# CVEs published 2026-01-27

196 CVEs were published on January 27, 2026: 50 critical, 75 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-24838](https://cve.now/CVE-2026-24838.md): DotNetNuke.Core Vulnerable to Stored XSS via Module Title (CVSS 9.1, dnnsoftware Dnn.Platform · DotNetNuke.Core)
- [CVE-2026-24837](https://cve.now/CVE-2026-24837.md): DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal (CVSS 7.7, dnnsoftware Dnn.Platform · DotNetNuke.Core)
- [CVE-2026-24836](https://cve.now/CVE-2026-24836.md): DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes (CVSS 7.7, dnnsoftware Dnn.Platform · DotNetNuke.Core)
- [CVE-2026-24833](https://cve.now/CVE-2026-24833.md): DotNetNuke.Core Vulnerable to Stored XSS in Module Description (CVSS 7.7, dnnsoftware Dnn.Platform)
- [CVE-2026-24784](https://cve.now/CVE-2026-24784.md): DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer (CVSS 6.8, dnnsoftware Dnn.Platform · DotNetNuke.Core)
- [CVE-2026-24785](https://cve.now/CVE-2026-24785.md): Clatter has a PSK Validity Rule Violation issue (CVSS 8.0, jmlepisto clatter · clatter)
- [CVE-2026-24134](https://cve.now/CVE-2026-24134.md): StudioCMS has an Authorization Bypass Through User-Controlled Key (CVSS 6.5, withstudiocms studiocms · studiocms)
- [CVE-2026-23830](https://cve.now/CVE-2026-23830.md): SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor (CVSS 10.0, nyariv SandboxJS · @nyariv/sandboxjs)
- [CVE-2025-55292](https://cve.now/CVE-2025-55292.md): In Meshtastic, an attacker can spoof licensed amateur flag for a node (CVSS 8.2, meshtastic firmware)
- [CVE-2025-67645](https://cve.now/CVE-2025-67645.md): OpenEMR Vulnerable to Broken Access Control in Profile Edit Endpoint (CVSS 8.8, openemr)
- [CVE-2025-54373](https://cve.now/CVE-2025-54373.md): OpenEMR may expose Contents of Clinical Notes and Care Planto users who do not have Sensitivities=high privilege (CVSS 7.1, openemr)
- [CVE-2026-24910](https://cve.now/CVE-2026-24910.md): In Bun before 1.3.5, the default trusted dependencies list (aka trust allow list) can be spoofed by a non-npm package in the case of a match (CVSS 5.9, Bun)
- [CVE-2026-24909](https://cve.now/CVE-2026-24909.md): vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction. (CVSS 5.9, vlt · @vltpkg/tar)
- [CVE-2026-24783](https://cve.now/CVE-2026-24783.md): soroban-fixed-point-math has Incorrect Rounding and Overflow Handling in Signed Fixed-Point Math with Negatives (CVSS 7.5, script3 soroban-fixed-point-math · soroban-fixed-point-math)
- [CVE-2026-24779](https://cve.now/CVE-2026-24779.md): vLLM vulnerable to Server-Side Request Forgery (SSRF) in \`MediaConnector\` (CVSS 7.1, vllm-project vllm · vllm)
- [CVE-2026-24778](https://cve.now/CVE-2026-24778.md): Ghost vulnerable to XSS via malicious Portal preview links (CVSS 8.8, TryGhost Ghost · ghost +1)
- [CVE-2026-24770](https://cve.now/CVE-2026-24770.md): RAGFlow Affected by Zip Slip Remote Code Execution (RCE) in MinerUParser (CVSS 9.8, infiniflow ragflow)
- [CVE-2026-24765](https://cve.now/CVE-2026-24765.md): PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling (CVSS 7.8, sebastianbergmann phpunit · phpunit/phpunit)
- [CVE-2026-24748](https://cve.now/CVE-2026-24748.md): Kargo's \`GetConfig()\` and \`RefreshResource()\` API endpoints allow unauthenticated access (CVSS 6.9, akuity kargo · github.com/akuity/kargo)
- [CVE-2026-24747](https://cve.now/CVE-2026-24747.md): PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files (CVSS 8.8, pytorch · torch)
- [CVE-2026-24741](https://cve.now/CVE-2026-24741.md): ConvertX Vulnerable to Arbitrary File Deletion via Path Traversal in \`POST /delete\` (CVSS 8.1, C4illin ConvertX)
- [CVE-2026-24738](https://cve.now/CVE-2026-24738.md): gmrtd ReadFile Vulnerable to Denial of Service via Excessive TLV Length Values (CVSS 5.9, gmrtd · github.com/gmrtd/gmrtd)
