Security Digest: April 4, 2026 - 13 Critical Vulnerabilities

Today's security landscape has been shaken by the discovery of 13 high-severity vulnerabilities that demand immediate attention. These vulnerabilities span across widely-used platforms, threatening everything from Docker containerization processes to mobile device security.

· 4 min read

Today's Critical Security Threats

Today's security landscape has been shaken by the discovery of 13 high-severity vulnerabilities that demand immediate attention. These vulnerabilities span across widely-used platforms, threatening everything from Docker containerization processes to mobile device security.

Executive Summary

On April 4, 2026, 13 critical vulnerabilities were identified, posing threats such as remote code execution, server-side request forgery, and file overwrites. Developers and security teams need to apply patches and consider disabling certain features to mitigate risks immediately.

Critical Vulnerabilities

  • CVE-2026-35044: Arbitrary Code Execution via Dockerfile Templates
    • Impact: Allows attackers to execute code on the host machine.
    • Affected Systems: BentoML with unsandboxed Jinja2.
    • Immediate Action: Replace Jinja2 Environment with SandboxedEnvironment and remove dangerous extensions.
    • Mitigation: Update to the latest version with these fixes implemented.
  • CVE-2026-35463: Remote Code Execution via Plugin Config
    • Impact: Allows non-admin users to execute arbitrary commands.
    • Affected Systems: Pyload-ng with specific plugin configurations.
    • Immediate Action: Apply admin-only restrictions to plugin config options using privileged executables.
    • Mitigation: Ensure only admin users can modify sensitive plugin settings.
  • CVE-2026-35408: OAuth Token Theft via SSO Page Manipulation
    • Impact: Potential account takeover through stolen OAuth tokens.
    • Affected Systems: Directus SSO login pages.
    • Immediate Action: Configure COOP headers on all SSO endpoints.
    • Mitigation: Update and configure reverse proxies to enforce COOP policies.
  • CVE-2026-35214: Arbitrary File Overwrite via Plugin Upload
    • Impact: Potential deletion and overwriting of critical directories.
    • Affected Systems: Budibase server versions vulnerable to path traversal.
    • Immediate Action: Sanitize filenames in upload handlers and create temp folders securely.
    • Mitigation: Implement strict input validation on file paths.
  • CVE-2026-35394: Arbitrary Intent Execution on Mobile Devices
    • Impact: Enables execution of dangerous intents like USSD codes.
    • Affected Systems: Mobile-MCP handling URLs unsafely.
    • Immediate Action: Restrict allowed URL schemes to safe protocols.
    • Mitigation: Upgrade to version 0.0.50 or later.

What to Do Now

  1. Apply all available patches for affected platforms immediately.
  2. Verify the implementation of new security headers and validation checks.
  3. Monitor network traffic for unusual activities related to these vulnerabilities.

Related Resources

  • Official advisories from affected vendors
  • Internal blog posts for detailed mitigation strategies

Keep reading