Tag: 2026-01-20

6 Attack Reports | 247 Vulnerabilities

Attack reports

Inside a Multi-Stage Windows Malware Campaign

A sophisticated multi-stage malware campaign targeting Windows users in Russia has been identified. The attack chain begins with social engineering lures and progresses to a full system compromise, including security bypass, surveillance, and ransomware delivery. It abuses Defendnot to disable Micr…
social engineering
ransomware
windows
russia
data theft
hakuna matata
multi-stage
2026-01-20
amnesia rat
defendnot
winlocker
Published: January 20, 2026
Downloadable IOCs: 11

VVS Discord Stealer Using Pyarmor for Obfuscation and Detection Evasion

This analysis examines the VVS stealer, a Python-based malware targeting Discord users to steal sensitive information like credentials and tokens. The stealer employs Pyarmor for obfuscation, hindering analysis and detection. Key capabilities include exfiltrating Discord data, injecting malicious c…
obfuscation
python
infostealer
persistence
encryption
webhook
discord
aes encryption
browser data theft
2026-01-02
pyarmor
vvs stealer
2026-01-20
Published: January 20, 2026
Downloadable IOCs: 3

Critical Privilege Escalation Vulnerability in Modular DS plugin affecting 40k+ Sites exploited in the wild

A critical unauthenticated privilege escalation vulnerability has been discovered in the Modular DS WordPress plugin, affecting over 40,000 sites. The flaw allows attackers to bypass authentication and gain admin access. Exploitation attempts have been observed in the wild, with attackers creating …
wordpress
privilege escalation
active exploitation
CVE-2026-23550
CVE-2026-23800
2026-01-20
modular ds
plugin vulnerability
unauthenticated
Published: January 20, 2026
Downloadable IOCs: 3

Operation Nomad Leopard: Targeted Spear-Phishing Campaign Against Government Entities in Afghanistan

A threat group is targeting Afghan government employees using a fake lure mimicking an official government document. The campaign, named Operation Nomad Leopard, uses a malicious ISO file containing a PDF decoy, LNK file, and the FALSECUB malware. The infection chain involves executing the LNK file…
lnk
government
reconnaissance
data-exfiltration
spear-phishing
iso
2026-01-20
afghanistan
falsecub
Published: January 20, 2026
Downloadable IOCs: 5

Operation Covert Access: Weaponized LNK-Based Spear-Phishing Targeting Argentina's Judicial Sector to Deploy a Covert RAT

A sophisticated spear-phishing campaign targeting Argentina's judicial sector has been uncovered. The operation uses a multi-stage infection chain to deploy a stealthy Remote Access Trojan (RAT). Attackers exploit trust in court communications by using authentic-looking judicial decoy documents. Th…
rat
anti-analysis
lnk
rust
spear-phishing
remote access trojan
multi-stage
2026-01-20
argentina
judicial-sector
Published: January 20, 2026
Downloadable IOCs: 6

From Extension to Infection: An In-Depth Analysis of the Evelyn Stealer Campaign Targeting Software Developers

The Evelyn Stealer campaign targets software developers through weaponized Visual Studio Code extensions, employing a multistage delivery of information-stealing malware. The attack chain involves a downloader disguised as a legitimate Lightshot DLL, an injector that uses process hollowing to injec…
information stealer
process hollowing
ftp exfiltration
browser injection
visual studio code
anti-analysis techniques
2026-01-20
evelyn stealer
multistage attack
software developers
Published: January 20, 2026
Downloadable IOCs: 5
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-21962

