CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- armurox logging redactor, loggingredactor +1 moreloggingredactor converts non-string types to string types in logs2.0 Low
- preactjs preactPreact has JSON VNode Injection issue7.2 High
- n8nn8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks6.5 Medium
- miniflux project miniflux, miniflux v2 +1 moreMiniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources6.5 Medium
- n8nn8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling10.0 Critical
- python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 moreurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)8.9 High
- pnpm, red hat jboss enterprise application platform 8, jboss enterprise application platform expansion pack +2 morepnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"8.8 High
- pnpm, red hat jboss enterprise application platform 8, jboss enterprise application platform expansion pack +2 morepnpm Lockfile Integrity Bypass Allows Remote Dynamic Dependencies7.5 High
- wikimedia foundation mediawiki - proofreadpage extension, wikisource proofread page +1 moreStored XSS through a system message and a user-provided parameter in ProofreadPage6.1 Medium
- pnpmpnpm vulnerable to Command Injection via environment variable substitution7.6 High
- rustfsRustFS gRPC GetMetrics deserialization panic enables remote DoS5.5 Medium
- tarkov data manager, the-hideout tarkov-data-manager +1 moreTarkov Data Manager has Authenticated SQL Injection7.2 High
- tarkov data manager, the-hideout tarkov-data-manager +1 moreTarkov Data Manager has Unauthenticated Reflected XSS9.3 Critical
- rustfsRustFS Path Traversal Vulnerability8.8 High
- tarkov data manager, the-hideout tarkov-data-manager +1 moreTarkov Data Manager Authentication Bypass vulnerability9.8 Critical
- color iccdeviccDEV has Null Pointer Dereference in CIccProfile::CheckTagTypes()6.5 Medium
- css project css, wikimedia foundation mediawiki - css extension +1 morePath Traversal vulnerability in CSS extension on certain web servers7.5 High
- wikimedia foundation mediawiki - visualdata extension, wikisphere visualdata +1 moreVisualData extension: Regular Expression Denial of Service (ReDoS) via crafted user input5.3 Medium
- quarkusQuarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write5.9 Medium
- citeum openctiOpen Redirect in OpenCTI's SAML Authentication Flow5.4 Medium
- eng knowage, knowagelabs knowage-server +1 moreKnowage is vulnerable to blind server-side request forgery (SSRF)6.3 Medium
- efacec qc 60/90/120INFORMATION DISCLOSURE VIA CURL REQUESTS (OCPP)5.3 Medium
- color iccdeviccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()8.8 High
- color iccdeviccDEV has heap-buffer-overflow vulnerability on IccTagXml()7.8 High
- color iccdeviccDEV is Vulnerable to Null Pointer Dereference in CIccProfileXml::ParseBasic() Leading to Denial of Service5.5 Medium
- color iccdeviccDEV has Undefined Behavior (UB) - Invalid Enum Value5.5 Medium
- color iccdeviccDEV has Undefined Behavior - Null Pointer Passed to memcpy() in CIccTagSparseMatrixArray6.1 Medium
- color iccdevHeap Buffer Overflow in iccDEV ToneMap Parser6.6 Medium
- color iccdevStack Overflow in iccDEV Calculator Parser5.5 Medium
- color iccdevNULL Pointer Dereference in iccDEV XML Tag Parser5.5 Medium
- color iccdevStack Overflow in iccDEV XML Calculator Macro Expansion5.5 Medium
- color iccdevNULL Pointer Dereference in iccDEV XML Parser5.5 Medium
- color iccdevNULL Pointer Dereference in iccDEV XML Calculator Parser5.5 Medium
- color iccdevNULL Pointer Dereference in iccDEV Signature Parser5.5 Medium
- abb webpro snmp card powervalue, webpro snmp card powervalue ul +1 moreIdle session timeout is not configured for multiple open ports7.1 High
- color iccdevNULL Pointer Dereference in iccDEV Unknown Tag Parser5.5 Medium
- color iccdevDivision by Zero in iccDEV TIFF Image Reader5.5 Medium
- efacec qc 60/90/120INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM6.8 Medium
- abb webpro snmp card powervalue, webpro snmp card powervalue ul +1 moreAuthentication bypass by brute forcing Authentication Headers8.4 High
- devolutions powershell universalCross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects...6.1 Medium
- abb webpro snmp card powervalue, webpro snmp card powervalue ul +1 moreImproper implementation of Modbus protocol leading to DOS attack7.1 High
- efacec qc 60/90/120PRIVILEGE ESCALATION VIA SUDO COMMAND8.6 High
- efacec qc 60/90/120FRAIL SECURITY IN MQTT PROTOCOL ALLOWS AN ATTACKER MODIFY CRITICAL PARAMETERS8.9 High
- cisco identity services engine softwareCisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability4.9 Medium
- cisco secure firewall threat defense (ftd) software, utd snort ips engine software +1 moreCisco Snort DCERPC Stub Data Out of Bounds Read5.3 Medium
- cisco secure firewall threat defense (ftd) software, utd snort ips engine software +1 moreMultiple Cisco Products Snort 3 DCERPC Vulnerabilities5.8 Medium
- efacec qc 60/90/120EXCHANGE OF CREDENTIALS IN CLEAR TEXT8.7 High
- efacec qc 60/90/120WEEK ENCODING FOR PASSWORDS6.9 Medium
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.4 for spring boot 3.5.11 +33 more +35 moreUndertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf9.6 Critical
- efacec qc 60/90/120DENIAL OF SERVICE FOR CONCURRENT CONNECTIONS ON TELNET9.2 Critical
- Show moreLoading…