Tag: 2026-01-28

6 Attack Reports | 220 Vulnerabilities

Attack reports

Unveiling the Weaponized Web Shell EncystPHP

A sophisticated web shell named EncystPHP has been discovered, targeting FreePBX systems through the CVE-2025-64328 vulnerability. Associated with the hacker group INJ3CTOR3, this malware exhibits advanced capabilities including remote command execution, persistence mechanisms, and web shell deploy…
evasion
command injection
persistence
web shell
CVE-2025-64328
2026-01-28
encystphp
freepbx
telephony
Published: January 28, 2026
Linked vulnerabilities : CVE-2025-64328 (CVSS 8.6), CVE-2019-19006, CVE-2021-45461
Downloadable IOCs: 5

Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan

A sophisticated Android spyware campaign targeting individuals in Pakistan has been uncovered, using romance scam tactics as a lure. The malicious app, named GhostChat, poses as a chat platform with fake female profiles, requiring hardcoded passcodes to access. Once installed, it enables covert sur…
social engineering
android
whatsapp
pakistan
spyware
data exfiltration
clickfix
2026-01-28
badbazaar
ghostchat
romance scam
Published: January 28, 2026
Linked vulnerabilities : CVE-2025-50165 (CVSS 9.8)
Downloadable IOCs: 4

Can't stop, won't stop: TA584 innovates initial access

TA584, a prominent initial access broker targeting organizations globally, demonstrated significant changes in attack strategies throughout 2025. The actor expanded its global targeting, adopted ClickFix social engineering techniques, and began delivering new malware called Tsundere Bot. TA584's op…
xworm
social engineering
cobalt strike
cybercrime
dcrat
email campaigns
warmcookie
clickfix
initial access broker
malware delivery
xeno rat
ursnif
tsundere bot
2026-01-28
ldr4
Published: January 28, 2026
Downloadable IOCs: 7

PureRAT: Attacker Now Using AI to Build Toolset

A Vietnamese threat actor is employing AI to develop code for an ongoing phishing campaign delivering PureRAT malware and other payloads. The attacks begin with phishing emails disguised as job opportunities, potentially targeting work computers. The attacker's use of AI is evidenced by detailed co…
phishing
cybercrime
sideloading
vietnam
ai-assisted
purerat
job offers
2026-01-28
hvnc
Published: January 28, 2026
Downloadable IOCs: 76

APT Attacks Target Indian Government Using SHEETCREEP, FIREPOWER, and MAILCREEP

A new campaign targeting Indian government entities was uncovered, utilizing three backdoors: SHEETCREEP, FIREPOWER, and MAILCREEP. These tools leverage legitimate cloud services like Google Sheets, Firebase, and Microsoft Graph API for command and control, enabling the attackers to blend in with n…
backdoor
apt
pakistan
india
government
cloud services
generative ai
2026-01-28
firepower
mailcreep
sheetcreep
Published: January 28, 2026
Downloadable IOCs: 19

Weekly Threat Bulletin – January 28th, 2026

This weekly threat bulletin highlights several critical vulnerabilities and emerging threats. A severe RCE vulnerability in React Server Components and Next.js (CVE-2025-55182) is being actively exploited. CISA added four critical flaws to its 'Must-Patch' list, including vulnerabilities in Versa C…
ransomware
xmrig
cobalt strike
macos
mirai
sliver
gafgyt
qilin
cisa
interlock
rce
lizkebab
bashlite
aisuru
clop
vshell
next.js
CVE-2025-31125
CVE-2025-34026
pulsepack
rondodox
CVE-2025-54313
beacon
morte
CVE-2025-61882
oracle e-business suite
nezha
agenda
CVE-2025-55182
react
peerblight
etherrat
CVE-2025-68645
rondo
monetastealer
gitlab
2026-01-28
agendacrypt
angryrebel
bash0day
bpfdoor
compood
kswapdoor
lzrd
masuta
miori
noodle rat
okiru
puremasuta
resgod
rondobot
satori
scavenger
splinter
torlus
wicked
Published: January 28, 2026
Linked vulnerabilities : CVE-2025-24893 (CVSS 9.8), CVE-2023-1389, CVE-2025-31125 (CVSS 5.3), CVE-2025-34026 (CVSS 9.2), CVE-2025-54313 (CVSS 7.5), CVE-2025-61882 (CVSS 9.8), CVE-2025-55182 (CVSS 10.0), CVE-2025-66478, CVE-2025-55184 (CVSS 7.5), CVE-2025-55183 (CVSS 5.3), CVE-2025-68645 (CVSS 8.8), CVE-2025-13335 (CVSS 6.5), CVE-2025-13927 (CVSS 7.5), CVE-2025-13928 (CVSS 7.5), CVE-2026-0723 (CVSS 7.4), CVE-2026-1102 (CVSS 5.3)
Downloadable IOCs: 37
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-23830