10.0
    Oracle
  • Http Server
  • Weblogic Server Proxy Plugin
Published: January 20, 2026

CVE-2026-22844

9.9
    Zoom
  • Node Multimedia Routers
Published: January 20, 2026

CVE-2026-0905

9.8
    Google
  • Chrome
Published: January 20, 2026

CVE-2026-0906

9.8
    Google
  • Chrome
Published: January 20, 2026

CVE-2026-0907

9.8
    Google
  • Chrome
Published: January 20, 2026

CVE-2025-14533

9.8
    Wordpress
  • Advanced Custom Fields
Published: January 20, 2026

CVE-2025-64087

9.8
    Opensagres
  • Xdocreport
Published: January 20, 2026

CVE-2025-65482

9.8
    Opensagres
  • Xdocreport
Published: January 20, 2026

CVE-2025-55423

9.8
    Iptime
  • Router A2003ns-Mu
  • Router N600
  • Router A604-V3
  • Router A6ns-M
  • Router V508
  • Router N704qca
  • Router A8ns-M
  • Router A304
  • Router A3004ns-M
  • Router A5004ns-M
  • Router A9004m
  • Router N702r
  • Router A604m
  • Router A804ns-Mu
  • Router N804r
  • Router A7004m
  • Router A8004t
  • Router A604g-Mu
  • Router A3008-Mu
  • Router A2004mu
  • Router A2004ns-Mu
  • Router A604-V5
  • Router A604r
  • Router N702e
  • Router N2v
  • Router N604e
  • Router N104e
  • Router A8004itl
  • Router N102e
  • Router N1v
  • Router N102i
  • Router T5004
  • Router N602e
  • Router Ax8004bcm
  • Router A8004t-Xr
  • Router A9004m-X2
  • Router T5008
  • Router N704e
  • Router A8004bcm
  • Router Ax3004itl
  • Router A604g-Skylife
Published: January 20, 2026

