CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- opajaap wp photo album plusWP Photo Album Plus <= 9.1.05.008 - Reflected Cross-Site Scripting7.1 High
- auntyfey smart combination lockAuntyFey Smart Combination Lock BLE Connection Flood DoS5.3 Medium
- mohammed kaludi amp for wp – accelerated mobile pagesAMP for WP – Accelerated Mobile Pages <= 1.1.9 - Cross-Site Request Forgery to Comment Submission4.3 Medium
- openflagr flagrOpenFlagr <= 1.1.18 Authentication Bypass via Prefix Whitelist Path Normalization9.3 Critical
- microsoft playwrightMicrosoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation7.2 High
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter6.4 Medium
- roxnor emailkit – email customizer for woocommerce & wpEmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal6.5 Medium
- fujitsu client computing limited security solution authconductor client basic v2Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2...8.5 High
- cbutlerjr wp-members membership pluginWP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Files5.3 Medium
- tp-link systems inc. archer be400, tp-link archer be400 firmware +1 moreNull Pointer Dereference Vulnerability in Malformed 802.11 Frame of TP-Link Archer BE4007.1 High
- invoiceninjainvoiceninja Migration Import Import.php copy server-side request forgery5.1 Medium
- carboneio carbonecarboneio carbone Formatter input.js prototype pollution2.3 Low
- gnu wget2Wget2: gnu wget2: memory corruption and crash via filename sanitization logic with attacker-controlled urls7.6 High
- gnu wget2Wget2: arbitrary file write via metalink path traversal in gnu wget28.8 High
- https://github.com/foobaroy/ foomuuriA crafted "interface" input parameter can lead to integrity loss of the firewall configuration7.0 High
- https://github.com/foobaroy/ foomuuriLack of client authorization allows arbitrary users to influence the firewall configuration5.1 Medium
- sylphx filesystem mcp@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading...7.5 High
- efforthye fast-filesystem-mcpfast-filesystem-mcp has a Path Traversal vulnerability7.5 High
- softwareag arisIn Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate...6.5 Medium
- softwareag arisA file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code...6.8 Medium
- openairinterface oai-cn5g-amfOpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests....7.5 High
- grabaperch perchA stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An...6.1 Medium
- openairinterface oai-cn5g-amfOpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages....7.5 High
- gongrzhe terminal-controller-mcpterminal-controller-mcp vulnerable to Command Injection10.0 Critical
- sonirico mcp-shellA command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows...6.5 Medium
- google chromeInsufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed...8.8 High
- projectworlds house rental and property listing, house rental and property listing project +1 moreprojectworlds House Rental and Property Listing Signup register.php unrestricted upload6.9 Medium
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +43 more +45 moreDouble Free in Graphics7.8 High
- qualcomm wcn7861 firmware, qualcomm, inc. snapdragon +1 moreBuffer Over-read in WLAN Firmware6.5 Medium
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +43 more +45 moreBuffer Copy Without Checking Size of Input in DSP Service7.8 High
- qualcomm qam8255p firmware, qam8650p firmware, qam8775p firmware +16 more +18 moreImproper Validation of Array Index in Automotive Linux OS7.8 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +43 more +45 moreBuffer Copy without Checking Size of Input in DSP Service7.8 High
- qualcomm fastconnect 7800 firmware, qcc2072 firmware, wcd9378c firmware +12 more +14 moreUntrusted Pointer Dereference in Camera7.8 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +173 more +175 moreInformation Exposure in Computer Vision5.5 Medium
- qualcomm cologne firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +17 more +19 moreDouble Free in Video7.8 High
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +202 more +204 moreUse of Uninitialized Variable in HLOS7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +111 more +113 moreOut-of-bounds Write in HLOS7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +103 more +105 moreReusing a Nonce, Key Pair in Encryption in Automotive Platform8.4 High
- qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +80 more +82 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver6.7 Medium
- qualcomm cologne firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +23 more +25 moreUntrusted Pointer Dereference in Video7.8 High
- qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +183 more +185 moreUse After Free in HLOS7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +62 more +64 moreUse After Free in Camera Driver6.7 Medium
- qualcomm fastconnect 7800 firmware, qmp1000 firmware, sm8735 firmware +16 more +18 moreUse After Free in Camera Driver6.7 Medium
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +43 more +45 moreBuffer Copy Without Checking Size of Input in Camera Driver6.7 Medium
- qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +144 more +146 moreBuffer Copy Without Checking Size of Input in Camera Driver6.7 Medium
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +237 more +239 moreUse After Free in HLOS6.6 Medium
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +72 more +74 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver6.7 Medium
- qualcomm ar8031 firmware, ar8035 firmware, csr8811 firmware +297 more +299 moreBuffer Over-read in Video6.1 Medium
- qualcomm ar8031 firmware, ar8035 firmware, c-v2x 9150 firmware +221 more +223 moreBuffer Over-read in Video5.5 Medium
- projectworlds house rental and property listing, house rental and property listing project +1 moreprojectworlds House Rental and Property Listing complaint.php cross site scripting4.8 Medium
- Show moreLoading…