- [CVE-2026-24740](https://cve.now/CVE-2026-24740.md): Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access (CVSS 8.7, amir20 dozzle · github.com/amir20/dozzle)
- [CVE-2026-24736](https://cve.now/CVE-2026-24736.md): Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration (CVSS 9.1, squidex)
- [CVE-2026-1504](https://cve.now/CVE-2026-1504.md): Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin (CVSS 6.5, Google Chrome)
- [CVE-2025-21589](https://cve.now/CVE-2025-21589.md): Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability (CVSS 9.8, Juniper Networks Session Smart Router · Juniper Networks… +1)
- [CVE-2025-14988](https://cve.now/CVE-2025-14988.md): Incorrect Permission Assignment for Critical Resource vulnerability in iba Systems ibaPDA (CVSS 10.0, iba Systems ibaPDA)
- [CVE-2025-12810](https://cve.now/CVE-2025-12810.md): Failure in Password Rotation and Check-in Mechanism in Secret Server Allows Reuse of Credentials (CVSS 5.3, Delinea Secret Server On-Prem)
- [CVE-2026-24688](https://cve.now/CVE-2026-24688.md): pypdf has possible Infinite Loop when processing outlines/bookmarks (CVSS 5.1, py-pdf pypdf · pypdf)
- [CVE-2026-24771](https://cve.now/CVE-2026-24771.md): Hono has a Cross-site Scripting vulnerability (CVSS 4.7, honojs hono · hono)
- [CVE-2026-24473](https://cve.now/CVE-2026-24473.md): Hono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter) (CVSS 6.3, honojs hono · hono)
- [CVE-2026-24472](https://cve.now/CVE-2026-24472.md): Hono cache middleware ignores "Cache-Control: private" leading to Web Cache Deception (CVSS 5.3, honojs hono · hono)
- [CVE-2026-24858](https://cve.now/CVE-2026-24858.md): An Authentication Bypass Using an Alternate Path or Channel vulnerability \[CWE-288\] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7. (CVSS 9.4, KEV, Fortinet FortiWeb · Fortinet FortiNAC-F +4)
- [CVE-2026-24398](https://cve.now/CVE-2026-24398.md): Hono's IPv4 address validation bypass in IP Restriction Middleware allows IP spoofing (CVSS 4.8, honojs hono · hono)
- [CVE-2026-24116](https://cve.now/CVE-2026-24116.md): Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 (CVSS 4.1, bytecodealliance wasmtime · wasmtime)
- [CVE-2020-36983](https://cve.now/CVE-2020-36983.md): Quick 'n Easy FTP Service 3.2 - Unquoted Service Path (CVSS 8.5, Pablosoftwaresolutions Quick 'n Easy FTP Service)
- [CVE-2020-36982](https://cve.now/CVE-2020-36982.md): Motorola Device Manager 2.5.4 - 'MotoHelperService.exe' Unquoted Service Path (CVSS 8.5, Motorola-Device-Manager Motorola Device Manager)
- [CVE-2020-36981](https://cve.now/CVE-2020-36981.md): Motorola Device Manager 2.4.5 - 'ForwardDaemon.exe ' Unquoted Service Path (CVSS 8.5, Filehorse Motorola Device Manager)
- [CVE-2020-36980](https://cve.now/CVE-2020-36980.md): SAntivirus IC 10.0.21.61 - 'SAntivirusIC' Unquoted Service Path (CVSS 8.5, Segurazo SAntivirus IC)
- [CVE-2020-36979](https://cve.now/CVE-2020-36979.md): Atheros Coex Service Application 8.0.0.255 -'ZAtheros Bt&Wlan Coex Agent' Unquoted Service Path (CVSS 8.5, Atheros Coex Service Application)
- [CVE-2020-36978](https://cve.now/CVE-2020-36978.md): Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting (CVSS 5.1, Froxlor Froxlor Server Management Panel)
- [CVE-2020-36977](https://cve.now/CVE-2020-36977.md): Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path (CVSS 8.5, Wondershare Driver Install Service help)
- [CVE-2020-36976](https://cve.now/CVE-2020-36976.md): Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path (CVSS 8.5, Acer Global Registration Service)
- [CVE-2020-36975](https://cve.now/CVE-2020-36975.md): EPSON Status Monitor 3 'EPSON\_PM\_RPCV4\_06' - Unquoted Service Path (CVSS 8.5, SEIKO EPSON Status Monitor)
