CVEs published January 29, 2026
122 CVEs were published on January 29, 2026: 8 critical, 48 high. 2 are now in CISA KEV.
- Published
- 122
- Critical
- 8
- High
- 48
- Medium
- 63
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 44
Most affected products
- TeamViewer DEX
- 9
- TP-Link Systems VX800v
- 5
- Bdtask Bhojon All-In-One Restaurant Management System
- 3
- D-Link DWR-M961
- 3
- itsourcecode Society Management System
- 3
- Akın Software Computer Import Export Industry and Trade QR…
- 2
- Global Interactive Design Media Software Content Management…
- 2
- itsourcecode School Management System
- 2
- Ivanti Endpoint Manager Mobile
- 2
- Open5GS
- 2
Critical 8
- CVE-2026-25047deepHas vulnerable to Prototype Pollution via constructor.prototypesharpred deepHas · deephas
- CVE-2026-1340A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.Ivanti Endpoint Manager Mobile
- CVE-2026-1281A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.Ivanti Endpoint Manager Mobile
- CVE-2026-22806vCluster Platform's Access Keys Allows Access Beyond Scopeloft-sh loft
- CVE-2026-1453Missing Authentication for Critical Function in KiloView Encoder SeriesKiloView Encoder Series E1 hardware · KiloView Encoder S… +5
- CVE-2026-1610Tenda AX12 Pro V2 Telnet Service hard-coded credentialsTenda AX12 Pro
- CVE-2020-37012Tea LaTex 1.0 - Remote Code Executionammarfaizi2 Tea LaTex
- CVE-2025-69929An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the password hashing on the c
High 48
- CVE-2026-1637Tenda AC21 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflowTenda AC21
- CVE-2026-25126PolarLearn's unvalidated vote direction allows vote count manipulationpolarnl PolarLearn
- CVE-2026-25117pwn.college DOJO vulnerable to sandbox escape leading to arbitrary javascript executionpwncollege dojo
- CVE-2026-25116Runtipi vulnerable to unauthenticated docker-compose.yml Overwrite via Path Traversalruntipi
- CVE-2026-25063gradle-completion has a Bash command injection issuegradle-completion
- CVE-2026-24902TrustTunnel has SSRF and private network restriction bypass via numeric address destinationsTrustTunnel
- CVE-2026-1457Authenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385TP-Link Systems VIGI C485
- CVE-2025-13399Insecure Encryption in Communication with the Web Interface on TP-Link VX800vTP-Link Systems VX800v
- CVE-2026-24780AutoGPT is Vulnerable to RCE via Disabled Block ExecutionSignificant-Gravitas AutoGPT · agpt
- CVE-2025-15545Insufficient Backup File Upload Input Validation on TP-Link Archer RE605XTP-Link Systems Archer RE605X
- CVE-2026-24054Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layerskata-containers
- CVE-2026-23896immich API Key Privilege Escalation vulnerabilityimmich-app immich
- CVE-2025-62514`libparsec_crypto` does not check for weak order point of curve 25519Scille parsec-cloud
- CVE-2025-13905CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or moSchneider Electric EcoStruxure™ Process Expert
- CVE-2025-7714Time Based SQLi in Global Medya's PHP CMSGlobal Interactive Design Media Software Content Management…
- CVE-2025-7713Reflected XSS in Global Medya's PHP CMSGlobal Interactive Design Media Software Content Management…
- CVE-2020-37021Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path10-Strike Bandwidth Monitor
- CVE-2020-37020SonarQube 8.3.1 - Unquoted Service PathSonarQube
- CVE-2020-37017CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service PathWibu CodeMeter
- CVE-2020-37016BarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service PathBarcode-Ocr BarcodeOCR
- CVE-2020-37015Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory TraversalRuijienetworks Ruijie Networks Switch eWeb S29_RGOS
- CVE-2020-37013Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)Tucows Audio Playback Recorder
- CVE-2020-37011Gnome Fonts Viewer 3.34.0 Heap CorruptionGNOME Fonts Viewer
- CVE-2020-37010BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)BearshareOfficial BearShare Lite
- CVE-2020-37009MedDream PACS Server 6.8.3.751 - Remote Code ExecutionMedDream PACS Server
- CVE-2020-37008EasyPMS 1.0.0 - Authentication BypassElektraweb EasyPMS
- CVE-2020-37006berliCRM 1.0.24 - 'src_record' SQL Injectioncrm-now berliCRM
- CVE-2020-37005TimeClock Software 1.01 Authenticated Time-Based SQL InjectionTimeClock Software
- CVE-2020-37004Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakagecodexcube Ultimate Project Manager CRM PRO
- CVE-2020-37002Ajenti 2.1.36 Authenticated Remote Code ExecutionAjenti Project Ajenti
