CVEs published January 10, 2026
74 CVEs were published on January 10, 2026: 4 critical, 29 high.
- Published
- 74
- Critical
- 4
- High
- 29
- Medium
- 36
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 61
Most affected products
- nasa CryptoLib
- 10
- opf openproject
- 6
- trailofbits fickling · fickling
- 5
- Apache Software Foundation Apache Mynewt NimBLE
- 4
- TryGhost Ghost · ghost
- 4
- remix-run react-router · react-router +1
- 3
- RustCrypto elliptic-curves · sm2
- 3
- octobercms october · october/system
- 2
- py-pdf pypdf · pypdf
- 2
- quickjs-ng quickjs
- 2
Critical 4
- CVE-2026-22688WeKnora has Command Injection in MCP stdio testTencent WeKnora · github.com/Tencent/WeKnora
- CVE-2025-65091XWiki Full Calendar Macro vulnerable to SQL injection through Calendar.JSONServicexwiki-contrib macro-fullcalendar · org.xwiki.contrib:macro-…
- CVE-2025-61686React Router has Path Traversal in File Session Storageremix-run react-router · @react-router/node +2
- CVE-2026-22600OpenProject is Vulnerable to Arbitrary File Read via ImageMagick SVG Coderopf openproject
High 29
- CVE-2025-52435Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controllerApache Software Foundation Apache Mynewt NimBLE
- CVE-2025-53477Apache Mynewt NimBLE: NULL Pointer Dereference in NimBLE host HCI layerApache Software Foundation Apache Mynewt NimBLE
- CVE-2025-62235Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairingApache Software Foundation Apache Mynewt NimBLE
- CVE-2026-22777ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration HandlerComfy-Org ComfyUI-Manager · comfy-cli
- CVE-2026-22704HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeoverhaxtheweb issues · @haxtheweb/haxcms-nodejs
- CVE-2026-22685DevToys Path Traversal (“Zip Slip”) Vulnerability in DevToys Extension InstallationDevToys-app DevToys
- CVE-2026-22700RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKERustCrypto elliptic-curves · sm2
- CVE-2026-22699RustCrypto SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt()RustCrypto elliptic-curves · sm2
- CVE-2026-22698RustCrypto SM2-PKE has 32-bit Biased Nonce VulnerabilityRustCrypto elliptic-curves · sm2
- CVE-2026-22610Angular has XSS Vulnerability via Unsanitized SVG Script Attributesangular · @angular/compiler +1
- CVE-2025-13457WooCommerce Square <= 5.1.1 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_idWooCommerce Square
- CVE-2026-22589Spree API has Unauthenticated IDOR - Guest Addressspree · spree_core
- CVE-2026-22595Ghost has Staff Token permission bypassTryGhost Ghost · ghost
- CVE-2026-22594Ghost has Staff 2FA bypassTryGhost Ghost · ghost
- CVE-2026-22029React Router vulnerable to XSS via Open Redirectsremix-run react-router · @remix-run/router +1
- CVE-2026-21884React Router SSR XSS in ScrollRestorationremix-run react-router · react-router +1
- CVE-2025-59057React Router has XSS Vulnerabilityremix-run react-router · react-router +1
- CVE-2026-22612Fickling vulnerable to detection bypass due to "builtins" blindnesstrailofbits fickling · fickling
- CVE-2026-22609Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklisttrailofbits fickling · fickling
- CVE-2026-22608Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detectiontrailofbits fickling · fickling
- CVE-2026-22607Fickling Blocklist Bypass: cProfile.run()trailofbits fickling · fickling
- CVE-2026-22606Fickling has a bypass via runpy.run_path() and runpy.run_module()trailofbits fickling · fickling
- CVE-2026-22601OpenProject is Vulnerable to Code Execution in E-Mail functionopf openproject
- CVE-2026-22697CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext)nasa CryptoLib
- CVE-2026-22026CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustionnasa CryptoLib
- CVE-2026-22023CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Patternnasa CryptoLib
- CVE-2026-21900CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Patternnasa CryptoLib
- CVE-2026-21898CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecuritynasa CryptoLib
- CVE-2026-21897CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parametersnasa CryptoLib
Medium, low and unrated 41
- CVE-2026-0824questdb ui Web Console cross site scriptingquestdb ui · @questdb/web-console
- CVE-2025-13393Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'marceljm Featured Image from URL
- CVE-2025-12379Shortcodes and extra features for Phlox theme <= 2.17.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widgetaverta Shortcodes and extra features for Phlox theme