- [CVE-2020-36974](https://cve.now/CVE-2020-36974.md): Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path (CVSS 8.5, Realtek Andrea RT Filters)
- [CVE-2026-24883](https://cve.now/CVE-2026-24883.md): In GnuPG before 2.5.17, a long signature packet length causes parse\_signature to return success with sig-\>data\[\] set to a NULL value, leadin (CVSS 3.7, GnuPG)
- [CVE-2026-24882](https://cve.now/CVE-2026-24882.md): In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and E (CVSS 8.4, GnuPG)
- [CVE-2026-24881](https://cve.now/CVE-2026-24881.md): In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffe (CVSS 8.1, GnuPG)
- [CVE-2026-23892](https://cve.now/CVE-2026-23892.md): OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication (CVSS 6.0, OctoPrint)
- [CVE-2026-22264](https://cve.now/CVE-2026-22264.md): Suricata detect/alert: heap-use-after-free on alert queue expansion (CVSS 7.4, OISF suricata)
- [CVE-2026-0746](https://cve.now/CVE-2026-0746.md): AI Engine \<= 3.3.2 - Authenticated (Subscriber+) Server-Side Request Forgery (CVSS 6.4, tigroumeow AI Engine – The Chatbot, AI Framework & MCP for…)
- [CVE-2026-22263](https://cve.now/CVE-2026-22263.md): Suricata http1: quadratic complexity in headers parsing over multiple packets (CVSS 5.3, OISF suricata)
- [CVE-2026-22262](https://cve.now/CVE-2026-22262.md): Suricata datasets: stack overflow when saving a set (CVSS 5.9, OISF suricata)
- [CVE-2026-22261](https://cve.now/CVE-2026-22261.md): Suricata eve/alert: http1 xff handling can lead to denial of service (CVSS 3.7, OISF suricata)
- [CVE-2026-23593](https://cve.now/CVE-2026-23593.md): Unauthenticated Limited File Read allows Data Exposure in Web Interface (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Fabri…)
- [CVE-2025-33234](https://cve.now/CVE-2025-33234.md): NVIDIA runx contains a vulnerability where an attacker could cause a code injection. (CVSS 7.8, NVIDIA runx)
- [CVE-2026-23592](https://cve.now/CVE-2026-23592.md): Insecure File Handling allows Remote Code Execution in Backup Functionality (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Fabri…)
- [CVE-2026-1315](https://cve.now/CVE-2026-1315.md): Unauthenticated Denial of Service via Firmware Update Endpoint on TP-Link Tapo C220 & C520WS (CVSS 7.1, TP-Link Systems Tapo C220 · TP-Link Systems Tapo C520WS)
- [CVE-2026-0919](https://cve.now/CVE-2026-0919.md): Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS (CVSS 7.1, TP-Link Systems Tapo C220 · TP-Link Systems Tapo C520WS +1)
- [CVE-2026-0918](https://cve.now/CVE-2026-0918.md): Null Pointer Dereference in Tapo SmartCam HTTP Service on TP-Link Tapo C220 & C520WS (CVSS 7.1, TP-Link Systems Tapo C220 · TP-Link Systems Tapo C520WS +1)
- [CVE-2026-22260](https://cve.now/CVE-2026-22260.md): Suricata http1: infinite recursion in decompression (CVSS 7.5, OISF suricata)
- [CVE-2025-14911](https://cve.now/CVE-2025-14911.md): Integer Overflow in GridFS chunkSize Leading to Heap Allocation Failure (CVSS 7.1, MongoDB Mongo-c-driver)
- [CVE-2026-22259](https://cve.now/CVE-2026-22259.md): Suricata dnp3: unbounded transaction growth (CVSS 7.5, OISF suricata)
- [CVE-2026-0705](https://cve.now/CVE-2026-0705.md): Local privilege escalation due to insecure folder permissions. (CVSS 6.7, Acronis Cloud Manager)