CVE-2025-56005

9.8
    Ply
  • Python Lex-Yacc
Published: January 20, 2026

CVE-2026-21969

9.8
    Oracle
  • Agile Product Lifecycle Management For Process
Published: January 20, 2026

CVE-2025-53912

9.6
    Meddream
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2026-23947

9.3
    Orval
  • Orval
Published: January 20, 2026

CVE-2026-1221

9.3
    Browan Communications
  • Prismx Mx100 Ap
Published: January 20, 2026

CVE-2026-23950

8.8
    Node-Tar
  • Node-Tar
Published: January 20, 2026

CVE-2026-0899

8.8
    Google
  • Chrome
Published: January 20, 2026

CVE-2026-0900

8.8
    Google
  • Chrome
Published: January 20, 2026

CVE-2026-0902

8.8
    Google
  • Chrome
  • V8
Published: January 20, 2026

CVE-2026-0908

8.8
    Google
  • Chrome
Published: January 20, 2026

CVE-2025-14377

8.8
    Rockwell Automation
  • Verve Asset Manager
Published: January 20, 2026

CVE-2025-15347

8.8
    Creator Lms
  • Creator Lms
Published: January 20, 2026

CVE-2025-33015

8.8
    Ibm
  • Ibm Concert
Published: January 20, 2026

CVE-2025-14027

8.7
    Rockwell
  • Automation
Published: January 20, 2026

CVE-2025-9278

8.7
    Rockwell Automation
  • Armorstart Lt
Published: January 20, 2026

CVE-2025-9279

8.7
    Rockwell Automation
  • Armorstart Lt
Published: January 20, 2026

CVE-2025-9280

8.7
    Rockwell Automation
  • Armorstart Lt
Published: January 20, 2026

CVE-2025-9281

8.7
    Rockwellautomation
  • Armorstarl
Published: January 20, 2026

CVE-2025-9282

8.7
    Rockwell Automation
  • Armorstart Lt
Published: January 20, 2026

CVE-2025-9283

8.7
    Rockwell Automation
  • Armorstart
Published: January 20, 2026

CVE-2025-9464

8.7
    Rockwell Automation
  • Armorstart Lt
Published: January 20, 2026

CVE-2025-9465

8.7
    Rockwell Automation
  • Armorstart Lt
Published: January 20, 2026

CVE-2025-9466

8.7
    Rockwell Automation
  • Armorstart Lt
Published: January 20, 2026

CVE-2026-23949

8.6
    Jaraco
  • Context
Published: January 20, 2026

CVE-2026-1222

8.6
    Browan Communications
  • Prismx Mx100 Ap Controller
Published: January 20, 2026

CVE-2025-14376

8.6
    Rockwell Automation
  • Verve Asset Manager
Published: January 20, 2026

CVE-2026-21967

8.6
    Oracle
  • Hospitality Opera
Published: January 20, 2026

CVE-2025-58740

8.5
    Milner
  • Imagedirector Capture
Published: January 20, 2026

CVE-2025-58741

8.5
    Milner
  • Image Director Capture
Published: January 20, 2026

CVE-2025-58742

8.5
    Milner
  • Imagedirector Capture
Published: January 20, 2026

CVE-2025-12985

8.4
    Ibm
  • Licensing Operator
Published: January 20, 2026

CVE-2025-14115

8.4
    Ibm
  • Sterling Connect
Published: January 20, 2026

CVE-2026-22219

8.3
    Chainlit
  • Chainlit
Published: January 20, 2026

CVE-2026-21955

8.2
    Oracle
  • Vm Virtualbox
Published: January 20, 2026

CVE-2026-21956

8.2
    Oracle
  • Virtualbox
Published: January 20, 2026

CVE-2026-21987

8.2
    Oracle
  • Virtualbox
Published: January 20, 2026

CVE-2026-21988

8.2
    Oracle
  • Vm Virtualbox
Published: January 20, 2026

CVE-2026-21990

8.2
    Oracle
  • Oracle Vm Virtualbox
Published: January 20, 2026

CVE-2026-23876

8.1
    Imagemagick
  • Imagemagick
Published: January 20, 2026

CVE-2025-14977

8.1
    Dokan
  • Dokan
Published: January 20, 2026

CVE-2026-0726

8.1
    Wordpress
  • Nexter Extension Site Enhancements Toolkit
Published: January 20, 2026

CVE-2026-21973

8.1
    Oracle
  • F5 Investor Servicing
Published: January 20, 2026

CVE-2026-21989

8.1
    Oracle
  • Vm Virtualbox
Published: January 20, 2026

CVE-2025-33233

7.8
    Nvidia
  • Merlin Transformers4rec
Published: January 20, 2026

CVE-2026-0933

7.7
    Cloudflare
  • Wrangler
Published: January 20, 2026

CVE-2025-56353

7.5
    Tinymqtt
  • Tinymqtt
Published: January 20, 2026

CVE-2025-57155

7.5
    Owntone
  • Owntone-Server
Published: January 20, 2026

CVE-2025-57156

