CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: out-of-bounds read in libsoup websocket frame processing4.8 Medium
- tenda ax3 firmwareTenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of...7.5 High
- tenda ax3 firmwareTenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter...7.5 High
- tenda ax3 firmwareTenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter...7.5 High
- tenda ax3 firmwareTenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2...7.5 High
- tenda ax3 firmwareTenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of...7.5 High
- tenda ax1806 firmwareTenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of...7.5 High
- phpgurukul news portalphpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables...9.8 Critical
- phpgurukul news portalphpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.9.8 Critical
- phpgurukul news portalphpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file...9.1 Critical
- tycc tongyu ax1800 firmwareAn authentication bypass vulnerability in the Tongyu AX1800 Wi-Fi 6 Router with firmware 1.0.0...8.8 High
- semantic-machines vedaAn issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a...8.6 High
- hubert hubInsecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated...6.5 Medium
- hubert hubAn arbitrary file upload vulnerability in the /utils/uploadFile component of Hubert Imoveis e...9.8 Critical
- erambaA CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker...6.5 Medium
- eptura archibusIn Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database...7.5 High
- fabricators vanilla os core imagefabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with othe…6.4 Medium
- langchainLangChain <= 0.3.1 MRKLOutputParser ReDoS8.7 High
- llamaindex, run-llama llama index +1 moreLlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization8.4 High
- llamaindex, run-llama llama index +1 moreLlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion8.7 High
- ollama, red hat ansible automation platform 2, openshift ai (rhoai) +2 moreOllama Multi-Modal Model Image Processing NULL Pointer Dereference8.7 High
- riot os, riot-os riot +1 moreRIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in ethos Serial Frame Parser6.8 Medium
- riot os, riot-os riot +1 moreRIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility2.4 Low
- tinyosTinyOS <= 2.1.2 Stack-Based Buffer Overflow in mcp2200gpio4.8 Medium
- libpngLIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*6.8 Medium
- libpngLIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)6.1 Medium
- anoma opencodeMalicious website can execute commands on the local system through XSS in the OpenCode web UI9.4 Critical
- anoma opencodeOpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution8.8 High
- metabaseMetabase channel test endpoint can reach internal local addresses2.1 Low
- termixTermix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in Browser8.0 High
- thm pilosPILOS affected by a CSRF via GET request allows unintentional termination of all active video conferences2.4 Low
- emlogemlog Arbitrary File Upload Vulnerability9.3 Critical
- software-metadata.pub hermeshermes's raw options logging may disclose secrets passed in via subcommand options argument5.9 Medium
- appsmithAccount Takeover Vulnerability in Appsmith9.7 Critical
- smewebify weberpmesv2, wem-project wem +1 moreWebErpMesv2 has a File Upload Validation Bypass Leading to RCE5.4 Medium
- smewebify weberpmesv2, wem-project wem +1 moreWebErpMesv2 allows unauthenticated API Access8.2 High
- servicenow now assist ai agents, virtual agent api +1 moreUnauthenticated Privilege Escalation in ServiceNow AI Platform9.3 Critical
- flipped-aurora gin-vue-adminGin-vue-admin has arbitrary file upload vulnerability caused by path traversal7.3 High
- linuxfoundation fulcioFulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass5.8 Medium
- orvalorval MCP client is vulnerable to a code injection attack.9.3 Critical
- lycheeorg lycheeLychee cross-album password propagation on Album unlocking2.3 Low
- enhancesoft osticketosTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export Arbitrary File Read8.7 High
- dfir-iris iris, iris-web +1 moreIris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management9.6 Critical
- maximmasiutin tinywebTinyWeb CGI Command Injection10.0 Critical
- yhirose cpp-httplibcpp-httplib vulnerable to a denial of service (DOS) using a zip bomb8.7 High
- envoyproxy gateway, red hat connectivity link 1 +1 moreEnvoy Extension Policy lua scripts injection causes arbitrary command execution8.8 High
- danny-avila librechatLibreChat MCP Stdio Remote Command Execution9.1 Critical
- weblate wlcwlc may leak API keys due to an insecure API key configuration5.3 Medium
- avahiAvahi has a reachable assertion in lookup_start6.5 Medium
- avahiAvahi has a reachable assertion in lookup_multicast_callback6.5 Medium
- Show moreLoading…