CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- getsimple cms my smtp contact plugin, get-simple getsimplecms +1 moreGetSimple CMS My SMTP Contact Plugin 1.1.2 - Stored XSS4.8 Medium
- get-simple getsimplecms, getsimple cms custom js plugin +1 moreGetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE8.5 High
- get-simple my smtp contact plugin, getsimplecms +1 moreGetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection8.6 High
- oki print job accountingPrint Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path8.5 High
- fyrolabs llc. pingzapperPingzapper 2.3.1 - 'PingzapperSvc' Unquoted Service Path8.5 High
- oki configuration toolConfiguration Tool 1.6.53 - 'OpLclSrv' Unquoted Service Path8.5 High
- sandboxie-plus sandboxie plusSandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path8.5 High
- freelanFreeLAN 2.2 - 'FreeLAN Service' Unquoted Service Path8.5 High
- realtek semiconductor corp. wireless lan utilityRealtek Wireless LAN Utility 700.1631 - 'Realtek11nSU' Unquoted Service Path8.5 High
- luidia ebeam interactive suiteeBeam Interactive Suite 3.6 - 'eBeam Stylus Driver' Unquoted Service Path8.5 High
- luidia ebeam education suiteeBeam Education Suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service Path8.5 High
- geogebra graphing calculatorGeoGebra Graphing Calculator 6.0.631.0 - Denial Of Service6.7 Medium
- geogebra classicGeoGebra Classic 5.0.631.0-d - Denial of Service6.7 Medium
- geogebra cas calculatorGeoGebra CAS Calculator 6.0.631.0 - Denial of Service4.6 Medium
- vfsforgit vfs for gitVFS for Git 1.0.21014.1 - 'GVFS.Service' Unquoted Service Path8.5 High
- vestacpVestaCP < 0.9.8-25 - Stored Cross-Site Scripting5.1 Medium
- seo panel panelSEO Panel < 4.9.0 - 'order_col' Blind SQL Injection7.0 High
- hestia control panel control panelHestia Control Panel 1.3.2 - Arbitrary File Write8.6 High
- brother industries, ltd. bradmin professionalBRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path8.5 High
- honeywell win-pack proWIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path8.5 High
- security winpakproWIN-PACK PRO 4.8 - 'ScheduleService' Unquoted Service Path8.5 High
- honeywell win-pack proWIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path8.5 High
- proftpdProFTPD 1.3.7a - Remote Denial of Service8.7 High
- osas traverse extensionOSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path8.5 High
- macpaw way ltd. encryptoMacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path8.5 High
- hi-rez studios hipatchserviceHi-Rez Studios 5.1.6.3 - 'HiPatchService' Unquoted Service Path8.5 High
- fspro labs event log explorerEvent Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path8.5 High
- hid global actividentityActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path8.5 High
- genexis platinum-4410Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site Scripting5.1 Medium
- moodleMoodle 3.10.3 - 'label' Persistent Cross Site Scripting5.1 Medium
- litespeed technologies openlitespeedOpenlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting5.1 Medium
- embedd gmbh dd-wrtDD-WRT 45723 - UPNP Buffer Overflow8.7 High
- rockstar games launcherRockstar Service - Insecure File Permissions8.5 High
- yodinfo mini mouseMini Mouse 9.2.0 - Remote Code Execution9.3 Critical
- yodinfo mini mouseMini Mouse 9.2.0 - Path Traversal8.7 High
- yodinfo mini mouseMini Mouse 9.3.0 - Local File inclusion / Path Traversal8.7 High
- satndy aplikasi-biro-travelBlitar Tourism 1.0 - Authentication Bypass SQLi8.8 High
- i want source codes digital crime report management systemDigital Crime Report Management System 1.0 - SQL Injection8.8 High
- getsimple cms my smtp contact plugin, get-simple getsimplecms +1 moreGetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF5.1 Medium
- open-emr openemrOpenEMR 5.0.2.1 - Remote Code Execution4.8 Medium
- shenzhen tenda technology co.,ltd. tenda d151 & d301, tenda d151 firmware, d301 firmware +2 moreTenda D151 & D301 - Configuration Download8.7 High
- autonomy openplcOpenPLC 3 - Remote Code Execution8.6 High
- @tinacms graphql, hasura graphql engine +1 moreHasura GraphQL 1.3.3 - Remote Code Execution9.3 Critical
- nodebb plugin emojiNodeBB Plugin Emoji 3.2.1 - Arbitrary File Write8.6 High
- tp link systems inc. tl-wr841n v13, tp-link systems inc. archer c20 v5, tp-link archer ax53 firmware +2 more +4 moreLogic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v137.2 High
- lxsmnsyc serovalseroval is vulnerable to Denial of Service via array serialization7.5 High
- lxsmnsyc serovalseroval affected by Denial of Service via RegExp serialization7.5 High
- tendenciTendenci has Authenticated Remote Code Execution via Pickle Deserialization6.8 Medium
@envelop/graphql-modulesnpm@envelop/graphql-modules has a Race Condition vulnerability8.7 High- cisco unified communications manager, unity connection, unified communications manager im and presence service +2 moreCisco Unified Communications Products Remote Code Execution Vulnerability8.2 High
- Show moreLoading…