10.0
    Sandboxjs
  • Sandboxjs
Published: January 28, 2026

CVE-2025-57792

10.0
    Explorance
  • Blue
Published: January 28, 2026

CVE-2026-24897

10.0
    Erugo
  • Erugo
Published: January 28, 2026

CVE-2026-24841

9.9
    Dokploy
  • Dokploy
Published: January 28, 2026

CVE-2025-57795

9.9
    Explorance
  • Blue
Published: January 28, 2026

CVE-2025-40551

9.8
    Solarwinds
  • Web Help Desk
Published: January 28, 2026

CVE-2025-40552

9.8
    Solarwinds
  • Web Help Desk
Published: January 28, 2026

CVE-2025-40553

9.8
    Solarwinds
  • Web Help Desk
Published: January 28, 2026

CVE-2025-40554

9.8
    Solarwinds
  • Web Help Desk
Published: January 28, 2026

CVE-2026-1056

9.8
    Wordpress
  • Snow Monkey Forms
Published: January 28, 2026

CVE-2025-61140

9.8
    Jsonpath
  • Jsonpath
Published: January 28, 2026

CVE-2025-69517

9.8
    Amidaware
  • Tactical Rmm
Published: January 28, 2026

CVE-2026-24685

9.4
    Openproject
  • Openproject
Published: January 28, 2026

CVE-2026-24838

9.1
    Dotnetnuke
  • Dotnetnuke
Published: January 28, 2026

CVE-2025-57794

9.1
    Explorance
  • Blue
Published: January 28, 2026

CVE-2025-69602

9.1
    Altumcode
  • 66biolinks
Published: January 28, 2026

CVE-2026-24772

8.9
    Openproject
  • Openproject
Published: January 28, 2026

CVE-2025-67645

8.8
    Openemr
  • Openemr
Published: January 28, 2026

CVE-2025-7740

8.8
    Hitachi
  • Supros
Published: January 28, 2026

CVE-2025-14386

8.8
    Wordpress
  • Search Atlas Seo
Published: January 28, 2026

CVE-2026-0844

8.8
    Wordpress
  • Simple User Registration
Published: January 28, 2026

CVE-2025-58150

8.8
    Xen
  • Xen
Published: January 28, 2026

CVE-2020-36945

8.8
    Webdam
  • Webdam User Registration Login System
Published: January 28, 2026

CVE-2020-36972

8.8
    Smartblog
  • Smartblog
Published: January 28, 2026

CVE-2026-24835

8.8
    Containers
  • Podman Desktop
Published: January 28, 2026

CVE-2026-22243

8.7
    Egroupware
  • Egroupware
Published: January 28, 2026

CVE-2020-36963

8.7
    Intelbras
  • Router Rf 301k
Published: January 28, 2026

CVE-2020-36964

8.7
    Yatinywinftp
  • Yatinywinftp
Published: January 28, 2026

CVE-2020-36969

8.7
    M/Monit
  • M/Monit
Published: January 28, 2026

CVE-2020-36973

8.7
    Pdw
  • File Browser
Published: January 28, 2026

CVE-2026-0750

8.7
    Drupal
  • Commerce Paybox
Published: January 28, 2026

CVE-2025-57793

8.6
    Explorance
  • Blue
Published: January 28, 2026

CVE-2025-59891

8.5
    Syncbreeze
  • Sync Breeze Enterprise Server
    Diskpulse
Published: January 28, 2026

CVE-2025-59892

8.5
    Synctech
  • Sync Breeze Enterprise Server
    Diskpulse
Published: January 28, 2026

CVE-2025-59893

8.5
    Syncbreeze
  • Sync Breeze Enterprise Server
    Diskpulse
Published: January 28, 2026

CVE-2025-59894

8.5
    Syncbreeze
  • Sync Breeze Enterprise Server
    Diskpulse
