Tech radar: week 17 of 2026
20–26 Apr 2026
In the week of 20–26 Apr 2026, 7 notable open-source releases shipped (including Laravel v12.58.0, Anthropic Python SDK v0.97.0, Electron electron v41.3.0), CISA added 14 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Alberta startup sells no-tech tractors for half price” (2320 points).
Releases worth knowing about
Web frameworks
[12.x] Memoize credentials in SqsConnector by @kieranbrown in https://github.com/laravel/framework/pull/59867
AI & machine learning
api: CMA Memory public beta (fc30ebe)
OpenAI Privacy Filtermentions security
Mobile & desktop
Fixed webContents.printToPDF rejecting on all subsequent calls after a prior call was rejected with an invalid pageRanges value. 51221 <sup(Also in 40
Cloud & DevOps
See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.
https://code.visualstudio.com/updates/v1117
Today, we are excited to share the 7.8.0 stable release 🎉mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 14.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2024-27199ransomware use | JetBrains TeamCity | JetBrains TeamCity Relative Path Traversal Vulnerability | 2026-04-20 |
| CVE-2026-33825ransomware use | Microsoft Defender | Microsoft Defender Insufficient Granularity of Access Control Vulnerability | 2026-04-22 |
| CVE-2023-27351ransomware use | PaperCut NG/MF | PaperCut NG/MF Improper Authentication Vulnerability | 2026-04-20 |
| CVE-2024-57728ransomware use | SimpleHelp SimpleHelp | SimpleHelp Path Traversal Vulnerability | 2026-04-24 |
| CVE-2024-57726ransomware use | SimpleHelp SimpleHelp | SimpleHelp Missing Authorization Vulnerability | 2026-04-24 |
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manger | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | 2026-04-20 |
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 2026-04-20 |
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 2026-04-20 |
| CVE-2025-29635 | D-Link DIR-823X | D-Link DIR-823X Command Injection Vulnerability | 2026-04-24 |
| CVE-2025-2749 | Kentico Kentico Xperience | Kentico Xperience Path Traversal Vulnerability | 2026-04-20 |
| CVE-2026-39987 | Marimo Marimo | Marimo Remote Code Execution Vulnerability | 2026-04-23 |
| CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability | 2026-04-20 |
| CVE-2024-7399 | Samsung MagicINFO 9 Server | Samsung MagicINFO 9 Server Path Traversal Vulnerability | 2026-04-24 |
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 2026-04-20 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Alberta startup sells no-tech tractors for half price2320 points · 779 comments · 2026-04-22
- 02John Ternus to become Apple CEO2177 points · 1331 comments · 2026-04-20
- 03DeepSeek v42091 points · 1607 comments · 2026-04-24
- 04GPT-5.51580 points · 1056 comments · 2026-04-23
- 05Framework Laptop 13 Pro1479 points · 769 comments · 2026-04-21
- 06All phones sold in the EU to have replaceable batteries from 20271446 points · 1268 comments · 2026-04-20
- 07The West forgot how to make things, now it’s forgetting how to code1198 points · 851 comments · 2026-04-26
- 08Laws of Software Engineering1172 points · 529 comments · 2026-04-21
- 09I bought Friendster for $30k – Here's what I'm doing with it1116 points · 614 comments · 2026-04-26
- 10I am building a cloud1115 points · 563 comments · 2026-04-23
- 11ChatGPT Images 2.01049 points · 975 comments · 2026-04-21
- 12Windows 9x Subsystem for Linux1011 points · 255 comments · 2026-04-22
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.