Intelligence item summarizing vulnerability disclosures from April 2026 across multiple product categories including web frameworks (ThinkPHP 5.0.23 RCE), business software (Fortra GoAnywhere MFT authentication bypass), database systems (ELBA5 RCE), and desktop applications. Multiple high-severity remote code execution and local privilege escalation vulnerabilities are documented with CVSS scores ranging from 5.3 to 9.8, alongside associated exploit references.