7.5
    Owntone
  • Owntone-Server
Published: January 20, 2026

CVE-2025-59465

7.5
    Node.Js
  • Node.Js
Published: January 20, 2026

CVE-2025-63647

7.5
    Owntone
  • Owntone-Server
Published: January 20, 2026

CVE-2025-63648

7.5
    Owntone
  • Owntone-Server
Published: January 20, 2026

CVE-2025-66692

7.5
    Binance
  • Trust Wallet Core
Published: January 20, 2026

CVE-2025-66902

7.5
    Pithikos
  • Websocket-Server
Published: January 20, 2026

CVE-2026-21926

7.5
    Oracle
  • Siebel Crm
Published: January 20, 2026

CVE-2026-21940

7.5
    Oracle
  • Agile Plm
Published: January 20, 2026

CVE-2026-21945

7.5
    Oracle
  • Java Se
  • Graalvm For Jdk
  • Graalvm Enterprise Edition
Published: January 20, 2026

CVE-2026-21957

7.5
    Oracle
  • Oracle Vm Virtualbox
Published: January 20, 2026

CVE-2026-21982

7.5
    Oracle
  • Oracle Vm Virtualbox
Published: January 20, 2026

CVE-2026-21983

7.5
    Oracle
  • Virtualbox
Published: January 20, 2026

CVE-2026-21984

7.5
    Oracle
  • Oracle Vm Virtualbox
Published: January 20, 2026

CVE-2026-21932

7.4
    Oracle
  • Java Se
  • Graalvm For Jdk
  • Graalvm Enterprise Edition
Published: January 20, 2026

CVE-2025-36418

7.3
    Ibm
  • Applinx
Published: January 20, 2026

CVE-2025-33228

7.3
    Nvidia
  • Nsight Systems
Published: January 20, 2026

CVE-2025-33229

7.3
    Nvidia
  • Nsight Visual Studio
Published: January 20, 2026

CVE-2025-33230

7.3
    Nvidia
  • Nsight Systems
Published: January 20, 2026

CVE-2025-15380

7.2
    Notificationx
  • Notificationx
Published: January 20, 2026

CVE-2025-58743

7.2
    Milner
  • Imagedirector Capture
Published: January 20, 2026

CVE-2026-22218

7.1
    Chainlit
  • Chainlit
Published: January 20, 2026

CVE-2025-11743

7.1
    Rockwellautomation
  • *
Published: January 20, 2026

CVE-2025-55130

7.1
    Node.Js
  • Node.Js
Published: January 20, 2026

CVE-2025-55131

7.1
    Nodejs
  • Node
Published: January 20, 2026

CVE-2026-21641

7.1
    Revive Project
  • Revive Adserver
Published: January 20, 2026

CVE-2026-21976

7.1
    Oracle
  • Business Intelligence Enterprise Edition
Published: January 20, 2026

CVE-2026-21986

7.1
    Oracle
  • Vm Virtualbox
Published: January 20, 2026

CVE-2026-21939

7.0
    Oracle
  • Sqlcl
  • Database Server
Published: January 20, 2026

CVE-2026-1202

6.9
    Crmeb
  • Crmeb
Published: January 20, 2026

CVE-2026-1223

6.9
    Browan Communications
  • Prismx Mx100 Ap Controller
Published: January 20, 2026

CVE-2025-58744

6.9
    Milner
  • Image Director Capture
Published: January 20, 2026

CVE-2025-33231

6.7
    Nvidia
  • Nsight Systems
Published: January 20, 2026

CVE-2026-22770

6.5
    Imagemagick
  • Imagemagick
Published: January 20, 2026

CVE-2025-12573

6.5
    Bookingor
  • Bookingor Plugin
Published: January 20, 2026

CVE-2025-67261

6.5
    Abacre
  • Retail Point Of Sale
Published: January 20, 2026

CVE-2026-1245

6.5
    Binary-Parser
  • Binary-Parser
Published: January 20, 2026

CVE-2026-0622

6.5
    Open5gs
  • Open5gs
Published: January 20, 2026

CVE-2025-59464

6.5
    Node.Js
  • Node.Js
Published: January 20, 2026

CVE-2026-21923

6.5
    Oracle
  • Oracle Life Sciences Central Designer
Published: January 20, 2026

CVE-2026-21944

6.5
    Oracle
  • Agile Product Lifecycle Management For Process
Published: January 20, 2026

CVE-2026-21949

6.5
    Oracle
  • Mysql Server
Published: January 20, 2026

CVE-2026-21950

6.5
    Oracle
  • Mysql Server
Published: January 20, 2026

CVE-2026-21960

6.5
    Oracle
  • Oracle E-Business Suite
  • Oracle Applications Dba
Published: January 20, 2026

CVE-2026-21968

6.5
    Oracle
  • Mysql Server
Published: January 20, 2026

CVE-2026-21970

6.5
    Oracle
  • Life Sciences Central Designer
Published: January 20, 2026

CVE-2026-21978

6.5
    Oracle
  • Fletcher Universal Banking
Published: January 20, 2026

CVE-2026-21980

6.5
    Oracle