Published: January 28, 2026

CVE-2025-59901

8.5
    Disk Pulse
  • Disk Pulse Enterprise
Published: January 28, 2026

CVE-2020-36984

8.5
    Epson
  • Printer Software
Published: January 28, 2026

CVE-2020-36985

8.5
    Ip Watcher
  • Ip Watcher
Published: January 28, 2026

CVE-2020-36986

8.5
    Prey
  • Prey
Published: January 28, 2026

CVE-2020-36987

8.5
    *
  • Program Access Controller
Published: January 28, 2026

CVE-2020-36989

8.5
    Forensit
  • Appx Management Service
Published: January 28, 2026

CVE-2020-36990

8.5
    Input Director
  • Input Director
Published: January 28, 2026

CVE-2020-36991

8.5
    Sharemouse
  • Sharemouse
Published: January 28, 2026

CVE-2020-36992

8.5
    Nordvpn
  • Nord Vpn
Published: January 28, 2026

CVE-2026-24769

8.5
    Nocodb
  • Nocodb
Published: January 28, 2026

CVE-2020-36961

8.4
    10-Strike
  • Network Inventory Explorer
Published: January 28, 2026

CVE-2020-36965

8.4
    Docprint
  • Docprint Pro
Published: January 28, 2026

CVE-2020-36967

8.4
    Zortam
  • Zortam Mp3 Media Studio
Published: January 28, 2026

CVE-2020-36971

8.4
    Nidesoft
  • 3gp Video Converter
Published: January 28, 2026

CVE-2025-55292

8.2
    Meshtastic
  • Meshtastic
Published: January 28, 2026

CVE-2026-24842

8.2
    Node
  • Tar
Published: January 28, 2026

CVE-2025-59895

8.2
    Syncbreeze
  • Sync Breeze Enterprise
    Diskpulse
Published: January 28, 2026

CVE-2025-40536

8.1
    Solarwinds
  • Web Help Desk
Published: January 28, 2026

CVE-2025-13982

8.1
    Drupal
  • Login Time Restriction
Published: January 28, 2026

CVE-2025-14472

8.1
    Drupal
  • Acquia Content Hub
Published: January 28, 2026

CVE-2026-24785

8.0
    Clatter
  • Clatter
Published: January 28, 2026

CVE-2026-24840

8.0
    Dokploy
  • Dokploy
Published: January 28, 2026

CVE-2026-21569

7.9
    Atlassian
  • Crowd
Published: January 28, 2026

CVE-2025-57283

7.8
    Browserstack
  • Browserstack-Local
Published: January 28, 2026

CVE-2025-33217

7.8
    Nvidia
  • Display Driver
Published: January 28, 2026

CVE-2025-33218

7.8
    Nvidia
  • Nvidia Gpu Display Driver
Published: January 28, 2026

CVE-2025-33219

7.8
    Nvidia
  • Nvidia Display Driver
Published: January 28, 2026

CVE-2025-33220

7.8
    Nvidia
  • Vgpu Software
Published: January 28, 2026

CVE-2025-46691

7.8
    Dell
  • Premiercolor Panel Driver
Published: January 28, 2026

CVE-2025-61731

7.8
    Golang
  • Cmd Go
  • Pkg Config
Published: January 28, 2026

CVE-2026-24856

7.8
    Iccdev
  • Iccdev
Published: January 28, 2026

CVE-2022-40619

7.7
    Netgear
  • R6230
  • R6260
  • R7000
  • R8900
  • R9000
  • Xr300
  • Rbr20
  • Rbr50
  • Rbs20
  • Rbs50
Published: January 28, 2026

CVE-2022-40620

7.7
    Netgear
  • R6230
  • R6260
  • R7000
  • R8900
  • R9000
  • Xr300
  • Orbi Rbr20
  • Orbi Rbr50
  • Orbi Rbs20
  • Orbi Rbs50
Published: January 28, 2026