- [CVE-2026-1483](https://cve.now/CVE-2026-1483.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1482](https://cve.now/CVE-2026-1482.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1481](https://cve.now/CVE-2026-1481.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1480](https://cve.now/CVE-2026-1480.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1479](https://cve.now/CVE-2026-1479.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1478](https://cve.now/CVE-2026-1478.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1477](https://cve.now/CVE-2026-1477.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1476](https://cve.now/CVE-2026-1476.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1475](https://cve.now/CVE-2026-1475.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1474](https://cve.now/CVE-2026-1474.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1473](https://cve.now/CVE-2026-1473.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-1472](https://cve.now/CVE-2026-1472.md): Out-of-band SQL injection in Quatuor Performance Evaluation (CVSS 9.3, Quatuor Evaluación de Desempeño)
- [CVE-2026-22258](https://cve.now/CVE-2026-22258.md): Suricata DCERPC: unbounded fragment buffering leads to memory exhaustion (CVSS 7.5, OISF suricata)
- [CVE-2026-23881](https://cve.now/CVE-2026-23881.md): Kyverno Denial of Service via Context Variable Amplification in Policy Engine (CVSS 7.7, kyverno · github.com/kyverno/kyverno)
- [CVE-2026-22039](https://cve.now/CVE-2026-22039.md): Kyverno Cross-Namespace Privilege Escalation via Policy apiCall (CVSS 10.0, kyverno · github.com/kyverno/kyverno)
- [CVE-2026-22796](https://cve.now/CVE-2026-22796.md): ASN1\_TYPE Type Confusion in the PKCS7\_digest\_from\_attributes() function (CVSS 5.3, OpenSSL)
- [CVE-2026-22795](https://cve.now/CVE-2026-22795.md): Missing ASN1\_TYPE validation in PKCS#12 parsing (CVSS 5.5, OpenSSL)
- [CVE-2025-69421](https://cve.now/CVE-2025-69421.md): NULL Pointer Dereference in PKCS12\_item\_decrypt\_d2i\_ex function (CVSS 7.5, OpenSSL)
- [CVE-2025-69420](https://cve.now/CVE-2025-69420.md): Missing ASN1\_TYPE validation in TS\_RESP\_verify\_response() function (CVSS 7.5, OpenSSL)
- [CVE-2025-69419](https://cve.now/CVE-2025-69419.md): Out of bounds write in PKCS12\_get\_friendlyname() UTF-8 conversion (CVSS 7.4, OpenSSL)
- [CVE-2025-69418](https://cve.now/CVE-2025-69418.md): Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (CVSS 4.0, OpenSSL)
- [CVE-2025-68160](https://cve.now/CVE-2025-68160.md): Heap out-of-bounds write in BIO\_f\_linebuffer on short writes (CVSS 4.7, OpenSSL)
- [CVE-2025-66199](https://cve.now/CVE-2025-66199.md): TLS 1.3 CompressedCertificate excessive memory allocation (CVSS 5.9, OpenSSL)
- [CVE-2025-15469](https://cve.now/CVE-2025-15469.md): 'openssl dgst' one-shot codepath silently truncates inputs \>16MB (CVSS 5.5, OpenSSL)
- [CVE-2025-15468](https://cve.now/CVE-2025-15468.md): NULL dereference in SSL\_CIPHER\_find() function on unknown cipher ID (CVSS 5.9, OpenSSL)
- [CVE-2025-15467](https://cve.now/CVE-2025-15467.md): Stack buffer overflow in CMS (Auth)EnvelopedData parsing (CVSS 8.8, OpenSSL)
- [CVE-2025-11187](https://cve.now/CVE-2025-11187.md): Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (CVSS 6.1, OpenSSL)
- [CVE-2026-24869](https://cve.now/CVE-2026-24869.md): Use-after-free in the Layout: Scrolling and Overflow component (CVSS 8.8, Mozilla Firefox)
- [CVE-2026-24868](https://cve.now/CVE-2026-24868.md): Mitigation bypass in the Privacy: Anti-Tracking component (CVSS 6.5, Mozilla Firefox)
- [CVE-2026-24875](https://cve.now/CVE-2026-24875.md): Integer overflow in modizer (CVSS 7.8, yoyofr modizer)
- [CVE-2026-24874](https://cve.now/CVE-2026-24874.md): Type confusion in xray-monolith (CVSS 9.1, themrdemonized xray-monolith)
- [CVE-2026-24873](https://cve.now/CVE-2026-24873.md): Out-of-bounds read in lpp-vita (CVSS 7.8, Rinnegatamante lpp-vita)
- [CVE-2025-68670](https://cve.now/CVE-2025-68670.md): xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow (CVSS 9.1, neutrinolabs xrdp)
- [CVE-2026-24872](https://cve.now/CVE-2026-24872.md): Pointer arithmetic error in SkyFire\_548 (CVSS 9.8, ProjectSkyfire SkyFire\_548)
- [CVE-2026-24871](https://cve.now/CVE-2026-24871.md): Code injection in Minecraft-Rcon-Manage (CVSS 10.0, pilgrimage233 Minecraft-Rcon-Manage)
- [CVE-2026-24870](https://cve.now/CVE-2026-24870.md): Information disclosure in ixray-1.6-stcop (CVSS 3.7, ixray-team ixray-1.6-stcop)
- [CVE-2026-24832](https://cve.now/CVE-2026-24832.md): Out-of-bounds write in ixray-1.6-stcop (CVSS 9.8, ixray-team ixray-1.6-stcop)
- [CVE-2026-24831](https://cve.now/CVE-2026-24831.md): Infinite loop (DoS) in ixray-1.6-stcop (CVSS 7.5, ixray-team ixray-1.6-stcop)
- [CVE-2026-0648](https://cve.now/CVE-2026-0648.md): The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos\_compatibility\_layers (CVSS 7.8, Eclipse Foundation Eclipse ThreadX)
- [CVE-2025-55095](https://cve.now/CVE-2025-55095.md): The function \_ux\_host\_class\_storage\_media\_mount() is responsible for mounting partitions on a USB mass storage device. (CVSS 4.2, Eclipse Foundation Eclipse ThreadX - USBX)
- [CVE-2025-55102](https://cve.now/CVE-2025-55102.md): A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. (CVSS 8.7, Eclipse Foundation Eclipse ThreadX - NetX Duo)
- [CVE-2021-47902](https://cve.now/CVE-2021-47902.md): Testa Online Test Management System 3.4.7 - 'q' SQL Injection (CVSS 8.8, Testa Online Test Management System)
- [CVE-2021-47901](https://cve.now/CVE-2021-47901.md): dirsearch 0.4.1 - CSV Injection (CVSS 5.1, maurosoria dirsearch)
- [CVE-2021-47900](https://cve.now/CVE-2021-47900.md): Gila CMS \< 2.0.0 - Remote Code Execution (CVSS 9.3, Gila CMS)
- [CVE-2020-36951](https://cve.now/CVE-2020-36951.md): Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection (CVSS 8.8, geraked phpscript-sgh)
- [CVE-2020-36950](https://cve.now/CVE-2020-36950.md): Laravel Nova 3.7.0 - 'range' DoS (CVSS 8.7, Laravel Holdings Laravel Nova)
- [CVE-2020-36949](https://cve.now/CVE-2020-36949.md): TapinRadio 2.13.7 - Denial of Service (CVSS 6.7, Raimersoft TapinRadio)
- [CVE-2020-36948](https://cve.now/CVE-2020-36948.md): VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation (CVSS 8.7, VestaCP)
- [CVE-2020-36947](https://cve.now/CVE-2020-36947.md): LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection (CVSS 7.1, LibreNMS · librenms/librenms)
- [CVE-2020-36946](https://cve.now/CVE-2020-36946.md): SyncBreeze 10.0.28 - 'login' Denial of Service (CVSS 8.7, Flexense SyncBreeze)
- [CVE-2020-36942](https://cve.now/CVE-2020-36942.md): Victor CMS 1.0 - File Upload To RCE (CVSS 8.7, VictorAlagwu CMSsite)
- [CVE-2020-36941](https://cve.now/CVE-2020-36941.md): Knockpy 4.1.1 - CSV Injection (CVSS 5.3, guelfoweb knock)
- [CVE-2020-36940](https://cve.now/CVE-2020-36940.md): Easy CD & DVD Cover Creator 4.13 - Denial of Service (CVSS 5.1, Tucows Easy CD & DVD Cover Creator)
- [CVE-2020-36939](https://cve.now/CVE-2020-36939.md): Cassandra Web 0.5.0 - Remote File Read (CVSS 8.7, avalanche123 Cassandra Web · cassandra-web)
- [CVE-2020-36938](https://cve.now/CVE-2020-36938.md): WinAVR Version 20100110 - Insecure Folder Permissions (CVSS 7.0, WinAVR)
- [CVE-2026-1489](https://cve.now/CVE-2026-1489.md): Glib: glib: memory corruption via integer overflow in unicode case conversion (CVSS 5.4, Red Hat Enterprise Linux)
- [CVE-2026-1470](https://cve.now/CVE-2026-1470.md): Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node. (CVSS 9.9, n8n)
- [CVE-2026-1213](https://cve.now/CVE-2026-1213.md): Askbot 0.12.2 - Insecure Direct Object Reference (IDOR) (CVSS 5.3, askbot)
- [CVE-2026-1485](https://cve.now/CVE-2026-1485.md): Glib: glib: local denial of service via buffer underflow in content type parsing (CVSS 2.8, Red Hat Enterprise Linux)
- [CVE-2026-1484](https://cve.now/CVE-2026-1484.md): Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g\_base64\_encode() (CVSS 4.2, Red Hat Enterprise Linux)
- [CVE-2025-12387](https://cve.now/CVE-2025-12387.md): Denial of Service in Pix-Link LV-WR21Q (CVSS 6.9, Pix-Link LV-WR21Q · Pix-Link WR21Q)
- [CVE-2025-12386](https://cve.now/CVE-2025-12386.md): Missing Authentication for Critical Endpoint in Pix-Link LV-WR21Q (CVSS 6.9, Pix-Link LV-WR21Q · Pix-Link WR21Q)
- [CVE-2025-41728](https://cve.now/CVE-2025-41728.md): Beckhoff: Information leak via Beckhoff Device Manager (CVSS 5.3, Beckhoff Automation Beckhoff.Device.Manager.XAR · Beckho… +1)
- [CVE-2025-41727](https://cve.now/CVE-2025-41727.md): Beckhoff: Performing privileged operations and gaining administrator access (CVSS 7.8, Beckhoff Automation Beckhoff.Device.Manager.XAR · Beckho… +1)
- [CVE-2025-41726](https://cve.now/CVE-2025-41726.md): Beckhoff: Arbitrary code execution within privileged processes (CVSS 8.8, Beckhoff Automation Beckhoff.Device.Manager.XAR · Beckho… +1)
- [CVE-2026-24348](https://cve.now/CVE-2026-24348.md): Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle (CVSS 7.4, EZCast Pro II)
- [CVE-2026-24830](https://cve.now/CVE-2026-24830.md): Integer Overflow or Wraparound in IronOS (CVSS 9.8, Ralim IronOS)
- [CVE-2026-21417](https://cve.now/CVE-2026-21417.md): Dell CloudBoost Virtual Appliance, versions prior to 19.14.0.0, contains a Plaintext Storage of Password vulnerability. (CVSS 7.0, Dell CloudBoost Virtual Appliance)
- [CVE-2026-24347](https://cve.now/CVE-2026-24347.md): Arbitrary file write to /tmp directory in EZCast Pro II Dongle (CVSS 5.7, EZCast Pro II)
- [CVE-2026-24346](https://cve.now/CVE-2026-24346.md): Use of well-known default credentials in EZCast Pro II Dongle (CVSS 7.6, EZCast Pro II)
- [CVE-2026-1467](https://cve.now/CVE-2026-1467.md): Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured (CVSS 5.8, Red Hat Enterprise Linux)
- [CVE-2026-24829](https://cve.now/CVE-2026-24829.md): Out-of-bounds write in is-Engine (CVSS 6.5, Is-Daouda is-Engine)
- [CVE-2026-24828](https://cve.now/CVE-2026-24828.md): Memory leak in is-Engine (CVSS 7.5, Is-Daouda is-Engine)
- [CVE-2026-24345](https://cve.now/CVE-2026-24345.md): Cross-Site Request Forgery in EZCast Pro II Dongle (CVSS 6.8, EZCast Pro II)
- [CVE-2026-24827](https://cve.now/CVE-2026-24827.md): Out-of-bounds write in Commander-Genius (CVSS 7.5, gerstrong Commander-Genius)
- [CVE-2026-24826](https://cve.now/CVE-2026-24826.md): Out-of-bounds write in turso3d (CVSS 10.0, cadaver turso3d)
- [CVE-2026-21721](https://cve.now/CVE-2026-21721.md): Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation (CVSS 8.1, grafana/grafana · grafana/grafana-enterprise)
- [CVE-2026-21720](https://cve.now/CVE-2026-21720.md): Unauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out (CVSS 7.5, grafana/grafana-enterprise · grafana/grafana)
- [CVE-2026-24344](https://cve.now/CVE-2026-24344.md): Multiple Buffer Overflows in EZCast Pro II Dongle (CVSS 7.3, EZCast Pro II)
- [CVE-2026-24825](https://cve.now/CVE-2026-24825.md): a memory leak in ydb-platform/ydb with use of yajl\_tree\_parse function from src/yail module, which will cause out-of-memory in server and cause crash. (CVSS 6.9, ydb-platform ydb)
- [CVE-2026-24824](https://cve.now/CVE-2026-24824.md): A XSS in yacy/yacy\_search\_server (CVSS 6.9, yacy\_search\_server)
- [CVE-2026-24823](https://cve.now/CVE-2026-24823.md): A heap-based buffer over-read or buffer overflow vulnerability in FASTSHIFT/X-TRACK (CVSS 10.0, FASTSHIFT X-TRACK)
- [CVE-2026-24822](https://cve.now/CVE-2026-24822.md): a heap-based buffer overflow vulnerability in ttttupup/wxhelper via src/mongoose. (CVSS 10.0, ttttupup wxhelper)
- [CVE-2026-24821](https://cve.now/CVE-2026-24821.md): A heap-based buffer over-read that might affect a system that compiles untrusted Lua code in turanszkij/WickedEngine. (CVSS 9.3, turanszkij WickedEngine)
- [CVE-2026-24820](https://cve.now/CVE-2026-24820.md): A stack overflow vulnerability in turanszkij/WickedEngine (CVSS 5.1, turanszkij WickedEngine)
- [CVE-2026-24819](https://cve.now/CVE-2026-24819.md): An out-of-memory (OOM) issue in foxinmy/weixin4j (CVSS 6.3, foxinmy weixin4j · com.foxinmy:weixin4j-base)
- [CVE-2026-24818](https://cve.now/CVE-2026-24818.md): A heap-based buffer over-read that might affect a system that compiles untrusted Lua code in praydog/UEVR (CVSS 6.9, praydog UEVR)
- [CVE-2026-24817](https://cve.now/CVE-2026-24817.md): A potential heap-buffer overflow in praydog/UEVR (CVSS 8.7, praydog UEVR)
- [CVE-2026-24816](https://cve.now/CVE-2026-24816.md): Cookie Security Vulnerabilities in datavane/tis (CVSS 10.0, datavane tis)
- [CVE-2026-24815](https://cve.now/CVE-2026-24815.md): A XStream Security Vulnerability in XML Deserialization in datavane/tis (CVSS 10.0, datavane tis)
- [CVE-2026-24814](https://cve.now/CVE-2026-24814.md): A integer overflow in swoole/swoole-src (CVSS 10.0, swoole-src)
- [CVE-2026-24813](https://cve.now/CVE-2026-24813.md): A null pointer dereference in abcz316/SKRoot-linuxKernelRoot (CVSS 8.7, abcz316 SKRoot-linuxKernelRoot)
- [CVE-2026-24812](https://cve.now/CVE-2026-24812.md): An improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c (CVSS 9.3, root-project root)
- [CVE-2026-24811](https://cve.now/CVE-2026-24811.md): An improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c (CVSS 9.3, root-project root)
- [CVE-2026-24810](https://cve.now/CVE-2026-24810.md): A buffer overflow in rethinkdb/rethinkdb (CVSS 10.0, rethinkdb)
- [CVE-2026-24809](https://cve.now/CVE-2026-24809.md): Save stack space while handling errors in praydog/REFramework (CVSS 6.9, praydog REFramework)
- [CVE-2026-24808](https://cve.now/CVE-2026-24808.md): A possible integer overflow vulnerability in RawTherapee/RawTherapee (CVSS 8.3, RawTherapee)
- [CVE-2026-24807](https://cve.now/CVE-2026-24807.md): Buffer Overflow Vulnerability in liuyueyi/quick-media (CVSS 5.3, liuyueyi quick-media · com.github.liuyueyi.media:batik-code…)
- [CVE-2026-24806](https://cve.now/CVE-2026-24806.md): Buffer Write Security Vulnerability in liuyueyi/quick-media (CVSS 5.3, liuyueyi quick-media · com.github.liuyueyi.media:batik-code…)
- [CVE-2026-24805](https://cve.now/CVE-2026-24805.md): Mishandles certain out-of-memory conditions in visualfc/liteide via liteidex/src/3rdparty/libvterm/src module (CVSS 6.7, visualfc liteide)
- [CVE-2026-24804](https://cve.now/CVE-2026-24804.md): A infinite loop vulnerability in coolsnowwolf/lede (CVSS 9.2, coolsnowwolf lede)
- [CVE-2026-24803](https://cve.now/CVE-2026-24803.md): A possible infinite loop vulnerability in coolsnowwolf/lede (CVSS 9.2, coolsnowwolf lede)
- [CVE-2026-24802](https://cve.now/CVE-2026-24802.md): Buffer Overflow Vulnerability in briandilley/jsonrpc4j (CVSS 5.3, briandilley jsonrpc4j · com.github.briandilley.jsonrpc4j:js…)
- [CVE-2026-24801](https://cve.now/CVE-2026-24801.md): A Potential SPA-vulnerability in Ralim/IronOS (CVSS 6.9, Ralim IronOS)
- [CVE-2026-24800](https://cve.now/CVE-2026-24800.md): A heap-based buffer over-read or buffer overflow in tildearrow/furnace (CVSS 10.0, tildearrow furnace)
- [CVE-2026-24799](https://cve.now/CVE-2026-24799.md): A heap-based buffer over-read or buffer overflow in davisking/dlib (CVSS 5.2, davisking dlib)
- [CVE-2026-24798](https://cve.now/CVE-2026-24798.md): An Uninitialized stack variable vulnerability in GaijinEntertainment/DagorEngine (CVSS 9.3, GaijinEntertainment DagorEngine)
- [CVE-2026-24797](https://cve.now/CVE-2026-24797.md): An out of bounds write due to a missing bounds check in neka-nat/cupoch (CVSS 6.9, neka-nat cupoch)
- [CVE-2026-24795](https://cve.now/CVE-2026-24795.md): An Out-of-bounds Write in CloverHackyColor/CloverBootloader (CVSS 5.1, CloverHackyColor CloverBootloader)