- CVE-2020-37001Frigate Professional 3.36.0.9 - 'Pack File' Buffer Overflow (SEH Egghunter)Frigate3 Frigate Professional
- CVE-2020-37000Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)Cleanersoft Software Free MP3 CD Ripper
- CVE-2020-36999elaniin CMS 1.0 - Authentication BypassElaniin CMS
- CVE-2020-36997BacklinkSpeed 2.4 - Buffer Overflow PoC (SEH)Dummysoftware BacklinkSpeed
- CVE-2026-1616osim: Path Traversal via query parameters in Nginx configurationRed Hat osim
- CVE-2025-7016Improper Access Control in Akinsoft's QR MenuAkın Software Computer Import Export Industry and Trade QR…
- CVE-2025-14975Custom Login Page Customizer < 2.5.4 - Unauthenticated Arbitrary Password ResetCustom Login Page Customizer
- CVE-2025-63649An out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows att
- CVE-2025-63650An out-of-bounds read in the mk_ptr_to_buf in mk_core function (mk_memory.c) of monkey commit f37e984 allows attackers to cause a Denial of
- CVE-2025-63651A use-after-free in the mk_string_char_search function (mk_core/mk_string.c) of monkey commit f37e984 allows attackers to cause a Denial of
- CVE-2025-63652A use-after-free in the mk_http_request_end function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Se
- CVE-2025-63653An out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit f37e984 allows attackers to cause a Denial
- CVE-2025-63655A NULL pointer dereference in the mk_http_range_parse function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a De
- CVE-2025-63656An out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of
- CVE-2025-63657An out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit f37e984 allows attackers to cause a Denial
- CVE-2025-63658A stack overflow in the mk_http_index_lookup function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of S
- CVE-2025-69516A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting ver
- CVE-2025-69604An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary p
Medium, low and unrated 66
- CVE-2026-1638Tenda AC21 mDMZSetCfg command injectionTenda AC21
- CVE-2026-1665Command Injection in nvm via NVM_AUTH_HEADER in wget code pathnvm-sh nvm
- CVE-2026-1625D-Link DWR-M961 SMS Message formSmsManage sub_4250E0 command injectionD-Link DWR-M961
- CVE-2026-1624D-Link DWR-M961 formLtefotaUpgradeFibocom command injectionD-Link DWR-M961
- CVE-2026-25061tcpflow has TIM Element OOB Write in wifipcapsimsong tcpflow
- CVE-2026-25046[Kimi VS Code] Command Injection in publish scripts vsix-publish.js and ovsx-publish.jsMoonshotAI kimi-agent-sdk
- CVE-2026-25040Budibase Vulnerable to Privilege Escalation via API Abuse – Creator Can Invite Users with Admin/Any Rolebudibase
- CVE-2026-24905Inspektor Gadget has a Command Injection vulnerability in Makefile.buildinspektor-gadget · github.com/inspektor-gadget/inspektor-ga…
- CVE-2026-24904TrustTunnel has `client_random_prefix` rule bypass via fragmented or partial TLS ClientHelloTrustTunnel
- CVE-2026-24846malcontent's archive extraction could write outside extraction directorychainguard-dev malcontent · github.com/chainguard-dev/malco…
- CVE-2026-24845malcontent's OCI image scanning could expose registry credentialschainguard-dev malcontent · github.com/chainguard-dev/ma… +1
- CVE-2026-1623Totolink A7000R cstecgi.cgi setUpgradeFW command injectionTotolink A7000R
- CVE-2025-15288Tanium addressed an improper access controls vulnerability in Interact.Tanium Interact
- CVE-2026-24687Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/MacUmbraco.Forms.Issues · Umbraco.Forms
- CVE-2025-15550birkir prime <= 0.4.0.beta.0 - Cross-Site Request Forgery in GraphQLbirkir prime
- CVE-2025-15549FluentCMS 2026 Stored XSS via SVG Upload in File ManagementFluentCMS
- CVE-2026-25068alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer OverflowALSA Project alsa-lib
- CVE-2026-1601Totolink A7000R cstecgi.cgi setUploadUserData command injectionTotolink A7000R
- CVE-2025-15548Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800vTP-Link Systems VX800v
- CVE-2025-15543Read-Only Root Access via USB Storage Device in TP-Link VX800vTP-Link Systems VX800v
- CVE-2025-15542Denial of Service (DoS) of VoIP Communication on TP-Link VX800vTP-Link Systems VX800v
- CVE-2025-15541Access to System Files via SFTP on TP-Link VX800vTP-Link Systems VX800v
- CVE-2026-1600Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic errorBdtask Bhojon All-In-One Restaurant Management System
- CVE-2026-24414Icinga for Windows certificate can have too-open permissionsicinga-powershell-framework
