CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- kromit titraTitra APIs have Improper Access Control6.8 Medium
- inim electronics s.r.l. smartliving smartlan/g/siINIM Electronics Smartliving SmartLAN/G/SI <=6.x Hard-coded Credentials Vulnerability9.3 Critical
- inim electronics s.r.l. smartliving smartlan/g/siINIM Electronics Smartliving SmartLAN/G/SI <=6.x Unauthenticated SSRF via GetImage6.9 Medium
- inim electronics s.r.l. smartliving smartlan/g/siINIM Electronics SmartLiving SmartLAN/G/SI <=6.x Remote Command Execution8.7 High
- guangzhou v v-sol gpon/epon olt platformV-SOL GPON/EPON OLT Platform V2.03.62R_IPv6 v2.03 Open Redirect via bindProfile.html5.1 Medium
- iwt ltd. facesentry access control system, iwt facesentry access control system firmware +1 moreFaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability6.8 Medium
- iwt ltd. facesentry access control system, iwt facesentry access control system firmware +1 moreFaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure9.1 Critical
- nrel beoptNREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution8.6 High
- leica geosystems ag geosystems gr10/gr25/gr30/gr50 gnssLeica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Cross-Site Request Forgery5.1 Medium
- devolo ag dlan cockpitdevolo dLAN Cockpit 4.3.1 Unquoted Service Path Privilege Escalation8.5 High
- flir systems, inc. thermal camera pt-seriesFLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command Injection9.3 Critical
- flir systems, inc. thermal camera fc-s/ptFLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Authenticated OS Command Injection8.7 High
- flir systems, inc. thermal camera f/fc/pt/dFLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 Hard-Coded SSH Credentials Vulnerability9.3 Critical
- flir systems, inc. thermal camera f/fc/pt/d streamFLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure8.7 High
- flir systems, inc. thermal camera f/fc/pt/dFLIR Thermal Camera F/FC/PT/D 8.0.0.64 Information Disclosure via File Reading8.7 High
- bluelabsio records-moverbluelabsio records-mover Table Object sql injection4.8 Medium
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability5.5 Medium
- rezmoss axios4goaxios4go's Race Condition in Shared HTTP Client Allows Proxy Configuration Leak8.2 High
- color iccdeviccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp8.8 High
- commvault webconsole, commvault +1 moreStored Cross-Site Scripting1.8 Low
- color iccdeviccDEV has heap-buffer-overflow in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp8.8 High
- color iccdeviccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp8.8 High
- color iccdeviccDEV has Type Confusion in ToXmlCurve() at IccXML/IccLibXML/IccMpeXml.cpp8.8 High
- color iccdeviccDEV has Type Confusion in CIccTag:IsTypeCompressed()5.4 Medium
- color iccdeviccDEV has Type Confusion in CIccTagXmlTagData::ToXml()6.3 Medium
- color iccdeviccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp6.5 Medium
- color iccdeviccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp8.8 High
- color iccdeviccDEV has Undefined Behavior in CIccTagCurve::CIccTagCurve()7.1 High
- color iccdeviccDEV has Undefined Behavior in CIccTagLutAtoB::Validate()7.1 High
- color iccdeviccDEV has Undefined Behavior in CIccTagLut16::Read()7.1 High
- color iccdeviccDEV has Undefined Behavior in CIccTagSpectralViewingConditions()7.1 High
- danny-avila librechatLibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions9.1 Critical
- gnu libtasn1CVE-2025-131517.5 High
- color iccdeviccDEV has Type Confusion in icStatusCMM::CIccEvalCompare::EvaluateProfile()8.8 High
- danny-avila librechatLibreChat has Insufficient Access Control for Agent Permission Queries4.3 Medium
- color iccdeviccDEV has heap-buffer-overflow in CIccXmlArrayType::ParseText()8.8 High
- danny-avila librechatLibreChat has Insufficient Access Control for Agent Files7.1 High
- color iccdeviccDEV has Undefined Behavior runtime error: nan is outside the range .. IccProfLib/IccTagBasic.cpp7.1 High
- open microscopy environment bio-formatsBio-Formats <= 8.3.0 Memoizer Unsafe Deserialization via .bfmemo Cache Files6.8 Medium
- open microscopy environment bio-formatsBio-Formats <= 8.3.0 XXE in Leica XLEF Metadata Parser4.6 Medium
- openldap foundation openldapOpenLDAP LMDB mdb_load Heap Buffer Underflow in readline()4.6 Medium
- cmu panda3dPanda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca()6.9 Medium
- cmu panda3dPanda3D <= 1.10.16 egg-mkfont Format String Information Disclosure5.1 Medium
- cmu panda3dPanda3D <= 1.10.16 egg-mkfont Stack Buffer Overflow6.9 Medium
- ruby zlib, red hat logging subsystem for red hat openshift, build of openjdk 1.8 +14 more +16 morezlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()4.6 Medium
- columbia weather systems microserver, columbiaweather weather microserver firmware +1 moreColumbia Weather Systems MicroServer Command Shell in Externally Accessible Directory8.6 High
- columbia weather systems microserverColumbia Weather Systems MicroServer Cleartext Storage in a File or on Disk7.1 High
- columbia weather systems microserver, columbiaweather weather microserver firmware +1 moreColumbia Weather Systems MicroServer Improper Restriction of Communication Channel to Intended Endpoints8.7 High
- open-metadata openmetadataOpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE8.5 High
- coreshopCoreShop Vulnerable to SQL Injection via Admin Reports4.9 Medium
- Show moreLoading…