CVEs published January 3, 2026
10 CVEs were published on January 3, 2026: 1 critical, 1 high.
- Published
- 10
- Critical
- 1
- High
- 1
- Medium
- 8
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Petlibrio Smart Pet Feeder Platform
- 6
- IceWhale Tech CasaOS
- 1
- Mintplex-Labs anything-llm
- 1
- Nuvation Energy Multi-Stack Controller
- 1
- Nuvation Energy nCloud VPN Service
- 1
Critical 1
High 1
Medium, low and unrated 8
- CVE-2025-3660Petlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpointPetlibrio Smart Pet Feeder Platform
- CVE-2025-3654Petlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpointPetlibrio Smart Pet Feeder Platform
- CVE-2025-3653Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpointPetlibrio Smart Pet Feeder Platform
- CVE-2025-3652Petlibro Smart Pet Feeder Platform through 1.7.31 Audio Information Disclosure via API endpointPetlibrio Smart Pet Feeder Platform
- CVE-2025-3646Petlibro Smart Pet Feeder Platform through 1.7.31 Authorization Bypass via Device Share APIPetlibrio Smart Pet Feeder Platform
- CVE-2025-15115Petlibro Smart Pet Feeder Platform through 1.7.31 Authentication Bypass via API endpointPetlibrio Smart Pet Feeder Platform
- CVE-2025-34171CasaOS <= 0.4.15 Unauthenticated File and Debug Data ExposureIceWhale Tech CasaOS
- CVE-2026-21484AnythingLLM Vulnerable to Username Enumeration w/ Password RecoveryMintplex-Labs anything-llm