  • Life Sciences Central Coding
Published: January 20, 2026

CVE-2026-0608

6.4
    Wordpress
  • Head-Meta-Data
Published: January 20, 2026

CVE-2026-0690

6.4
    Wordpress
  • Plugin
Published: January 20, 2026

CVE-2025-36408

6.4
    Ibm
  • Applinx
Published: January 20, 2026

CVE-2026-1203

6.3
    Crmeb
  • Crmeb
Published: January 20, 2026

CVE-2025-36063

6.3
    Ibm
  • Sterling B2b Integrator
Published: January 20, 2026

CVE-2025-36065

6.3
    Ibm
  • Sterling Connect Express Adapter
  • Sterling B2b Integrator
Published: January 20, 2026

CVE-2025-36115

6.3
    Ibm
  • Sterling B2b Integrator
Published: January 20, 2026

CVE-2025-66523

6.1
    Foxit
  • Foxit Sign
Published: January 20, 2026

CVE-2025-36556

6.1
    Meddream
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-44000

6.1
    Meddream
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-46270

6.1
    Meddream
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-53516

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-53707

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-53854

6.1
    Cisco
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-54157

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-54495

6.1
    Cisco
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-54778

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-54814

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-54817

6.1
    Meddream
  • Pacspremium
Published: January 20, 2026

CVE-2025-54852

6.1
    Meddream
  • Meddream Pacs
Published: January 20, 2026

CVE-2025-54853

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-54861

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-55071

6.1
    Meddream
  • Pac Premium
Published: January 20, 2026

CVE-2025-57786

6.1
    Meddream
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-57787

6.1
    Meddream
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-57881

6.1
    Meddream
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-58080

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-58087

6.1
    Meddream
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-58088

6.1
    Meddream
  • Meddream Pacs
Published: January 20, 2026

CVE-2025-58089

6.1
    Meddream
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-58090

6.1
    Meddream
  • Meddream Pacs Premium
Published: January 20, 2026

CVE-2025-58091

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-58092

6.1
    Meddream
  • Pacs
Published: January 20, 2026

CVE-2025-58093

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-58094

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-58095

6.1
    Meddream
  • Pacs Premium
Published: January 20, 2026

CVE-2025-36066

6.1
    Ibm
  • Sterling B2b Integrator
Published: January 20, 2026

CVE-2025-67824

6.1
    Atlassian
  • Worklogpro
  • Jira Data Center
Published: January 20, 2026

CVE-2025-67263

6.1
    Abacre
  • Retail Point Of Sale
Published: January 20, 2026

CVE-2026-21642

6.1
    Revive
  • Adserver
Published: January 20, 2026

CVE-2026-21663

6.1
    Revive
  • Revive Adserver
Published: January 20, 2026

CVE-2026-21664

6.1
    Revive Adserver
  • Revive Adserver
Published: January 20, 2026

CVE-2026-21933

6.1
    Oracle
  • Java Se
  • Graalvm For Jdk
  • Graalvm Enterprise Edition
Published: January 20, 2026

CVE-2026-21938

6.1
    Oracle
  • Peoplesoft Enterprise Peopletools
Published: January 20, 2026

CVE-2026-21943

6.1
    Oracle
  • Oracle E-Business Suite
Published: January 20, 2026

CVE-2026-21946

6.1
    Oracle
  • Jd Edwards Enterpriseone Tools
Published: January 20, 2026

CVE-2026-21951

6.1
    Oracle
  • Peoplesoft Enterprise Peopletools
Published: January 20, 2026

CVE-2026-21961

6.1
    Oracle
  • Peoplesoft Enterprise Hcm Human Resources
Published: January 20, 2026

CVE-2026-21966

6.1
    Oracle
  • Hospitality Opera
Published: January 20, 2026