CVE-2026-24833

7.6
    Dnn
  • Dnn
Published: January 28, 2026

CVE-2026-24836

7.6
    Dnn
  • Dnn
Published: January 28, 2026

CVE-2026-24837

7.6
    Dnn
  • Dotnetnuke
Published: January 28, 2026

CVE-2025-68662

7.6
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2025-40537

7.5
    Solarwinds
  • Web Help Desk
Published: January 28, 2026

CVE-2026-0702

7.5
    Wordpress
  • Vidshop
Published: January 28, 2026

CVE-2026-1280

7.5
    Wordpress
  • Frontend File Manager
Published: January 28, 2026

CVE-2025-65886

7.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-65888

7.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-65889

7.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-65890

7.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-65891

7.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-70999

7.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-71000

7.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-13986

7.5
    Drupal
  • Disable Login Page
Published: January 28, 2026

CVE-2025-14840

7.5
    Drupal
  • Http Client Manager
Published: January 28, 2026

CVE-2025-61726

7.5
    Golang
  • Net
Published: January 28, 2026

CVE-2025-71003

7.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-71007

7.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2026-1505

7.3
    D-Link
  • Dir-615
Published: January 28, 2026

CVE-2026-1506

7.3
    D-Link
  • Dir-615
Published: January 28, 2026

CVE-2026-0832

7.3
    Wordpress
  • New User Approve
Published: January 28, 2026

CVE-2025-14610

7.2
    Tablemaster
  • Elementor Plugin
Published: January 28, 2026

CVE-2026-1400

7.2
    Wordpress
  • Ai Engine
Published: January 28, 2026

CVE-2025-54373

7.1
    Openemr
  • Openemr
Published: January 28, 2026

CVE-2026-1514

7.1
    2100 Technology
  • Document Management System
Published: January 28, 2026

