CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- ibm sterling connect:express adapter for sterling b2b integrator 5.2.0, sterling connect\ +1 moreMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.5.4 Medium
- ibm sterling connect:express adapter for sterling b2b integrator 5.2.0, sterling connect\ +1 moreMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.6.1 Medium
- ibm sterling connect:express adapter for sterling b2b integrator 5.2.0, sterling connect\ +1 moreMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.6.3 Medium
- ibm sterling connect:express adapter for sterling b2b integrator 5.2.0, sterling connect\ +1 moreMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.6.3 Medium
- ibm business automation workflow containers, business automation workflow +1 moreMultiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 20255.5 Medium
- ibm business automation workflow containers, business automation workflow +1 moreMultiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 20254.7 Medium
- ibm concertMultiple Vulnerabilities in IBM Concert Software8.8 High
- ibm concertMultiple Vulnerabilities in IBM Concert Software5.9 Medium
- ibm concertMultiple Vulnerabilities in IBM Concert Software5.9 Medium
- ibm sterling connect:direct for unix containerIBM Sterling Connect:Direct for UNIX Container is affected by vulnerability where hard-coded credentials are embeeded in the product for its internal use.8.4 High
- ibm aspera consoleMultiple vulnerabilities in IBM Aspera Console4.9 Medium
- ibm licensing operatorLicense Service: Privilege escalation vulnerability8.4 High
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of...6.1 Medium
- meddream pacs premium, pacs server +1 moreMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php...6.1 Medium
- meddream pacs premium, pacs server +1 moreMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php...6.1 Medium
- meddream pacs premium, pacs server +1 moreMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php...6.1 Medium
- meddream pacs premium, pacs server +1 moreMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php...6.1 Medium
- meddream pacs premium, pacs server +1 moreMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php...6.1 Medium
- meddream pacs premium, pacs server +1 moreMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php...6.1 Medium
- meddream pacs premium, pacs server +1 moreMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php...6.1 Medium
- meddream pacs premium, pacs server +1 moreMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php...6.1 Medium
- meddream pacs premium, pacs server +1 moreMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php...6.1 Medium
- meddream pacs premium, pacs server +1 moreA reflected cross-site scripting (xss) vulnerability exists in the ldapUser functionality of...6.1 Medium
- meddream pacs premium, pacs server +1 moreAn arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS...9.6 Critical
- wpdevteam notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification barNotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset4.3 Medium
- jeff starr head meta dataHead Meta Data <= 20251118 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta6.4 Medium
- wpdevteam notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification barNotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'7.2 High
- getwpfunnels creator lms – online courses and elearning pluginCreator LMS – The LMS for Creators, Coaches, and Trainers <= 1.1.12 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update8.8 High
- flatboy flatpm – ad manager, adsense and custom codeFlatPM – Ad Manager, AdSense and Custom Code <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Post Meta6.4 Medium
- stellarwp the events calendarThe Events Calendar <= 6.15.13 - Missing Authorization to Authenticated (Subscriber+) Data Migration Control5.4 Medium
- posimyththemes nexter extension – security, performance, code snippets & site toolkitNexter Extension – Site Enhancements Toolkit <= 4.4.6 - Unauthenticated PHP Object Injection via 'nxt_unserialize_replace'8.1 High
- themeum tutor lms – elearning and online course solutionTutor LMS – eLearning and online course solution <= 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Limited Attachment Deletion5.4 Medium
- rockwell automation armorstart® lt, rockwellautomation armorstart lt firmware +1 moreArmorStart® LT - Multiple Denial-of-Service Vulnerabilities8.7 High
- Show moreLoading…