CVEs published in January 2026
314 tracked CVEs from 20 vendors had their first vendor advisory published in January 2026: 27 critical, 154 high, 6 in CISA KEV. Newest first.
161 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2024-36350Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-25062High
Libxml2 Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-0915Medium
Information disclosure via zero-valued network query
NetApp, Red Hat · 2 advisories - Added
CVE-2026-21921Medium
Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved
Juniper · 1 advisory - Added
CVE-2026-21920High
Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series
Juniper · 1 advisory - Added
CVE-2026-21918High
Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX and MX Series
Juniper · 1 advisory - Added
CVE-2026-21917High
Improper Validation of Syntactic Correctness of Input vulnerability in the Web-Filtering module of Juniper Networks Junos OS…
Juniper · 1 advisory - Added
CVE-2026-21914High
Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series
Juniper · 1 advisory - Added
CVE-2026-21913High
Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of Juniper Networks Junos OS on…
Juniper · 1 advisory - Added
CVE-2026-21912Medium
Junos: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the method to collect FPC Ethernet firmware statistics of…
Juniper · 1 advisory - Added
CVE-2026-21911Medium
Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos OS Evolved
Juniper · 1 advisory - Added
CVE-2026-21910Medium
Junos: Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks…
Juniper · 1 advisory - Added
CVE-2026-21909Medium
Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) Juniper Networks Junos…
Juniper · 1 advisory - Added
CVE-2026-21908High
Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and…
Juniper · 1 advisory - Added
CVE-2026-21907Medium
Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space
Juniper · 1 advisory - Added
CVE-2026-21906High
Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS…
Juniper · 1 advisory - Added
CVE-2026-21905High
Junos: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the SIP application layer gateway (ALG) of Juniper…
Juniper · 1 advisory - Added
CVE-2026-21903Medium
Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS
Juniper · 1 advisory - Added
CVE-2026-0203Medium
Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS
Juniper · 1 advisory - Added
CVE-2025-60011Medium
Junos: Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks…
Juniper · 1 advisory - Added
CVE-2025-60007Medium
NULL Pointer Dereference vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS on MX, SRX and EX Series
Juniper · 1 advisory - Added
CVE-2025-60003High
Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved
Juniper · 1 advisory - Added
CVE-2025-59961Medium
Junos: Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks…
Juniper · 1 advisory - Added
CVE-2025-59960High
Junos: Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service (jdhcpd) of Juniper Networks…
Juniper · 1 advisory - Added
CVE-2025-59959Medium
Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS…
Juniper · 1 advisory - Added
CVE-2025-52987Medium
clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights)
Juniper · 1 advisory - Added
CVE-2026-0227High
vulnerability in Palo Alto Networks PAN-OS software
Palo Alto · 1 advisory - Added
CVE-2026-20076Medium
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20075Medium
Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20047Medium
Cisco Identity Services Engine Cross-Site Scripting Vulnerability
Cisco · 1 advisory - Added
Denial of Service via crafted XML catalogs
NetApp, Red Hat · 2 advisories - Added
CVE-2026-0990Medium
Denial of Service via uncontrolled recursion in XML catalog processing
NetApp, Red Hat · 2 advisories - Added
Denial of Service via Integer Overflow in g_buffered_input_stream_peek
NetApp, Red Hat · 2 advisories - Added
CVE-2026-0861High
Integer overflow in memalign leads to heap corruption
NetApp, Red Hat · 2 advisories - Added
CVE-2025-37185Medium
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could
Aruba · 1 advisory - Added
CVE-2025-37183High
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could
Aruba · 1 advisory - Added
CVE-2025-37182High
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could
Aruba · 1 advisory - Added
CVE-2025-37181High
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could
Aruba · 1 advisory - Added
CVE-2025-9142High
local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory
Check Point · 1 advisory - Added
CVE-2026-22718Medium
The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine
VMware · 1 advisory - Added
CVE-2025-37186High
local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access (VIA) client
Aruba · 1 advisory - Added
CVE-2025-37177Medium
AOS-10: arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors running either…
Aruba · 1 advisory - Added
CVE-2025-37176Medium
command injection vulnerability in AOS-8
Aruba · 1 advisory - Added
CVE-2025-37175High
Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or…
Aruba · 1 advisory - Added
CVE-2025-37174High
AOS-10: Authenticated arbitrary file write vulnerability exists in the web-based management interface of mobility conductors running…
Aruba · 1 advisory - Added
CVE-2025-37173High
AOS-10: improper input handling vulnerability exists in the web-based management interface of mobility conductors running either…
Aruba · 1 advisory - Added
CVE-2025-37172High
Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8…
Aruba · 1 advisory - Added
CVE-2025-37171High
Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8…
Aruba · 1 advisory - Added
CVE-2025-37170High
Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8…
Aruba · 1 advisory - Added
CVE-2025-37169High
AOS-10: stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway.
Aruba · 1 advisory - Added
CVE-2025-37168High
Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating…
Aruba · 1 advisory - Added
CVE-2026-20941High
Host Process for Windows Tasks Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20958Medium
Microsoft SharePoint Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20948High
Microsoft Word Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20939Medium
Windows File Explorer Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20937Medium
Windows File Explorer Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20936Medium
Windows NDIS Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20931High
Windows Telephony Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20929High
Windows HTTP.sys Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20874High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20873High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20872Medium
NTLM Hash Disclosure Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20871High
Desktop Window Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20870High
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20868High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20867High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20866High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20863High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20862Medium
Windows Management Services Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20861High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20854High
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20849High
Windows Kerberos Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20848High
Windows SMB Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20843High
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20947High
Microsoft SharePoint Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21221High
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20830High
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20963CriticalCISA KEV
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20959Medium
Microsoft SharePoint Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20951High
Microsoft SharePoint Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20943High
Microsoft Office Click-To-Run Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20940High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20934High
Windows SMB Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20932Medium
Windows File Explorer Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20927Medium
Windows SMB Server Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20926High
Windows SMB Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20925Medium
NTLM Hash Disclosure Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20924High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20923High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20922High
Windows NTFS Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20921High
Windows SMB Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20920High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20919High
Windows SMB Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20918High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20877High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20876Medium
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20875High
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20869High
Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20865High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20864High
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
MS Server · 1 advisory