CVE-2025-26386

7.1
    Johnsoncontrols
  • Istar Configuration Utility
Published: January 28, 2026

CVE-2020-36968

7.1
    M/Monit
  • M/Monit
Published: January 28, 2026

CVE-2025-68479

7.1
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2025-69218

7.1
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2025-13917

7.0
    Symantec
  • Wss Agent
Published: January 28, 2026

CVE-2025-68119

7.0
    Golang
  • Go
    Mercurial
    Git
Published: January 28, 2026

CVE-2026-0483

6.9
    Livehelperchat
  • Live Helper Chat
Published: January 28, 2026

CVE-2020-36944

6.9
    Ilias
  • Ilias Learning Management System
Published: January 28, 2026

CVE-2020-36970

6.9
    Pmb
  • Pmb
Published: January 28, 2026

CVE-2025-68933

6.9
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2026-1534

6.9
    Code-Projects
  • Online Music Site
Published: January 28, 2026

CVE-2026-1535

6.9
    Code-Projects
  • Online Music Site
Published: January 28, 2026

CVE-2026-23743

6.9
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2026-1545

6.9
    Itsourcecode
  • School Management System
Published: January 28, 2026

CVE-2026-24784

6.8
    Dnn
  • Dnn
Published: January 28, 2026

CVE-2025-57796

6.8
    Explorance
  • Blue
Published: January 28, 2026

CVE-2025-13918

6.7
    Symantec
  • Endpoint Protection
Published: January 28, 2026

CVE-2020-36943

6.7
    Asc
  • Timettables
Published: January 28, 2026

CVE-2026-24134

6.5
    Studios
  • Studio-Cms
Published: January 28, 2026

CVE-2025-65887

6.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-71001

6.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-61728

6.5
    Golang
  • Zip
Published: January 28, 2026

CVE-2025-68934

6.5
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2025-71002

6.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2026-21865

6.5
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2025-71004

6.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-71005

6.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2025-71006

6.5
    Oneflow
  • Oneflow
Published: January 28, 2026

CVE-2026-24742

6.5
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2026-24888

6.5
    Makerjs
  • Makerjs
Published: January 28, 2026

CVE-2025-8072

6.4
    Wordpress
  • Plugin
Published: January 28, 2026

CVE-2025-12709

6.4
    Wordpress
  • Interactions
Published: January 28, 2026

CVE-2025-14039

6.4
    Wordpress
  • Simple Folio
Published: January 28, 2026

CVE-2025-9082

6.4
    Wordpress
  • Wpbits Addons For Elementor
Published: January 28, 2026

CVE-2026-1244

6.4
    Wordpress
  • Plugin
    Forms Bridge
Published: January 28, 2026

CVE-2026-1295

6.4
    Wordpress
  • Buy Now Plus
Published: January 28, 2026

CVE-2025-14283

6.4
    Blockart
  • Blockart Blocks
Published: January 28, 2026

CVE-2025-14865

6.4
    Passster
  • Password Protect Pages And Content
Published: January 28, 2026

CVE-2026-24775

6.3
    Openproject
  • Openproject
  • Op-Blocknote-Extensions
Published: January 28, 2026

CVE-2026-24739

6.3
    Symfony
  • Symfony
Published: January 28, 2026

CVE-2025-61730

6.2
    Golang
  • Go
Published: January 28, 2026

CVE-2026-24852

6.1
    Iccdev
  • Iccdev
Published: January 28, 2026

CVE-2026-1513

6.1
    Navercorp
  • Billboard.Js
Published: January 28, 2026

CVE-2026-1466

6.1
    Jirafeau
  • Jirafeau
Published: January 28, 2026

CVE-2025-14063

6.1
    Wordpress
  • Seo Links Interlinking Plugin
Published: January 28, 2026

CVE-2025-13984

6.1
    Next.Js
  • Next.Js
Published: January 28, 2026

CVE-2025-41351

6.0
    Funambol
  • Funambol
Published: January 28, 2026

CVE-2025-68666

5.9
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2026-1536

5.8
    Libsoup
  • Libsoup
Published: January 28, 2026

CVE-2026-1539

5.8
    Gnome
  • Libsoup
Published: January 28, 2026

CVE-2026-24768

5.7
    Nocodb
  • Nocodb
Published: January 28, 2026

CVE-2026-1521

5.5
    Open5gs
  • Open5gs
Published: January 28, 2026

CVE-2026-1522

5.5
    Open5gs
  • Open5gs
Published: January 28, 2026

CVE-2025-33237

5.5
    Nvidia
  • Hd Audio Driver
Published: January 28, 2026

CVE-2025-46306

5.5
    Apple
  • Macos Tahoe
  • Keynote
  • Ios
  • Ipad Os
Published: January 28, 2026

CVE-2026-24857

5.5
    Bulk Extractor
  • Bulk Extractor
Published: January 28, 2026

CVE-2025-13919

5.4
    Symantec
  • Endpoint Protection
Published: January 28, 2026

CVE-2025-13979

5.4
    Drupal
  • Mini Site
Published: January 28, 2026

CVE-2025-13983

5.4
    Drupal
  • Tagify
Published: January 28, 2026

CVE-2026-24850

5.3
    Rustcrypto
  • Ml-Dsa
Published: January 28, 2026

CVE-2025-13471

5.3
    Wordpress
  • User Activity Log
Published: January 28, 2026

CVE-2026-1298

5.3
    Wordpress
  • Easy Replace Image Plugin
Published: January 28, 2026

CVE-2026-0825

5.3
    Wordpress
  • Contact Form 7
  • Wpforms
    Elementor
Published: January 28, 2026

CVE-2026-1310

5.3
    Wordpress
