January 2026
Published in January 2026
- criticalexploited2026-001: Critical vulnerabilities in Ivanti EPMMcert-eu
- known exploitedCVE-2009-0556
- unknownexploited[Update] Multiple vulnerabilities in Ivanti Endpoint Manager Mobile (January 30, 2026)cert-fr-alerte
- known exploitedpublic exploitCVE-2018-14634
- criticalexploitedCVE-2026-24858: Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerabil…cisa-kev
- known exploitedCVE-2024-37079
- criticalexploitedCVE-2026-21509: Microsoft Office Security Feature Bypass Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-31125
- criticalexploitedCVE-2026-23760: SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerabilit…cisa-kev
- known exploitedpublic exploitCVE-2025-34026
- criticalexploitedCVE-2025-52691: SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-37164
- criticalexploitedCVE-2018-14634: Linux Kernel Integer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-52691
- criticalexploitedCVE-2024-37079: Broadcom VMware vCenter Server Out-of-bounds Write Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-54313
- criticalexploitedCVE-2025-34026: Versa Concerto Improper Authentication Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-68645
- criticalexploitedCVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-8110
- criticalexploitedCVE-2025-31125: Vite Vitejs Improper Access Control Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2026-1281
- criticalGitLab Patch Release: 18.8.2, 18.7.2, 18.6.4gitlab
- known exploitedpublic exploitCVE-2026-1340
- criticalGitLab Patch Release: 18.8.2, 18.7.2, 18.6.4gitlab
- known exploitedCVE-2026-20045
- criticalexploitedCVE-2026-20045: Cisco Unified Communications Products Code Injection Vulnerabilitycisa-kev
- known exploitedCVE-2026-20805
- unknownGitLab Patch Release: 18.8.1gitlab
- known exploitedpublic exploitCVE-2026-21509
- unknownGitLab Patch Release: 18.8.1gitlab
- known exploitedpublic exploitCVE-2026-23760
- criticalGitLab Patch Release: 18.7.1, 18.6.3, 18.5.5gitlab
- known exploitedpublic exploitCVE-2026-24061
- criticalGitLab Patch Release: 18.7.1, 18.6.3, 18.5.5gitlab
- known exploitedCVE-2026-24858
- criticalexploitedCVE-2009-0556: Microsoft Office PowerPoint Code Injection Vulnerabilitycisa-kev