CVEs published January 11, 2026
13 CVEs were published on January 11, 2026: 0 critical, 7 high.
- Published
- 13
- Critical
- 0
- High
- 7
- Medium
- 6
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- UTT 进取
- 6
- AcademySoftwareFoundation OpenColorIO · opencolorio
- 1
- Apache Software Foundation Apache Struts · org.apache.st… +2
- 1
- code-projects Intern Membership Management System
- 1
- code-projects Online Music Site
- 1
- Flycatcher Toys smART Sketcher
- 1
- jiujiujia jjjfood · jiujiujia jjjshop_food +4
- 1
- Luxul XWR-600
- 1
High 7
- CVE-2025-68493Apache Struts, Apache Struts: XXE vulnerability in outdated XWork componentApache Software Foundation Apache Struts · org.apache.st… +2
- CVE-2026-0841UTT 进取 520W formPictureUrl strcpy buffer overflowUTT 进取
- CVE-2026-0840UTT 进取 520W formConfigNoticeConfig strcpy buffer overflowUTT 进取
- CVE-2026-0839UTT 进取 520W APSecurity strcpy buffer overflowUTT 进取
- CVE-2026-0838UTT 进取 520W ConfigWirelessBase strcpy buffer overflowUTT 进取
- CVE-2026-0837UTT 进取 520W formFireWall strcpy buffer overflowUTT 进取
- CVE-2026-0836UTT 进取 520W formConfigFastDirectionW strcpy buffer overflowUTT 进取
Medium, low and unrated 6
- CVE-2026-0851code-projects Online Music Site AdminAddUser.php sql injectioncode-projects Online Music Site
- CVE-2026-0850code-projects Intern Membership Management System delete_activity.php sql injectioncode-projects Intern Membership Management System
- CVE-2025-15506AcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-boundsAcademySoftwareFoundation OpenColorIO · opencolorio
- CVE-2026-0843jiujiujia/victor123/wxw850227 jjjfood/jjjshop_food index sql injectionjiujiujia jjjfood · jiujiujia jjjshop_food +4
- CVE-2026-0842Flycatcher Toys smART Sketcher Bluetooth Low Energy missing authenticationFlycatcher Toys smART Sketcher
- CVE-2025-15505Luxul XWR-600 Web Administration cross site scriptingLuxul XWR-600