---
title: "Security digest: April 24, 2026"
url: https://erroneo.us/security/2026-04-24/
description: "April 24, 2026 vulnerability digest: 4 CISA KEV additions (D-Link, Samsung, SimpleHelp); 7 critical advisories (Go, GitHub Actions, npm, PyPI). What to…"
type: security-digest-day
section: "Security Digest"
date_published: 2026-04-24
date_modified: 2026-04-24
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: April 24, 2026

4 known exploited (cisa kev) additions and 7 critical advisories.

## Take stock

- Do you run any of these? D-Link DIR-823X, Samsung MagicINFO 9 Server, SimpleHelp SimpleHelp. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-05-08.
- Go: 4 critical advisories ( github.com/woven-planet/go-zserio , github.com/dgraph-io/dgraph/v25 , github.com/dgraph-io/dgraph/v24 , github.com/dgraph-io/dgraph ). Check with govulncheck ./... .
- npm: 2 critical advisories ( @google/gemini-cli , electerm ). Check with npm audit (or: npm ls <package>) .
- GitHub Actions: 1 critical advisory ( google-github-actions/run-gemini-cli ). Check with grep -rn 'uses: <owner>/<action>' .github/workflows .
- PyPI: 1 critical advisory ( litellm ). Check with pip-audit (or: pip show <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2025-29635](https://erroneo.us/security/cve/CVE-2025-29635/index.md) D-Link DIR-823X: D-Link DIR-823X Command Injection Vulnerability (CISA due 2026-05-08)
- [CVE-2024-7399](https://erroneo.us/security/cve/CVE-2024-7399/index.md) Samsung MagicINFO 9 Server: Samsung MagicINFO 9 Server Path Traversal Vulnerability (CISA due 2026-05-08)
- [CVE-2024-57728](https://erroneo.us/security/cve/CVE-2024-57728/index.md) SimpleHelp  SimpleHelp: SimpleHelp Path Traversal Vulnerability (CISA due 2026-05-08)
- [CVE-2024-57726](https://erroneo.us/security/cve/CVE-2024-57726/index.md) SimpleHelp  SimpleHelp: SimpleHelp Missing Authorization Vulnerability (CISA due 2026-05-08)

## Critical advisories

- [GHSA-xhj4-g6w8-2xjw](https://erroneo.us/security/ghsa/GHSA-xhj4-g6w8-2xjw/index.md) go-zserio has Unbounded Memory Allocation for All Platforms — Go github.com/woven-planet/go-zserio < 0.9.1 → 0.9.1
- [CVE-2026-41328](https://erroneo.us/security/cve/CVE-2026-41328/index.md) Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field — Go github.com/dgraph-io/dgraph/v25 < 25.3.3 → 25.3.3; Go github.com/dgraph-io/dgraph/v24 <= 24.1.8 → no fix; Go github.com/dgraph-io/dgraph <= 1.2.8 → no fix
- [CVE-2026-12537](https://erroneo.us/security/cve/CVE-2026-12537/index.md) Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses — npm @google/gemini-cli < 0.39.1 → 0.39.1; npm @google/gemini-cli = 0.40.0-preview.2 → 0.40.0-preview.3; GitHub Actions google-github-actions/run-gemini-cli < 0.1.22 → 0.1.22
- [CVE-2026-41492](https://erroneo.us/security/cve/CVE-2026-41492/index.md) Dgraph: Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars — Go github.com/dgraph-io/dgraph/v25 < 25.3.3 → 25.3.3; Go github.com/dgraph-io/dgraph/v24 <= 24.1.8 → no fix; Go github.com/dgraph-io/dgraph <= 1.2.8 → no fix
- [CVE-2026-42208](https://erroneo.us/security/cve/CVE-2026-42208/index.md) LiteLLM has SQL Injection in Proxy API key verification — PyPI litellm >= 1.81.16, < 1.83.7 → 1.83.7
- [CVE-2026-41327](https://erroneo.us/security/cve/CVE-2026-41327/index.md) Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field — Go github.com/dgraph-io/dgraph/v25 < 25.3.3 → 25.3.3; Go github.com/dgraph-io/dgraph/v24 <= 24.1.8 → no fix; Go github.com/dgraph-io/dgraph <= 1.2.8 → no fix
- [CVE-2026-41501](https://erroneo.us/security/cve/CVE-2026-41501/index.md) electerm has Command Injection via runLinux funtion — npm electerm < 3.3.8 → 3.3.8

---
Source page: https://erroneo.us/security/2026-04-24/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt