CVEs published January 21, 2026
121 CVEs were published on January 21, 2026: 12 critical, 64 high. 2 are now in CISA KEV.
- Published
- 121
- Critical
- 12
- High
- 64
- Medium
- 37
- Low
- 6
- Unrated
- 2
- Now in CISA KEV
- 2
- Fix available
- 50
Most affected products
- everest-core
- 11
- Yodinfo Mini Mouse
- 3
- Apache Software Foundation Apache Solr · org.apache.solr:so…
- 2
- Cisco Packaged Contact Center Enterprise · Cisco Unified Co…
- 2
- copier-org copier · copier
- 2
- cvat-ai cvat
- 2
- D-Link D-View
- 2
- fleetdm fleet · github.com/fleetdm/fleet/v4 +1
- 2
- GetSimple CMS My SMTP Contact Plugin
- 2
- Honeywell WIN-PACK PRO
- 2
Critical 12
- CVE-2026-23524Laravel Redis Horizontal Scaling Insecure Deserializationlaravel reverb · laravel/reverb
- CVE-2026-23518Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollmentfleetdm fleet · github.com/fleetdm/fleet/v4 +1
- CVE-2026-22822External Secrets Operator insecurely retrieves secrets through the getSecretKey templating functionexternal-secrets · github.com/external-secrets/external-sec…
- CVE-2026-227935ire vulnerable to Remote Code Execution (RCE) via EChartsnanbingxyz 5ire
- CVE-2026-227925ire vulnerable to Remote Code Execution (RCE)nanbingxyz 5ire
- CVE-2021-47851Mini Mouse 9.2.0 - Remote Code ExecutionYodinfo Mini Mouse
- CVE-2021-47748Hasura GraphQL 1.3.3 - Remote Code ExecutionHasura GraphQL
- CVE-2026-24061telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.GNU Inetutils
- CVE-2025-15521Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeoverkodezen Academy LMS – WordPress LMS Plugin for Complete eLe…
- CVE-2025-69762Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enabl
- CVE-2025-69763Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and ena
- CVE-2025-69766Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag s
High 64
- CVE-2026-23737seroval Affected by Remote Code Execution via JSON Deserializationlxsmnsyc seroval · seroval
- CVE-2026-23736seroval Affected by Prototype Pollution via JSON Deserializationlxsmnsyc seroval · seroval
- CVE-2026-24046Backstage has a Possible Symlink Path Traversal in Scaffolder Actionsbackstage · @backstage/backend-defaults +2
- CVE-2026-23960Argo Workflows affected by stored XSS in the artifact directory listingargoproj argo-workflows · github.com/argoproj/argo-workf… +2
- CVE-2026-23526CVAT vulnerable to privilege escalation of users with staff statuscvat-ai cvat
- CVE-2026-23516CVAT vulnerable to XSS via skeleton SVG imagescvat-ai cvat
- CVE-2026-23499Saleor vulnerable to stored XSS via Unrestricted File Uploadsaleor
- CVE-2026-22849Saleor lacks proper HTML sanitization in rich text fieldssaleor
- CVE-2026-22807vLLM affected by RCE via auto_map dynamic module loading during model initializationvllm-project vllm · vllm
- CVE-2026-22598ManageIQ vulnerable to DoS Attack when creating TimeProfilesmanageiq
- CVE-2025-69285SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerabilitydataease SQLBot
- CVE-2025-68141EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserializationeverest-core
- CVE-2025-68137EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loopeverest-core
- CVE-2025-68136EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of serviceeverest-core
- CVE-2025-68134EVerest's use of assert functions can potentially lead to denial of serviceeverest-core
- CVE-2026-23754D-Link D-View 8 IDOR Allows Credential Disclosure and Account TakeoverD-Link D-View
- CVE-2026-23755D-Link D-View 8 Installer DLL Preloading via Uncontrolled Search PathD-Link D-View
- CVE-2021-47860GetSimple CMS Custom JS 0.1 - CSRF to XSS to RCEGetSimple CMS Custom JS Plugin
- CVE-2021-47778GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code InjectionGet-Simple My SMTP Contact Plugin
- CVE-2021-47887Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service PathOKI Print Job Accounting
- CVE-2021-47886Pingzapper 2.3.1 - 'PingzapperSvc' Unquoted Service PathFyrolabs LLC. Pingzapper
- CVE-2021-47884Configuration Tool 1.6.53 - 'OpLclSrv' Unquoted Service PathOKI Configuration Tool
- CVE-2021-47883Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service PathSandboxie-Plus Sandboxie Plus
- CVE-2021-47882FreeLAN 2.2 - 'FreeLAN Service' Unquoted Service PathFreeLAN
- CVE-2021-47880Realtek Wireless LAN Utility 700.1631 - 'Realtek11nSU' Unquoted Service PathRealtek Semiconductor Realtek Wireless LAN Utility
- CVE-2021-47879eBeam Interactive Suite 3.6 - 'eBeam Stylus Driver' Unquoted Service PathLuidia eBeam Interactive Suite
- CVE-2021-47878eBeam Education Suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service PathLuidia eBeam Education Suite
- CVE-2021-47874VFS for Git 1.0.21014.1 - 'GVFS.Service' Unquoted Service PathVfsforgit VFS for Git
- CVE-2021-47872SEO Panel < 4.9.0 - 'order_col' Blind SQL InjectionSEO Panel
- CVE-2021-47871Hestia Control Panel 1.3.2 - Arbitrary File WriteHestia Control Panel
- CVE-2021-47869BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service PathBrother Industries BRAdmin Professional
- CVE-2021-47868WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service PathHoneywell WIN-PACK PRO
- CVE-2021-47867WIN-PACK PRO 4.8 - 'ScheduleService' Unquoted Service PathSecurity Winpakpro
- CVE-2021-47866WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service PathHoneywell WIN-PACK PRO
- CVE-2021-47865ProFTPD 1.3.7a - Remote Denial of ServiceProFTPD
- CVE-2021-47864OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service PathOSAS Traverse Extension
- CVE-2021-47863MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service PathMacPaw Way Encrypto
- CVE-2021-47862Hi-Rez Studios 5.1.6.3 - 'HiPatchService' Unquoted Service PathHI-REZ STUDIOS HiPatchService
- CVE-2021-47861Event Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service PathFSPro Labs Event Log Explorer
- CVE-2021-47859ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service PathHID Global ActivIdentity
- CVE-2021-47854DD-WRT 45723 - UPNP Buffer OverflowembeDD DD-WRT
- CVE-2021-47852Rockstar Service - Insecure File PermissionsRockstar Games Launcher
- CVE-2021-47850Mini Mouse 9.2.0 - Path TraversalYodinfo Mini Mouse
- CVE-2021-47849Mini Mouse 9.3.0 - Local File inclusion / Path TraversalYodinfo Mini Mouse
- CVE-2021-47848Blitar Tourism 1.0 - Authentication Bypass SQLisatndy Aplikasi-Biro-Travel
- CVE-2021-47846Digital Crime Report Management System 1.0 - SQL InjectionI Want Source Codes Digital Crime Report Management System
- CVE-2021-47802Tenda D151 & D301 - Configuration DownloadShenzhen Tenda Technology Co. Tenda D151 & D301
- CVE-2021-47770OpenPLC 3 - Remote Code ExecutionAutonomy OpenPLC
- CVE-2021-47746NodeBB Plugin Emoji 3.2.1 - Arbitrary File WriteNodeBB Plugin Emoji
- CVE-2026-0834Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13TP-Link Systems Archer C20 v6.0, Archer AX53 · TP-Link S… +1
- CVE-2026-20045Cisco Unified Communications Products Remote Code Execution VulnerabilityCisco Unified Communications Manager · Cisco Unity Connecti…
- CVE-2025-13878Malformed BRID/HHIT records can cause named to terminate unexpectedlyISC BIND
- CVE-2026-22022Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPluginApache Software Foundation Apache Solr · org.apache.solr:so…
- CVE-2026-22444Apache Solr: Insufficient file-access checking in standalone core-creation requestsApache Software Foundation Apache Solr · org.apache.solr:so…
- CVE-2026-24016The installer of ServerView Agents for Windows provided by Fsas Technologies Inc.Fsas Technologies ServerView Agents for Windows
- CVE-2025-68133EVerest's unlimited connections can lead to DoS through operating system resource exhaustioneverest-core
- CVE-2025-66959An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder
- CVE-2025-66960An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads
- CVE-2025-70644Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function.
- CVE-2025-70645Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function.
- CVE-2025-70646Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function.
- CVE-2025-70648Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function.
- CVE-2025-70650Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function.
- CVE-2025-70651Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function.
Medium, low and unrated 45
- CVE-2026-23887Group-Office has stored XSS vulnerability via unsanitized filenamesIntermesh groupoffice
- CVE-2026-23873HUSTOJ is Vulnerable to Stored CSV Injection (Formula Injection) in Contest Rank Exportzhblue hustoj
- CVE-2026-1036Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment DeletionPhoto Gallery by 10Web – Mobile-Friendly Image Gallery
- CVE-2026-24048Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`backstage · @backstage/backend-defaults
- CVE-2026-23630Docmost is vulnerable to stored Cross-Site Scripting (XSS) through Mermaid renderingdocmost
- CVE-2026-24047@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypassbackstage · @backstage/cli-common
- CVE-2026-23996FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detectionAthroniaeth fastapi-api-key · fastapi-api-key
- CVE-2026-23990Flux Operator Web UI Impersonation Bypass via Empty OIDC Claimscontrolplaneio-fluxcd flux-operator · github.com/controlpla…
- CVE-2026-23986Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: truecopier-org copier · copier
- CVE-2026-23968Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: falsecopier-org copier · copier
- CVE-2026-23517Fleet has an Access Control vulnerability in debug/pprof endpointsfleetdm fleet · github.com/fleetdm/fleet/v4 +1
- CVE-2026-22808Fleet Windows MDM endpoint has a Cross-site Scripting vulnerabilityfleetdm fleet · github.com/fleetdm/fleet +1
- CVE-2026-21852Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmationanthropics claude-code · @anthropic-ai/claude-code
- CVE-2025-69209ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double ConstructorsArduinoCore-avr
- CVE-2025-68140EVerest allows null session ID to bypass session ID verificationeverest-core
- CVE-2025-68139In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processingeverest-core
- CVE-2025-12781base64.b64decode() always accepts "+/" characters, despite setting altcharsPython Software Foundation CPython
- CVE-2025-68138EVerest affected by memory exhaustion in libocppeverest-core
- CVE-2026-23955EVerest vulnerable to concatenation of strings literal and integerseverest-core
- CVE-2025-13465Prototype Pollution Vulnerability in Lodash _.unset and _.omit functionslodash · lodash-amd +3
- CVE-2025-68135EVerest's inadequate exception handling leads to denial of serviceeverest-core
- CVE-2025-68132EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter drivereverest-core
- CVE-2021-47870GetSimple CMS My SMTP Contact Plugin 1.1.2 - Stored XSSGetSimple CMS My SMTP Contact Plugin
- CVE-2021-47877GeoGebra Graphing Calculator 6.0.631.0 - Denial Of ServiceGeoGebra Graphing Calculator
- CVE-2021-47876GeoGebra Classic 5.0.631.0-d - Denial of ServiceGeoGebra Classic
- CVE-2021-47875GeoGebra CAS Calculator 6.0.631.0 - Denial of ServiceGeoGebra CAS Calculator
- CVE-2021-47873VestaCP < 0.9.8-25 - Stored Cross-Site ScriptingVestaCP
- CVE-2021-47858Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site ScriptingGenexis Platinum-4410
- CVE-2021-47857Moodle 3.10.3 - 'label' Persistent Cross Site ScriptingMoodle
- CVE-2021-47855Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site ScriptingLiteSpeed Technologies OpenLiteSpeed
- CVE-2021-47830GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRFGetSimple CMS My SMTP Contact Plugin
- CVE-2021-47817OpenEMR 5.0.2.1 - Remote Code ExecutionOpenEMR Foundation OpenEMR
- CVE-2026-20109Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting VulnerabilityCisco Packaged Contact Center Enterprise · Cisco Unified Co…
- CVE-2026-20080Cisco IEC6400 Edge Compute Appliance SSH Denial of Service VulnerabilityCisco Ultra-Reliable Wireless Backhaul
- CVE-2026-20055Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Cross-Site Scripting VulnerabilityCisco Packaged Contact Center Enterprise · Cisco Unified Co…
- CVE-2026-20092Cisco Intersight Virtual Appliance Privilege Escalation VulnerabilityCisco Intersight Virtual Appliance
- CVE-2026-1290[PI141230] Fixed A broken access control issue.Jamf Pro
- CVE-2026-22977net: sock: fix hardened usercopy panic in sock_recv_errqueueLinux
- CVE-2025-14083Keycloak-server: keycloak: improper access control in admin rest api leads to information disclosureRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-0988Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()Red Hat Hardened Images · Red Hat Enterprise Linux
- CVE-2026-0663Denial of Service condition in M-Files ServerM-Files Server
- CVE-2026-22976net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_resetLinux
- CVE-2025-14559Org.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled usersRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-1035Org.keycloak.protocol.oidc: keycloak refresh token reuse bypass via toctou race conditionRed Hat build of Keycloak · Red Hat JBoss Enterprise App… +2
- CVE-2025-57681The WorklogPRO - Timesheets for Jira plugin in Jira Data Center before version 4.23.6-jira10 and before version 4.23.5-jira9 allows users an