- [CVE-2026-24796](https://cve.now/CVE-2026-24796.md): A Out-of-bounds Read vulnerability in CloverHackyColor/CloverBootloader (CVSS 6.9, CloverHackyColor CloverBootloader)
- [CVE-2026-24794](https://cve.now/CVE-2026-24794.md): Chunk Unloading Security Vulnerability in CardboardPowered/cardboard (CVSS 9.2, CardboardPowered cardboard)
- [CVE-2026-24793](https://cve.now/CVE-2026-24793.md): A heap-based buffer over-read or buffer overflow vulnerability in azerothcore/azerothcore-wotlk (CVSS 10.0, azerothcore-wotlk)
- [CVE-2026-1464](https://cve.now/CVE-2026-1464.md): A possible integer overflow vulnerability in RawTherapee/RawTherapee (CVSS 4.6, MuntashirAkon AppManager)
- [CVE-2026-1465](https://cve.now/CVE-2026-1465.md): A heap-based buffer over-read or buffer overflow in tildearrow/furnace (CVSS 8.7, anyrtcIO-Community anyRTC-RTMP-OpenSource)
- [CVE-2025-14971](https://cve.now/CVE-2025-14971.md): Link Invoice Payment for WooCommerce \<= 2.8.0 - Missing Authorization to Unauthenticated Arbitrary Partial Payment Creation/Cancellation (CVSS 5.3, linknacional Link Invoice Payment for WooCommerce)
- [CVE-2026-21408](https://cve.now/CVE-2026-21408.md): beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Lin (CVSS 7.3, FUJIFILM Business Innovation beat-access for Windows)
- [CVE-2026-1361](https://cve.now/CVE-2026-1361.md): ASDA-Soft Stack-based Buffer Overflow Vulnerability (CVSS 7.8, Delta Electronics ASDA-Soft)
- [CVE-2026-24686](https://cve.now/CVE-2026-24686.md): go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names (CVSS 4.7, theupdateframework go-tuf · github.com/theupdateframework/g…)
- [CVE-2026-24479](https://cve.now/CVE-2026-24479.md): HUSTOJ has Arbitrary File Write (Zip Slip) in Problem Import Modules that leads to RCE (CVSS 9.3, zhblue hustoj)
- [CVE-2026-24490](https://cve.now/CVE-2026-24490.md): MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field (CVSS 8.1, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2026-24489](https://cve.now/CVE-2026-24489.md): Gakido vulnerable to HTTP Header Injection (CRLF Injection) (CVSS 5.3, HappyHackingSpace gakido · gakido)
- [CVE-2026-24486](https://cve.now/CVE-2026-24486.md): Python-Multipart has Arbitrary File Write via Non-Default Configuration (CVSS 8.6, Kludex python-multipart · python-multipart)
- [CVE-2026-24480](https://cve.now/CVE-2026-24480.md): QGIS had validated RCE and Repository Takeover via GitHub Actions (CVSS 8.7, QGIS)
- [CVE-2026-23683](https://cve.now/CVE-2026-23683.md): Missing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation) (CVSS 4.3, SAP\_SE SAP Fiori App)
- [CVE-2025-28162](https://cve.now/CVE-2025-28162.md): Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSani (CVSS 5.5)
- [CVE-2025-28164](https://cve.now/CVE-2025-28164.md): Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png\_create\_read\_struct() func (CVSS 5.5)
- [CVE-2025-65264](https://cve.now/CVE-2025-65264.md): The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attack (CVSS 5.5)
- [CVE-2025-69559](https://cve.now/CVE-2025-69559.md): code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin\_add.php. (CVSS 9.8)
- [CVE-2025-69562](https://cve.now/CVE-2025-69562.md): code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /insertmessage.php via the userid parameter. (CVSS 9.8)
- [CVE-2025-69563](https://cve.now/CVE-2025-69563.md): code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter. (CVSS 9.8)
- [CVE-2025-69564](https://cve.now/CVE-2025-69564.md): code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php via the Name, Address, email, UserName, (CVSS 9.8)
- [CVE-2025-69565](https://cve.now/CVE-2025-69565.md): code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-01-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.