigner": "VulDB",
+  "epss": 0.0,
+  "enisaIdProduct": [
+    {
+      "id": "4484f102-7581-3ad8-9664-8abc5c86cc6c",
+      "product": {
+        "name": "Online Hotel Booking"
+      },
+      "product_version": "1.0"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "8f5d78be-0025-3e79-a9b6-9b69dd0903c2",
+      "vendor": {
+        "name": "code-projects"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/advisories/2026/04/EUVD-2026-7407.json b/advisories/2026/04/EUVD-2026-7407.json
new file mode 100644
index 0000000000..def6f54aa0
--- /dev/null
+++ b/advisories/2026/04/EUVD-2026-7407.json
@@ -0,0 +1,38 @@
+{
+  "id": "EUVD-2026-7407",
+  "enisaUuid": "757cfd0e-c8ea-35c9-9d73-ecd560d9c458",
+  "description": "OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp",
+  "datePublished": "Apr 6, 2026, 5:51:37 PM",
+  "dateUpdated": "Apr 6, 2026, 5:51:37 PM",
+  "baseScore": 6.5,
+  "baseScoreVersion": "3.1",
+  "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
+  "references": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-q6vj-wxvf-5m8c\nhttps://github.com/AcademySoftwareFoundation/openexr/commit/6bb2ddf1068573d073edf81270a015b38cc05cef\nhttps://github.com/AcademySoftwareFoundation/openexr/commit/d2be382758adc3e9ab83a3de35138ec28d93ebd8\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-26981\n",
+  "aliases": "GHSA-q6vj-wxvf-5m8c\nCVE-2026-26981\n",
+  "assigner": "GitHub_M",
+  "epss": 0.02,
+  "enisaIdProduct": [
+    {
+      "id": "46cdd765-5552-31a2-9b71-abda1e5bddfe",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.3.0, < 3.3.7"
+    },
+    {
+      "id": "bbb6167b-b249-3529-8a2d-d008975d3fcf",
+      "product": {
+        "name": "OpenEXR"
+      },
+      "product_version": "3.4.0, < 3.4.5"
+    }
+  ],
+  "enisaIdVendor": [
+    {
+      "id": "ce4a8a98-aa0c-33e1-ae3b-fbfc66f770b7",
+      "vendor": {
+        "name": "AcademySoftwareFoundation"
+      }
+    }
+  ]
+}
\ No newline at end of file
diff --git a/checkpoint.json b/checkpoint.json
index add00daafb..55e28685b0 100644
--- a/checkpoint.json
+++ b/checkpoint.json
@@ -1,3 +1,3 @@
 {
-  "last_run": "2026-04-06"
+  "last_run": "2026-04-07"
 }
\ No newline at end of file