- CVE-2026-0822quickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflowquickjs-ng quickjs
- CVE-2026-0821quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflowquickjs-ng quickjs
- CVE-2025-14555Countdown Timer - Widget Countdown <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodewpdevart Countdown Timer – Widget Countdown
- CVE-2025-15504lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereferencelief-project LIEF · lief
- CVE-2025-14506ConvertForce Popup Builder <= 0.0.7 - Stored Cross-Site Scripting via entrance_animationimtiazrayhan ConvertForce Popup Builder
- CVE-2025-53470Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driverApache Software Foundation Apache Mynewt NimBLE
- CVE-2026-0831Templately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Writewpdevteam Templately – Elementor & Gutenberg Template Libra…
- CVE-2025-15503Sangfor Operation and Maintenance Management System common.jsp unrestricted uploadSangfor Operation and Maintenance Management System
- CVE-2025-14976User Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post Deletionwpeverest User Registration & Membership – Free & Paid Memb…
- CVE-2025-15502Sangfor Operation and Maintenance Management System session SessionController os command injectionSangfor Operation and Maintenance Management System
- CVE-2025-14948miniOrange OTP Verification and SMS Notification for WooCommerce <= 4.3.8 - Missing Authorization to Unauthenticated Notification Settings Modificationcyberlord92 miniOrange OTP Verification and SMS Notificatio…
- CVE-2026-22773vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensionsvllm-project vllm · vllm
- CVE-2025-14943Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposurepr-gateway Blog2Social: Social Media Auto Post & Scheduler
- CVE-2026-22705RustCrypto: Signatures has timing side-channel in ML-DSA decompositionRustCrypto signatures · ml-dsa
- CVE-2026-22703Cosign verification accepts any valid Rekor entry under certain conditionssigstore cosign · github.com/sigstore/cosign/v3 +2
- CVE-2026-22702virtualenv Has TOCTOU Vulnerabilities in Directory Creationpypa virtualenv · virtualenv
- CVE-2026-22701filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLocktox-dev filelock · filelock
- CVE-2026-22693Null Pointer Dereference in SubtableUnicodesCache::create leading to DoSharfbuzz
- CVE-2026-22689Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to emailsaxllent mailpit · github.com/axllent/mailpit
- CVE-2026-22611AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter valueaws-sdk-net · AWSSDK.Core
- CVE-2026-22691pypdf has possible long runtimes for malformed startxrefpy-pdf pypdf · pypdf
- CVE-2026-22690pypdf has possible long runtimes for missing /Root object with large /Size valuespy-pdf pypdf · pypdf
- CVE-2026-22687WeKnora vulnerable to SQL InjectionTencent WeKnora · github.com/Tencent/WeKnora
- CVE-2025-61674October CMS Vulnerable to Stored XSS via Editor and Branding Stylesoctobercms october · october/system
- CVE-2025-61676October CMS Vulnerable to Stored XSS via Branding Stylesoctobercms october · october/system
- CVE-2025-65090XWiki Full Calendar Macro vulnerable to data leak through Calendar.JSONServicexwiki-contrib macro-fullcalendar · org.xwiki.contrib:macro-…
- CVE-2026-22597Ghost has SSRF via External Media InlinerTryGhost Ghost · ghost
- CVE-2026-22596Ghost has SQL Injection in Members Activity FeedTryGhost Ghost · ghost
- CVE-2026-22030React Router has CSRF issue in Action/Server Action Request Processingremix-run react-router · react-router +1
- CVE-2025-68470React Router has unexpected external redirect via untrusted pathsremix-run react-router · react-router
- CVE-2026-22605OpenProject is Vulnerable to Insecure Direct Object Reference in Meetingsopf openproject
- CVE-2026-22604OpenProject is vulnerable to user enumeration via the change password functionopf openproject
- CVE-2026-22603OpenProject has no protection against brute-force attacks in the Change Password functionopf openproject
- CVE-2026-22602OpenProject is Vulnerable to User Enumeration via User IDopf openproject
- CVE-2026-22027CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversionnasa CryptoLib
- CVE-2026-22025CryptoLib Memory Leak on HTTP Error Response in KMC Clientnasa CryptoLib
- CVE-2026-22024CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustionnasa CryptoLib
- CVE-2026-21899CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url stringnasa CryptoLib