CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Driver). The...5.8 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.4 Medium
- oracle graalvm, graalvm for jdk, jdk +4 more +6 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...6.1 Medium
- oracle graalvm, graalvm for jdk, jdk +19 more +21 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...7.4 High
- oracle apex, oracle corporation apex sample applications +1 moreVulnerability in the Oracle APEX Sample Applications product of Oracle APEX (component:...5.4 Medium
- oracle corporation zfs storage appliance kit, oracle sun zfs storage appliance kit +1 moreVulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component:...2.3 Low
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...5.3 Medium
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The...5.3 Medium
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Driver). The...5.8 Medium
- oracle corporation siebel crm deployment, oracle siebel customer relationship management deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...7.5 High
- oracle graalvm, graalvm for jdk, jdk +4 more +6 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...4.8 Medium
- oracle corporation utilities application framework, oracle utilities framework +1 moreVulnerability in the Oracle Utilities Application Framework product of Oracle Utilities...5.4 Medium
- oracle life sciences central designerVulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences...6.5 Medium
- oracle planning and budgeting cloud serviceVulnerability in the Oracle Planning and Budgeting Cloud Service product of Oracle Hyperion ...4.2 Medium
- python software foundation cpythonHeader injection in http.cookies.Morsel6.0 Medium
- python software foundation cpythonPOP3 command injection in user-controlled commands5.9 Medium
- python software foundation cpythonIMAP command injection in user-controlled commands5.9 Medium
- milner imagedirector captureHard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector Capture6.9 Medium
- milner imagedirector captureInsecure Encryption Algorithms Enable Brute-Force Database Credential Access in Milner ImageDirector Capture7.2 High
- milner imagedirector captureInsufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture8.5 High
- milner imagedirector captureInsecure Masked Credential Fields Enable Database Credential Access in Milner ImageDirector Capture8.5 High
- milner imagedirector captureHardcoded Encryption Key Enables Database Credential Access in Milner ImageDirector Capture8.5 High
- python software foundation cpythonHeader injection via newlines in data URL mediatype6.0 Medium
- python software foundation cpythonwsgiref.headers.Headers allows header newline injection5.9 Medium
- python software foundation cpythonFolding email comments of unfoldable characters doesn't preserve parenthesis5.7 Medium
- fleetdm fleetFleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment9.3 Critical
- fleetdm fleetFleet has an Access Control vulnerability in debug/pprof endpoints6.3 Medium
- fleetdm fleetFleet Windows MDM endpoint has a Cross-site Scripting vulnerability5.5 Medium
- aquaplatform revive adserver, revive adserver +1 moreHackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the ...6.1 Medium
- aquaplatform revive adserver, revive adserver +1 moreHackerOne community member Huynh Pham Thanh Luc (nigh7c0r3) has reported a reflected XSS...6.1 Medium
- aquaplatform revive adserver, revive adserver +1 moreHackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the...6.1 Medium
- aquaplatform revive adserver, revive adserver +1 moreHackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass...7.1 High
- aquaplatform revive adserver, revive adserver +1 moreHackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in...2.7 Low
- newplane open5gsOpen 5GS WebUI uses a hard-coded JWT signing key6.5 Medium
- binary-parserCVE-2026-12456.5 Medium
- nvidia cuda toolkitNVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading...6.7 Medium
- nvidia cuda toolkitNVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker...7.3 High
- nvidia cuda toolkitNVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an...7.3 High
- nvidia cuda toolkitNVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could...7.3 High
- nvidia merlin transformers4recNVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could...7.8 High
- external-secrets, external-secrets external secrets operator, red hat external secrets operator for red hat openshift +1 more +3 moreExternal Secrets Operator insecurely retrieves secrets through the getSecretKey templating function9.3 Critical
- ibm applinxMultiple vulnerabilities found in IBM ApplinX.5.3 Medium
- ibm applinxMultiple vulnerabilities found in IBM ApplinX.7.3 High
- ibm applinxMultiple vulnerabilities found in IBM ApplinX.3.5 Low
- ibm applinxMultiple vulnerabilities found in IBM ApplinX.3.1 Low
- ibm applinxMultiple vulnerabilities found in IBM ApplinX.5.4 Medium
- ibm applinxMultiple vulnerabilities found in IBM ApplinX.6.4 Medium
- ibm application gatewaySecurity vulnerabilities have been found in IBM Application Gateway5.4 Medium
- ibm application gatewaySecurity vulnerabilities have been found in IBM Application Gateway5.4 Medium
- ibm sterling connect:express adapter for sterling b2b integrator 5.2.0, sterling connect\ +1 moreMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.6.3 Medium
- Show moreLoading…