CVE-2025-15282

6.0
    Python
  • Python
Published: January 20, 2026

CVE-2026-0672

6.0
    Python
  • Python
Published: January 20, 2026

CVE-2026-21963

6.0
    Oracle
  • Vm Virtualbox
Published: January 20, 2026

CVE-2026-21985

6.0
    Oracle
  • Virtualbox
Published: January 20, 2026

CVE-2025-1719

5.9
    Ibm
  • Concert
Published: January 20, 2026

CVE-2025-1722

5.9
    Ibm
  • Concert
Published: January 20, 2026

CVE-2025-59466

5.9
    Node.Js
  • Node.Js
Published: January 20, 2026

CVE-2026-21637

5.9
    Nodejs
  • Node.Js
Published: January 20, 2026

CVE-2025-15366

5.9
    Python
  • Imaplib
Published: January 20, 2026

CVE-2025-15367

5.9
    Python
  • Python
  • Poplib
Published: January 20, 2026

CVE-2026-0865

5.9
    Python
  • Python
Published: January 20, 2026

CVE-2026-1180

5.8
    Keycloak
  • Keycloak
Published: January 20, 2026

CVE-2026-21636

5.8
    Node.Js
  • Node.Js
Published: January 20, 2026

CVE-2026-21927

5.8
    Oracle
  • Solaris
Published: January 20, 2026

CVE-2026-21935

5.8
    Oracle
  • Solaris
Published: January 20, 2026

CVE-2025-11468

5.7
    Python
  • Python
Published: January 20, 2026

CVE-2026-1194

5.5
    Mineadmin
  • Swagger
Published: January 20, 2026

CVE-2026-23874

5.5
    Imagemagick
  • Imagemagick
Published: January 20, 2026

CVE-2025-41768

5.5
    Beckhoff
  • Twincat 3 Hmi Server
Published: January 20, 2026

CVE-2025-14369

5.5
    Dr Libs
  • Dr Flac
Published: January 20, 2026

CVE-2025-36058

5.5
    Ibm
  • Business Automation Workflow
  • Cloud Pak For Business Automation
Published: January 20, 2026

CVE-2025-15466

5.4
    Wordpress
  • Image Photo Gallery Final Tiles Grid
Published: January 20, 2026

CVE-2026-0901

5.4
    Google
  • Chrome
Published: January 20, 2026

CVE-2026-0903

5.4
    Google
  • Chrome
Published: January 20, 2026

CVE-2026-0904

5.4
    Google
  • Chrome
Published: January 20, 2026

CVE-2025-15043

5.4
    Wordpress
  • The Events Calendar
Published: January 20, 2026

CVE-2026-0548

5.4
    Wordpress
  • Tutor Lms
Published: January 20, 2026

CVE-2025-36113

5.4
    Ibm
  • Sterling B2b Integrator
  • Sterling Connect Express Adapter
Published: January 20, 2026

CVE-2025-36396

5.4
    Ibm
  • Application Gateway
Published: January 20, 2026

CVE-2025-36397

5.4
    Ibm
  • Application Gateway
Published: January 20, 2026

CVE-2025-36409

5.4
    Ibm
  • Applinx
Published: January 20, 2026

CVE-2026-21924

5.4
    Oracle
  • Oracle Utilities Application Framework
Published: January 20, 2026

CVE-2026-21931

5.4
    Oracle
  • Apex
Published: January 20, 2026

CVE-2026-21934

5.4
    Oracle
  • Peoplesoft Enterprise Peopletools
Published: January 20, 2026

CVE-2026-21971

5.4
    Oracle
  • Peoplesoft
  • Peoplesoft Enterprise Scm
Published: January 20, 2026

CVE-2025-14978

5.3
    Peachpay
  • Payments And Express Checkout
Published: January 20, 2026

CVE-2025-14351

5.3
    Wordpress
  • Custom Fonts Host Your Fonts Locally
Published: January 20, 2026

CVE-2025-14798

5.3
    Learnpress
  • Learnpress
Published: January 20, 2026

CVE-2025-14348

5.3
    Wemail
  • Wemail
Published: January 20, 2026

CVE-2026-1218

5.3
    Bjskzy
  • Zhiyou Erp
Published: January 20, 2026

CVE-2025-36419

5.3
    Ibm
  • Applinx
Published: January 20, 2026

CVE-2026-21928

5.3
    Oracle
  • Oracle Solaris
Published: January 20, 2026

CVE-2026-21929

5.3
    Oracle
  • Mysql
Published: January 20, 2026

CVE-2026-21972

5.3
    Oracle
  • Oracle Configurator
  • Oracle E-Business Suite
Published: January 20, 2026

CVE-2026-21974

5.3
    Oracle
  • Life Sciences Central Designer
Published: January 20, 2026

CVE-2026-0895

5.2
    Typo3
  • Typo3 Extension
Published: January 20, 2026

CVE-2025-41084

5.1
    Sesame
  • Sesame Web Application
Published: January 20, 2026

CVE-2025-40644

5.1
    Riftzilla
  • Qrgent
Published: January 20, 2026

CVE-2025-40679

5.1
    Bdtask
