CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- linux, linux kernel +1 morelibceph: replace overzealous BUG_ON in osdmap_apply_incremental()7.5 High
- linux, linux kernel +1 morenfsd: check that server is running in unlock_filesystem5.5 Medium
- linux, linux kernel +1 morearp: do not assume dev_hard_header() does not change skb->head7.8 High
- linux, linux kernel +1 morenet/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy5.5 Medium
- linux, linux kernel +1 moregpiolib: fix race condition for gdev->srcu4.7 Medium
- linux, linux kernel +1 moreidpf: Fix RSS LUT NULL pointer crash on early ethtool operations5.5 Medium
- linux, linux kernel +1 morelibceph: prevent potential out-of-bounds reads in handle_auth_done()9.8 Critical
- linux, linux kernel +1 morenet: do not write to msg_get_inq in callee5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: mscc: ocelot: Fix crash when adding interface under a lag5.5 Medium
- linux, linux kernel +1 moreidpf: detach and close netdevs while handling a reset5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenfsd: provide locking for v4_end_grace7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: fix memory leak in skb_segment_list for GRO packets5.5 Medium
- linux, linux kernel +1 morewifi: avoid kernel-infoleak from struct iw_point3.3 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredm-verity: disable recursive forward error correction7.5 High
- linux, linux kernel +1 morenetfilter: nf_tables: avoid chain re-validation if possible5.5 Medium
- linux, linux kernel +1 morebtrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node()9.8 Critical
- linux, linux kernel +1 moregpio: mpsse: ensure worker is torn down7.8 High
- google protobuf, red hat ai inference server 3.2, ai inference server 3.3 +14 more +16 moreDenial of Service in Python Protobuf8.2 High
- syed balkhi sugar calendar (lite)WordPress Sugar Calendar (Lite) plugin <= 3.9.1 - Broken Access Control vulnerability4.3 Medium
- devsblink edublink coreWordPress EduBlink Core plugin <= 2.0.7 - Local File Inclusion vulnerability7.5 High
- rustaurius ultimate reviewsWordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- passionate brains add expires headers & optimized minifyWordPress Add Expires Headers & Optimized Minify plugin <= 3.2.0 - Broken Access Control vulnerability5.3 Medium
- jagdish1o1 delay redirectsWordPress Delay Redirects plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- mikado-themes rosebudWordPress Rosebud theme <= 1.4 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- design stylish cost calculatorWordPress Stylish Cost Calculator plugin <= 8.2.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ability, inc web accessibility with max accessWordPress Web Accessibility with Max Access plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- trusona for wordpressWordPress Trusona for WordPress plugin <= 2.0.0 - Broken Access Control vulnerability4.3 Medium
- logichunt logo sliderWordPress Logo Slider plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- imaginate solutions file uploads addon for woocommerceWordPress File Uploads Addon for WooCommerce plugin <= 1.7.3 - Broken Access Control vulnerability5.3 Medium
- saeros1984 neoforumWordPress Neoforum plugin <= 1.0 - SQL Injection vulnerability7.6 High
- saeros1984 neoforumWordPress Neoforum plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sergiy dzysyak suggestion toolkitWordPress Suggestion Toolkit plugin <= 5.0 - Broken Access Control vulnerability5.4 Medium
- vladimir statsenko terms descriptionsWordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pluginops landing page builderWordPress Landing Page Builder plugin <= 1.5.3.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- popcash popcash.net code integration toolWordPress PopCash.Net Code Integration Tool plugin <= 1.8 - Broken Access Control vulnerability5.3 Medium
- daniel iser easy modalWordPress Easy Modal plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- damian wp popupsWordPress WP Popups plugin <= 2.2.0.5 - Broken Access Control vulnerability6.5 Medium
- themebeez cream magazineWordPress Cream Magazine theme <= 2.1.10 - Broken Access Control vulnerability5.3 Medium
- devsbrain flex qr code generatorWordPress Flex QR Code Generator plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ecwid by lightspeed ecommerce shopping cart shopping cartWordPress Ecwid Shopping Cart plugin <= 7.0.6 - Broken Access Control vulnerability5.3 Medium
- themebeez orchid storeWordPress Orchid Store theme <= 1.5.15 - Broken Access Control vulnerability5.3 Medium
- elated-themes laurentWordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability7.5 High
- elated-themes laurent coreWordPress Laurent Core plugin <= 2.4.1 - Local File Inclusion vulnerability7.5 High
- wptravelengine travel monsterWordPress Travel Monster theme <= 1.3.3 - Broken Access Control vulnerability5.3 Medium
- web impian bayarcash woocommerceWordPress Bayarcash WooCommerce plugin <= 4.3.13 - Broken Access Control vulnerability5.3 Medium
- pencilwp x addons for elementorWordPress X Addons for Elementor plugin <= 1.0.23 - Broken Access Control vulnerability4.3 Medium
- themebeez simple gdpr cookie complianceWordPress Simple GDPR Cookie Compliance plugin <= 2.0.0 - Broken Access Control vulnerability5.3 Medium
- themebeez universal google adsense and ads managerWordPress Universal Google Adsense and Ads manager plugin <= 1.1.8 - Broken Access Control vulnerability5.3 Medium
- pencidesign penci pay writerWordPress Penci Pay Writer plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pencidesign penci reviewWordPress Penci Review plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…