- CVE-2026-1599Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic errorBdtask Bhojon All-In-One Restaurant Management System
- CVE-2026-24413Icinga has insecure permission of %ProgramData%\icinga2\var on Windowsicinga2
- CVE-2026-1598Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scriptingBdtask Bhojon All-In-One Restaurant Management System
- CVE-2026-1597Bdtask SalesERP Administrative Endpoint improper authorizationBdtask SalesERP
- CVE-2026-1596D-Link DWR-M961 formLtefotaUpgradeQuectel sub_419920 command injectionD-Link DWR-M961
- CVE-2026-1595itsourcecode Society Management System edit_student_query.php sql injectionitsourcecode Society Management System
- CVE-2026-0936Insertion of Sensitive Information into LogfileB&R Industrial Automation Process Visualization Interface
- CVE-2026-1594itsourcecode Society Management System add_expenses.php sql injectionitsourcecode Society Management System
- CVE-2026-1593itsourcecode Society Management System edit_expenses_query.php sql injectionitsourcecode Society Management System
- CVE-2020-37018GOautodial 4.0 - Persistent Cross-Site ScriptingGOautodial
- CVE-2020-37007Liman 0.7 - Cross-Site Request Forgery (Change Password)salihciftci Liman
- CVE-2020-36995Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Servicetelnet-lite Mocha Telnet Lite for iOS
- CVE-2020-36994QlikView 12.50.20000.0 - 'FTP Server Address' Denial of ServiceQlikTech International AB QlikView
- CVE-2026-1590itsourcecode School Management System index.php sql injectionitsourcecode School Management System
- CVE-2026-1589itsourcecode School Management System index.php sql injectionitsourcecode School Management System
- CVE-2025-7014Session Hijacking in QRMenumPro's Menu PanelQR Menu Pro Smart Menu Systems Menu Panel
- CVE-2025-7013IDOR in QRMenumPro's Menu PanelQR Menu Pro Smart Menu Systems Menu Panel
- CVE-2026-1588jishenghua jshERP installByPath install path traversaljishenghua jshERP
- CVE-2026-1587Open5GS SGWC s11-handler.c sgwc_s11_handle_modify_bearer_request denial of serviceOpen5GS
- CVE-2026-1586Open5GS SGWC s11-handler.c ogs_gtp2_f_teid_to_ip denial of serviceOpen5GS
- CVE-2025-7015Session Hijacking in Akinsoft's QR MenuAkın Software Computer Import Export Industry and Trade QR…
- CVE-2026-1469Stored Cross-Site Scripting (XSS) in RLE NOVA's PlanManagerRLE NOVA PlanManager
- CVE-2026-22764Dell OpenManage Network Integration, versions prior to 3.9, contains an Improper Authentication vulnerability.Dell OpenManage Network Integration
- CVE-2026-23570Log timestamp tampering vulnerability in Content Distribution ServiceTeamViewer DEX
- CVE-2026-23569Out-of-bounds read vulnerability in Content Distribution ServiceTeamViewer DEX
- CVE-2026-23568Out-of-bounds read vulnerability in Content Distribution ServiceTeamViewer DEX
- CVE-2026-23567Integer underflow in Content Distribution Service UDP handlerTeamViewer DEX
- CVE-2026-23566Log Injection in Content Distribution Service UDP HandlerTeamViewer DEX
- CVE-2026-23565Denial-of-Service in Content Distribution ServiceTeamViewer DEX
- CVE-2026-23564Transmission of Unencrypted Data in Content Distribution ServiceTeamViewer DEX
- CVE-2026-23571Command Injection in 1E-Nomad-RunPkgStatusRequest Instruction in TeamViewer DEXTeamViewer DEX
- CVE-2026-23563Privilege escalation in TeamViewer DEX via DeleteFileByPath instructionTeamViewer DEX
- CVE-2026-1188In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor featurEclipse Foundation Eclipse OMR
- CVE-2026-25067SmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path CoercionSmarterTools SmarterMail
- CVE-2025-55704Hidden functionality issue exists in multiple MFPs provided by Brother Industries, Ltd., which may allow an attacker to obtain the logs of tBrother Industries Multiple MFPs · Konica Minolta Multiple…
- CVE-2025-53869Multiple MFPs provided by Brother Industries, Ltd.Brother Industries Multiple MFPs · Konica Minolta Multip… +1
- CVE-2026-1552SEMCMS SEMCMS_Info.php sql injectionSEMCMS
- CVE-2025-45160A HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29.
- CVE-2025-69749Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code.
- CVE-2025-71008A segmentation violation in the oneflow._oneflow_internal.autograd.Function.FunctionCtx.mark_non_differentiable component of OneFlow v0.9.0
- CVE-2025-71009An input validation vulnerability in the flow.scatter/flow.scatter_add component of OneFlow v0.9.0 allows attackers to cause a Denial of Ser
- CVE-2025-71011An input validation vulnerability in the flow.Tensor.new_empty/flow.Tensor.new_ones/flow.Tensor.new_zeros component of OneFlow v0.9.0 allows