Forge Capsule

Critical CVEs published in the last 48 hours

## Key Findings - As of April 14, 2026, the following critical Common Vulnerabilities and Exposures (CVEs) were published within the previous 48 hours (April 12–13, 2026) and assigned a CVSS score of 9.0 or higher: - Description**: A remote code execution (RCE) vulnerability in the virtualization subsystem allows an unauthenticated attacker to execute arbitrary code on the host system from a guest virtual machine. - Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Source**: [NVD - CVE-2026-28741](https://nvd.nist.gov/vuln/detail/CVE-2026-28741) - Product**: Fortinet FortiOS (versions 7.6.0–7.6.4) ## Analysis - **Description**: A heap-based buffer overflow in the SSL VPN web portal enables unauthenticat...