CVEs published in January 2026

CVE-2026-1723Medium

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R

CVE-2025-62349Medium

Salt contains an authentication protocol version downgrade weakness that can

CVE-2025-62348High

Salt's junos execution module contained an unsafe YAML decode/load usage.

CVE-2026-1498High

WatchGuard Firebox LDAP Injection

CVE-2025-68973High

GnuPG Vulnerability in NetApp Products

CVE-2025-61729Critical

Golang Vulnerability in NetApp Products

CVE-2025-61727Critical

Golang Vulnerability in NetApp Products

CVE-2025-58057High

CVE-2025-58056High

CVE-2026-1281CriticalCISA KEV

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CVE-2025-61728Critical

Excessive CPU consumption when building archive index in archive/zip

CVE-2025-61726Critical

Memory exhaustion in query parameter parsing in net/url

CVE-2025-68119Critical

Local code execution and arbitrary file write via malicious module version strings

CVE-2025-61731Critical

Arbitrary file write via malicious pkg-config directive

CVE-2025-61730Critical

Handshake messages may be processed at the incorrect encryption level in crypto/tls

CVE-2026-21569High

Confluence: This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and…

CVE-2026-24842High

Node-tar Vulnerability in NetApp Products

CVE-2025-21589Critical

Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may

CVE-2026-24858CriticalCISA KEV

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

CVE-2026-23593High

vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could

CVE-2026-23592High

Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could

CVE-2026-1489Medium

Glib: glib: memory corruption via integer overflow in unicode case conversion

CVE-2025-15467Critical

Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

CVE-2026-1485Low

Glib: glib: local denial of service via buffer underflow in content type parsing

CVE-2026-1484Medium

Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode

CVE-2026-22796Medium

Denial of Service via type confusion in PKCS#7 signature verification

CVE-2026-22795Medium

Denial of Service due to type confusion in PKCS#12 file processing

CVE-2025-69421Medium

Denial of Service via malformed PKCS#12 file processing

CVE-2025-69420High

Denial of Service via malformed TimeStamp Response

CVE-2025-69419High

OpenSSL Vulnerability in NetApp Products

CVE-2025-69418Medium

Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

CVE-2025-68160Medium

Denial of Service due to out-of-bounds write in BIO filter

CVE-2025-66199Medium

Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

CVE-2025-15469Medium

Data integrity bypass in `openssl dgst` command due to silent truncation

CVE-2025-15468Medium

Denial of Service via NULL pointer dereference in QUIC protocol handling

CVE-2025-11187Medium

OpenSSL Vulnerability in NetApp Products

CVE-2025-9820Medium

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init function

CVE-2026-23001High

fix possible UAF in macvlan_forward_source

CVE-2026-22998Medium

fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec

CVE-2026-1299High

email header injection due to unquoted newlines

CVE-2026-0994High

Denial of Service due to recursion depth bypass

CVE-2026-22990High

replace overzealous BUG_ON in osdmap_apply_incremental

CVE-2026-22984Critical

prevent potential out-of-bounds reads in handle_auth_done

CVE-2026-21947High

CVE-2025-68161Medium

Apache Log4j Vulnerability in NetApp Products

CVE-2025-6052High

CVE-2025-47219High

CVE-2025-43368High

CVE-2025-40027Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2025-39942High

Linux Kernel Vulnerability in NetApp Products

CVE-2025-38732High

Linux Kernel Vulnerability in NetApp Products

CVE-2024-53899High

Virtualenv Vulnerability in NetApp Products

CVE-2025-22234Medium

CVE-2025-22228Medium

CVE-2026-24001Critical

denial of service vulnerability in parsePatch and applyPatch

CVE-2025-13465Critical

prototype pollution in _.unset and _.omit functions

CVE-2026-20092Medium

Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability

CVE-2026-20080Medium

Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability

CVE-2026-20045HighCISA KEV

Cisco Unified Communications Products Code Injection Vulnerability

CVE-2025-39946Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2025-39943High

Linux Kernel Vulnerability in NetApp Products

CVE-2025-38728High

Linux Kernel Vulnerability in NetApp Products

CVE-2025-38465Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2025-38249High

Linux Kernel Vulnerability in NetApp Products

CVE-2025-38181Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2026-0672Medium

Header injection in http.cookies.Morsel in Python

CVE-2025-15367High

POP3 command injection in user-controlled commands

CVE-2025-15366High

IMAP command injection in user-controlled commands

CVE-2025-15282Medium

Header injection via newlines in data URL mediatype in Python

CVE-2026-0865Medium

wsgiref.headers.Headers allows header newline injection in Python

CVE-2026-21945High

Enhance Certificate Checking (Oracle CPU 2026-01)

CVE-2026-21933High

Improve HttpServer Request handling (Oracle CPU 2026-01)

CVE-2026-21932High

Enhance Handling of URIs (Oracle CPU 2026-01)

CVE-2026-21925High

Improve JMX connections (Oracle CPU 2026-01)

CVE-2025-11468Medium

Missing character filtering in Python

CVE-2026-21637High

Nodejs denial of service

CVE-2025-59465Critical

Nodejs denial of service

CVE-2025-59464High

Nodejs memory leak

CVE-2025-55132Critical

Nodejs filesystem permissions bypass

CVE-2025-55131High

Nodejs uninitialized memory exposure

CVE-2025-55130Critical

Nodejs file permissions bypass

CVE-2025-15281Medium

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

CVE-2026-23950High

Node-Tar Vulnerability in NetApp Products

CVE-2026-23949High

Path traversal via malicious tar archives

CVE-2026-21968High

Optimizer unspecified vulnerability (CPU Jan 2026)

CVE-2026-21964High

Thread Pooling unspecified vulnerability (CPU Jan 2026)

CVE-2026-21948High

Optimizer unspecified vulnerability (CPU Jan 2026)

CVE-2026-21941High

Optimizer unspecified vulnerability (CPU Jan 2026)

CVE-2026-21937High

DDL unspecified vulnerability (CPU Jan 2026)

CVE-2026-21936High

InnoDB unspecified vulnerability (CPU Jan 2026)

CVE-2026-0603High

Information disclosure and data deletion via second-order SQL injection

CVE-2025-68675Unrated

Apache Airflow: proxy credentials for various providers might leak in task logs

CVE-2025-68438Unrated

Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated

CVE-2025-66293High

Libpng Vulnerability in NetApp Products

CVE-2025-65018High

Libpng Vulnerability in NetApp Products

CVE-2025-64720High

Libpng Vulnerability in NetApp Products

CVE-2025-64506Medium

Libpng Vulnerability in NetApp Products

CVE-2025-64505Medium

Libpng Vulnerability in NetApp Products

CVE-2024-36913Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2024-36357Medium

Linux Kernel Vulnerability in NetApp Products