  • Isshue
Published: January 20, 2026

CVE-2025-41024

5.1
    Poultry Farm
  • Poultry Farm Management System
Published: January 20, 2026

CVE-2025-41025

5.1
    Poultryfarm
  • Management System
Published: January 20, 2026

CVE-2025-41081

5.1
    Zuinq Studio
  • Ismygym
Published: January 20, 2026

CVE-2026-1183

5.1
    Botble
  • Transp
  • Athena
  • Martfury
  • Homzen
Published: January 20, 2026

CVE-2026-21942

5.0
    Oracle
  • Solaris
Published: January 20, 2026

CVE-2025-13925

4.9
    Ibm
  • Aspera Console
Published: January 20, 2026

CVE-2026-21936

4.9
    Oracle
  • Mysql Server
Published: January 20, 2026

CVE-2026-21937

4.9
    Oracle
  • Mysql Server
Published: January 20, 2026

CVE-2026-21941

4.9
    Oracle
  • Mysql Server
Published: January 20, 2026

CVE-2026-21948

4.9
    Oracle
  • Mysql Server
Published: January 20, 2026

CVE-2026-21952

4.9
    Oracle
  • Mysql Server
Published: January 20, 2026

CVE-2026-21959

4.9
    Oracle
  • Oracle E-Business Suite
  • Oracle Workflow
Published: January 20, 2026

CVE-2026-21964

4.9
    Oracle
  • Mysql Server
Published: January 20, 2026

CVE-2025-66803

4.8
    Hotwired
  • Turbo
Published: January 20, 2026

CVE-2026-21925

4.8
    Oracle
  • Java Se
  • Graalvm For Jdk
  • Graalvm Enterprise Edition
Published: January 20, 2026

CVE-2025-36059

4.7
    Ibm
  • Business Automation Workflow
  • Cloud Pak For Business Automation
Published: January 20, 2026

CVE-2026-21981

4.6
    Oracle
  • Vm Virtualbox
Published: January 20, 2026

CVE-2026-21975

4.5
    Oracle
  • Database Server
Published: January 20, 2026

CVE-2026-1042

4.4
    Wordpress
  • Wp Hello Bar
Published: January 20, 2026

CVE-2026-1045

4.4
    Wordpress
  • Plugin
  • Viet Contact Plugin
Published: January 20, 2026

CVE-2026-1051

4.3
    Wordpress
  • Newsletter
Published: January 20, 2026

CVE-2026-0554

4.3
    Notificationx
  • Notificationx
Published: January 20, 2026

CVE-2026-21922

4.2
    Oracle
  • Planning And Budgeting Cloud Service
  • Hyperion
Published: January 20, 2026

CVE-2026-21979

4.2
    Oracle
  • Planning And Budgeting Cloud Service
  • Hyperion
  • Epm Agent
Published: January 20, 2026

CVE-2025-36411

3.5
    Ibm
  • Applinx
Published: January 20, 2026

CVE-2025-36410

3.1
    Ibm
  • Applinx
Published: January 20, 2026

CVE-2026-21947

3.1
    Oracle
  • Java Se
Published: January 20, 2026

CVE-2026-21977

3.1
    Oracle
  • Zero Data Loss Recovery Appliance Software
Published: January 20, 2026

CVE-2025-55132

2.8
    Node.Js
  • Node.Js
Published: January 20, 2026

CVE-2026-21640

2.7
    Revive Adserver
  • Revive Adserver
Published: January 20, 2026

CVE-2026-21965

2.7
    Oracle
  • Mysql
Published: January 20, 2026

CVE-2026-1195

2.3
    Mineadmin
  • Mineadmin
Published: January 20, 2026

CVE-2026-1196

2.3
    Mineadmin
  • Mineadmin
Published: January 20, 2026

CVE-2026-1197

2.3
    Mineadmin
  • Mineadmin
Published: January 20, 2026

CVE-2026-21930

2.3
    Oracle
  • Zfs Storage Appliance Kit
Published: January 20, 2026

CVE-2026-23909

None
    Fortinet
  • Fortinet
Published: January 20, 2026

CVE-2026-23910

None
    Fortinet
  • Fortinet
Published: January 20, 2026

CVE-2026-23911

None
    Fortinet
  • Fortinet
Published: January 20, 2026

CVE-2026-23912

None
    Fortinet
  • Fortinet
Published: January 20, 2026

CVE-2026-23913

None
    Fortinet
  • Fortinet
Published: January 20, 2026

CVE-2026-23914

None
    Fortinet
  • Fortinet
Published: January 20, 2026

CVE-2026-23915

None
    Fortinet
  • Fortinet
Published: January 20, 2026

CVE-2026-23916

None
    Fortinet
  • Fortinet
Published: January 20, 2026

CVE-2026-23917

None
    Fortinet
  • Fortinet
Published: January 20, 2026

CVE-2025-15281

None
    Gnu
  • Gnu C Library
Published: January 20, 2026

CVE-2025-14883

None
    Wordpress
  • *
Published: January 20, 2026
Click here to see more Vulnerabilities