CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- shenzhen tenda technology co., ltd. w30e v2, tenda w30e firmware +1 moreTenda W30E V2 HTTP Responses Expose Plaintext Credentials8.2 High
- shenzhen tenda technology co., ltd. w30e v2, tenda w30e firmware +1 moreTenda W30E V2 Hardcoded Default Password for Built-in Account9.3 Critical
- shenzhen tenda technology co., ltd. w30e v2, tenda w30e firmware +1 moreTenda W30E V2 Allows Password Changes Without Verifying Current Password8.7 High
- tanium discoverTanium addressed an uncontrolled resource consumption vulnerability in Discover.4.9 Medium
- esri arcgis proXSS issue is Esri ArcGIS Pro versions 3.6.0 and earlier5.0 Medium
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Office Security Feature Bypass Vulnerability7.8 High
- iobit uninstallerIObit Uninstaller 10 Pro - Unquoted Service Path8.5 High
- dassault systèmes solidworks edrawingsOut-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 20267.8 High
- dassault systèmes solidworks edrawingsHeap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 20267.8 High
- celabshq libcrux-ecdh, libcrux-ed25519, libcrux-psq +2 morelibcrux before 0.0.6 Cryptographic Implementation Bug Fixes8.7 High
- bytecodealliance wasmtimeWasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-644.1 Medium
- apache continuumApache Continuum: Command injection leading to RCE9.9 Critical
- dormakaba registration unit 9002UART Leaking Sensitive Data in dormakaba registration unit 90025.1 Medium
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 moreWeak Default Passwords in dormakaba access manager9.2 Critical
- dormakaba access manager 92xx-k5Static Firmware Encryption Password in dormakaba access manager8.5 High
- dormakaba access manager 92xx-k7, dormakabagroup dormakaba access manager 9200-k5 firmware, dormakaba access manager 9200-k7 firmware +4 more +6 moreWeb Server Running with Root Privileges in dormakaba access manager8.8 High
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 moreUnencrypted Flash Storage in dormakaba access manager7.0 High
- dormakaba access manager 92xx-k7Unlocked Bootloader in dormakaba access manager7.0 High
- dormakaba access manager 92xx-k5Weak Default Passwords for SSH Access in dormakaba access manager9.2 Critical
- dormakaba access manager 92xx-k5Secrets Stored in Plaintext in Database in dormakaba access manager6.9 Medium
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 moreInsufficient Session Management in dormakaba access manager7.7 High
- dormakaba access manager 92xx-k5Unauthenticated Access to the SQLite Database in dormakaba access manager5.9 Medium
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 moreUnauthenticated Path Traversal in dormakaba access manager8.8 High
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 moreTrace Functionality Leaking Sensitive Data in dormakaba access manager8.7 High
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 moreUnauthenticated SOAP API in dormakaba access manager9.3 Critical
- dormakaba kaba exos 9300Weak Default Password in dormakaba Kaba exos 93004.6 Medium
- dormakaba kaba exos 9300Hard-coded Key for PIN Encryption in dormakaba Kaba exos 93006.8 Medium
- dormakaba kaba exos 9300Local Privilege Escalation in dormakaba Kaba exos 9300 System management8.4 High
- dormakaba kaba exos 9300Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 93008.5 High
- dormakaba kaba exos 9300Unauthenticated RPC Service in dormakaba Kaba exos 93008.7 High
- dormakaba kaba exos 9300Hardcoded Legacy Accounts Allowing Control Over Access Managers in dormakaba Kaba exos 93009.3 Critical
- dormakaba kaba exos 9300Unauthenticated SOAP API in dormakaba Kaba exos 93009.3 Critical
- apache hadoop, apache software foundation hdfs native client +1 moreHDFS native client: Out of bounds write in URI parser of native HDFS client7.3 High
- altitude communication serverImproper Neutralization in Altitude Communication Server5.1 Medium
- apache karaf decanter, apache software foundation karaf +1 moreApache Karaf: Decanter log-socket collector has deserialization vulnerability3.7 Low
- altitude communication serverHTTP Request/Response Smuggling in Altitude Communication Server6.9 Medium
- wellchoose single sign-on portal systemWellChoose｜Single Sign-On Portal System - Reflected Cross-site Scripting4.8 Medium
- wellchoose single sign-on portal systemWellChoose｜Single Sign-On Portal System - OS Command Injection8.7 High
- wellchoose single sign-on portal systemWellChoose｜Single Sign-On Portal System - OS Command Injection8.7 High
- pymumu smartdnspymumu SmartDNS SVBC Record dns.c _dns_decode_SVCB_HTTPS stack-based overflow6.3 Medium
- phpgurukul news portalPHPGurukul News Portal Profile Pic unrestricted upload5.1 Medium
- code-projects online examination systemcode-projects Online Examination System admin_pic.php unrestricted upload5.3 Medium
- code-projects online examination systemcode-projects Online Examination System Login Page index.php sql injection6.9 Medium
- unknown recipe card blocks liteRecipe Card Blocks < 3.4.13 - Contributor+ SQLi6.8 Medium
- unknown ahachat messenger marketingAhaChat Messenger Marketing <= 1.1 - Reflected XSS7.1 High
- code-projects online examination systemcode-projects Online Examination System Add Pages cross site scripting5.1 Medium
- tenda ac23, ac23 firmware +1 moreTenda AC23 WifiExtraSet buffer overflow8.7 High
- d-link dcs700l, dlink dcs-700l firmware +1 moreD-Link DCS700l Web Form setDayNightMode command injection5.1 Medium
- gpacGPAC SRT Subtitle Import text_to_bifs.c gf_text_import_srt_bifs out-of-bounds write4.8 Medium
- gpacGPAC filedump.c dump_isom_rtp null pointer dereference4.8 Medium
- Show moreLoading…