CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- cisco packaged contact center enterprise, unified contact center enterprise +1 moreCisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability4.8 Medium
- cisco ultra-reliable wireless backhaulCisco IEC6400 Edge Compute Appliance SSH Denial of Service Vulnerability5.3 Medium
- cisco intersight virtual applianceCisco Intersight Virtual Appliance Privilege Escalation Vulnerability6.0 Medium
- cisco packaged contact center enterprise, unified contact center enterprise +1 moreCisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability4.8 Medium
- theupdateframework go-tufgo-tuf improperly validates the configured threshold for delegations5.9 Medium
- theupdateframework go-tufgo-tuf affected by client DoS via malformed server response5.9 Medium
- juneandgreen sm-cryptosm-crypto Affected by Signature Forgery in SM2-DSA7.5 High
- juneandgreen sm-cryptosm-crypto Affected by Signature Malleability in SM2-DSA7.5 High
- juneandgreen sm-cryptosm-crypto Affected by Private Key Recovery in SM2-PKE9.1 Critical
- coreshopCoreShop Vulnerable to SQL Injection via Admin customer-company-modifier6.9 Medium
- vllm, red hat ai inference server, ai inference server 3.2 +6 more +8 morevLLM affected by RCE via auto_map dynamic module loading during model initialization8.8 High
- lxsmnsyc serovalseroval Affected by Remote Code Execution via JSON Deserialization7.5 High
- lxsmnsyc serovalseroval Affected by Prototype Pollution via JSON Deserialization7.3 High
- laravel reverbLaravel Redis Horizontal Scaling Insecure Deserialization9.8 Critical
- jamf pro[PI141230] Fixed A broken access control issue.5.3 Medium
- isc bind 9, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreMalformed BRID/HHIT records can cause named to terminate unexpectedly7.5 High
- apache solrApache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin8.2 High
- apache solrApache Solr: Insufficient file-access checking in standalone core-creation requests7.1 High
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 morenet: sock: fix hardened usercopy panic in sock_recv_errqueue5.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.11 +1 moreKeycloak-server: keycloak: improper access control in admin rest api leads to information disclosure2.7 Low
triton-vmcrates.ioTriton VM has a Soundness Vulnerability due to Improper Sampling of Randomness1.7 Lowdyn-futurecrates.ioDynFuture Drop Can Construct a Dangling Reference6.3 Medium- m-files serverDenial of Service condition in M-Files Server6.9 Medium
- fsas technologies inc. serverview agents for windowsThe installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely...8.4 High
- linux, linux kernel, siemens ruggedcom rst2428p +2 morenet/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset5.5 Medium
- gnu inetutils, debian linux +1 moretelnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value...9.8 Critical
- red hat build of keycloak 26.4, build of keycloak 26.4.9 +1 moreOrg.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled users6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.11, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak.protocol.oidc: keycloak refresh token reuse bypass via toctou race condition3.1 Low
- linuxfoundation everest, everest everest-core +1 moreEVerest's unlimited connections can lead to DoS through operating system resource exhaustion7.4 High
- kodezen academy lms – wordpress lms plugin for complete elearning solutionAcademy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- imagemagick, dlemstra magick.net +1 moreImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load6.5 Medium
- imagemagickImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via Malformed XML1.8 Low
- anthropic claude code, anthropics claude-code +1 moreClaude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation5.3 Medium
dnsmasqOSS-FuzzHeap-buffer-overflow in hostname_issubdomainNo scorelibvpxOSS-FuzzHeap-buffer-overflow in vpx_wb_write_literalNo score- wukongopensource wukongcrm, 5kcrm wukong crm +1 moreWuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization5.3 Medium
- tenda ax1803 firmwareTenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the...7.5 High
- tenda ax1806 firmwareTenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of...7.5 High
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of...7.5 High
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the...7.5 High
- tenda ax1806 firmwareTenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of...7.5 High
- tenda ax1806 firmwareTenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the...7.5 High
- tenda ax3 firmwareTenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv...9.8 Critical
- tenda ax3 firmwareTenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter...9.8 Critical
- tenda ax3 firmwareTenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter,...9.8 Critical
- ollamaAn issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs...7.5 High
- ollamaAn issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF...7.5 High
- thestarware worklogproThe WorklogPRO - Timesheets for Jira plugin in Jira Data Center before version 4.23.6-jira10 and...5.4 Medium
- cloudflare wranglerOS Command Injection in `wrangler pages deploy`7.7 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...8.2 High
- Show moreLoading…