  • Simple Calendar
Published: January 28, 2026

CVE-2026-1054

5.3
    Registrationmagic
  • Registrationmagic
Published: January 28, 2026

CVE-2026-1389

5.3
    Wordpress
  • Document Embedder
Published: January 28, 2026

CVE-2025-15511

5.3
    Wordpress
  • Rupantorpay
Published: January 28, 2026

CVE-2026-1391

5.3
    Wordpress
  • Plugin
Published: January 28, 2026

CVE-2026-1060

5.3
    Wp Adminify
  • Wp Adminify
Published: January 28, 2026

CVE-2020-36962

5.3
    Tendenci
  • Tendenci
Published: January 28, 2026

CVE-2025-68660

5.3
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2023-37525

5.3
    Hcl
  • Bigfix Compliance
Published: January 28, 2026

CVE-2025-13980

5.3
    Drupal
  • Ckeditor 5 Premium Features
Published: January 28, 2026

CVE-2025-13985

5.3
    Drupal
  • Entity Share
Published: January 28, 2026

CVE-2026-1544

5.3
    D-Link
  • Dir-823x
Published: January 28, 2026

CVE-2026-1546

5.3
    Jishenghua
  • Jserp
Published: January 28, 2026

CVE-2026-1547

5.3
    Totolink
  • A7000r
Published: January 28, 2026

CVE-2026-24889

5.3
    Soroban-Sdk
  • Soroban-Sdk
Published: January 28, 2026

CVE-2026-1548

5.3
    Totolink
  • A7000r
Published: January 28, 2026

CVE-2026-1549

5.3
    Jishenghua
  • Jsherp
Published: January 28, 2026

CVE-2026-1550

5.3
    Phpgurukul
  • Hospital Management System
Published: January 28, 2026

CVE-2025-59896

5.1
    Syncbreeze
  • Syncbreeze Enterprise Server
    Diskpulse
Published: January 28, 2026

CVE-2025-59897

5.1
    Syncbreeze
  • Sync Breeze Enterprise Server
    Diskpulse
Published: January 28, 2026

CVE-2025-59898

5.1
    Syncbreeze
  • Enterprise Server
    Diskpulse
Published: January 28, 2026

CVE-2025-59899

5.1
    Syncbreeze
  • Sync Breeze Enterprise Server
    Diskpulse
Published: January 28, 2026

CVE-2025-59900

5.1
    Syncbreeze
  • Sync Breeze Enterprise Server
    Diskpulse
Published: January 28, 2026

CVE-2020-36993

5.1
    Limesurvey
  • Limesurvey
Published: January 28, 2026

CVE-2025-69601

5.1
    Altumcode
  • 66biolinks
Published: January 28, 2026

CVE-2025-69289

5.1
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2026-1533

5.1
    Code-Projects
  • Online Music Site
Published: January 28, 2026

CVE-2026-24766

4.9
    Nocodb
  • Nocodb
Published: January 28, 2026

CVE-2026-24767

4.9
    Nocodb
  • Nocodb
Published: January 28, 2026

CVE-2020-36988

4.8
    Pdw
  • File Browser
Published: January 28, 2026

CVE-2026-1520

4.8
    Rethinkdb
  • Rethinkdb
Published: January 28, 2026

CVE-2025-70336

4.8
    Podcastgenerator
  • Podcastgenerator
Published: January 28, 2026

CVE-2026-0749

4.8
    Drupal
  • Drupal
Published: January 28, 2026

CVE-2026-1532

4.8
    D-Link
  • Dcs-700l
Published: January 28, 2026

CVE-2026-24839

4.7
    Dokploy
  • Dokploy
Published: January 28, 2026

CVE-2025-66488

4.6
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2025-67723

4.6
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2026-1083

4.4
    Wordpress
  • Appointment Hour Booking
Published: January 28, 2026

CVE-2026-1053

4.4
    Wordpress
  • Ivory Search
Published: January 28, 2026

CVE-2026-1381

4.4
    Woocommerce
  • Woocommerce
Published: January 28, 2026

CVE-2026-1399

4.4
    Wp Google Ad Manager
  • Wp Google Ad Manager
Published: January 28, 2026

CVE-2025-13981

4.4
    Drupal
  • Ai
Published: January 28, 2026

CVE-2026-0818

4.3
    Mozilla
  • Thunderbird
Published: January 28, 2026

CVE-2025-14616

4.3
    Wordpress
  • Recooty Job Widget
Published: January 28, 2026

CVE-2026-1377

4.3
    Wordpress
  • Imwptip Plugin
Published: January 28, 2026

CVE-2026-1380

4.3
    Wordpress
  • Bitcoin Donate Button
Published: January 28, 2026

CVE-2026-1398

4.3
    Wordpress
  • Change Wp Url
Published: January 28, 2026

CVE-2025-14795

4.3
    Wordpress
  • Stop Spammers Classic
Published: January 28, 2026

CVE-2025-46316

4.3
    Apple
  • Ios
  • Ipados
  • Pages
  • Macos
Published: January 28, 2026

CVE-2025-68659

4.3
    Discourse
  • Discourse
Published: January 28, 2026

CVE-2026-23553

2.9
    Xen
  • Xen
Published: January 28, 2026

CVE-2026-1237

2.1
    Juju
  • Juju
Published: January 28, 2026

CVE-2026-24859

None
    Fortinet
  • *
Published: January 28, 2026

CVE-2026-24860

None
    Fortinet
  • Fortinet
Published: January 28, 2026

CVE-2026-24861

None
    Fortinet
  • Fortinet
Published: January 28, 2026

CVE-2026-24862

None
    Fortinet
  • Fortinet
Published: January 28, 2026

CVE-2026-24863

None
    Fortinet
  • Fortinet
Published: January 28, 2026

CVE-2026-24864

None
    Fortinet
  • Unknown
Published: January 28, 2026

CVE-2026-24865

None
    Fortinet
  • *
Published: January 28, 2026

CVE-2026-24866

None
    Fortinet
  • *
Published: January 28, 2026

CVE-2026-24867

None
    Fortinet
  • Fortinet
Published: January 28, 2026

CVE-2026-23014

None
    Linux
  • Linux Kernel
Published: January 28, 2026
Click here to see more Vulnerabilities