# CVEs published 2026-01-29

122 CVEs were published on January 29, 2026: 8 critical, 48 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2026-1638](https://cve.now/CVE-2026-1638.md): Tenda AC21 mDMZSetCfg command injection (CVSS 5.3, Tenda AC21)
- [CVE-2026-1665](https://cve.now/CVE-2026-1665.md): Command Injection in nvm via NVM\_AUTH\_HEADER in wget code path (CVSS 5.4, nvm-sh nvm)
- [CVE-2026-1637](https://cve.now/CVE-2026-1637.md): Tenda AC21 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow (CVSS 8.7, Tenda AC21)
- [CVE-2026-25126](https://cve.now/CVE-2026-25126.md): PolarLearn's unvalidated vote direction allows vote count manipulation (CVSS 7.1, polarnl PolarLearn)
- [CVE-2026-1625](https://cve.now/CVE-2026-1625.md): D-Link DWR-M961 SMS Message formSmsManage sub\_4250E0 command injection (CVSS 5.3, D-Link DWR-M961)
- [CVE-2026-1624](https://cve.now/CVE-2026-1624.md): D-Link DWR-M961 formLtefotaUpgradeFibocom command injection (CVSS 5.3, D-Link DWR-M961)
- [CVE-2026-25117](https://cve.now/CVE-2026-25117.md): pwn.college DOJO vulnerable to sandbox escape leading to arbitrary javascript execution (CVSS 8.3, pwncollege dojo)
- [CVE-2026-25116](https://cve.now/CVE-2026-25116.md): Runtipi vulnerable to unauthenticated docker-compose.yml Overwrite via Path Traversal (CVSS 7.6, runtipi)
- [CVE-2026-25063](https://cve.now/CVE-2026-25063.md): gradle-completion has a Bash command injection issue (CVSS 8.3, gradle-completion)
- [CVE-2026-25061](https://cve.now/CVE-2026-25061.md): tcpflow has TIM Element OOB Write in wifipcap (CVSS 5.5, simsong tcpflow)
- [CVE-2026-25047](https://cve.now/CVE-2026-25047.md): deepHas vulnerable to Prototype Pollution via constructor.prototype (CVSS 9.4, sharpred deepHas · deephas)
- [CVE-2026-25046](https://cve.now/CVE-2026-25046.md): \[Kimi VS Code\] Command Injection in publish scripts vsix-publish.js and ovsx-publish.js (CVSS 2.9, MoonshotAI kimi-agent-sdk)
- [CVE-2026-25040](https://cve.now/CVE-2026-25040.md): Budibase Vulnerable to Privilege Escalation via API Abuse – Creator Can Invite Users with Admin/Any Role (CVSS 5.7, budibase)
- [CVE-2026-1340](https://cve.now/CVE-2026-1340.md): A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. (CVSS 9.8, KEV, Ivanti Endpoint Manager Mobile)
- [CVE-2026-1281](https://cve.now/CVE-2026-1281.md): A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. (CVSS 9.8, KEV, Ivanti Endpoint Manager Mobile)
- [CVE-2026-24905](https://cve.now/CVE-2026-24905.md): Inspektor Gadget has a Command Injection vulnerability in Makefile.build (CVSS 6.6, inspektor-gadget · github.com/inspektor-gadget/inspektor-ga…)
- [CVE-2026-24902](https://cve.now/CVE-2026-24902.md): TrustTunnel has SSRF and private network restriction bypass via numeric address destinations (CVSS 7.1, TrustTunnel)
- [CVE-2026-24904](https://cve.now/CVE-2026-24904.md): TrustTunnel has \`client\_random\_prefix\` rule bypass via fragmented or partial TLS ClientHello (CVSS 5.3, TrustTunnel)
- [CVE-2026-24846](https://cve.now/CVE-2026-24846.md): malcontent's archive extraction could write outside extraction directory (CVSS 5.5, chainguard-dev malcontent · github.com/chainguard-dev/malco…)
- [CVE-2026-24845](https://cve.now/CVE-2026-24845.md): malcontent's OCI image scanning could expose registry credentials (CVSS 6.5, chainguard-dev malcontent · github.com/chainguard-dev/ma… +1)
- [CVE-2026-1623](https://cve.now/CVE-2026-1623.md): Totolink A7000R cstecgi.cgi setUpgradeFW command injection (CVSS 5.3, Totolink A7000R)
- [CVE-2025-15288](https://cve.now/CVE-2025-15288.md): Tanium addressed an improper access controls vulnerability in Interact. (CVSS 3.1, Tanium Interact)
- [CVE-2026-24687](https://cve.now/CVE-2026-24687.md): Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac (CVSS 6.0, Umbraco.Forms.Issues · Umbraco.Forms)
- [CVE-2026-22806](https://cve.now/CVE-2026-22806.md): vCluster Platform's Access Keys Allows Access Beyond Scope (CVSS 9.1, loft-sh loft)
- [CVE-2025-15550](https://cve.now/CVE-2025-15550.md): birkir prime \<= 0.4.0.beta.0 - Cross-Site Request Forgery in GraphQL (CVSS 5.1, birkir prime)
- [CVE-2025-15549](https://cve.now/CVE-2025-15549.md): FluentCMS 2026 Stored XSS via SVG Upload in File Management (CVSS 4.8, FluentCMS)
- [CVE-2026-25068](https://cve.now/CVE-2026-25068.md): alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow (CVSS 4.6, ALSA Project alsa-lib)
- [CVE-2026-1453](https://cve.now/CVE-2026-1453.md): Missing Authentication for Critical Function in KiloView Encoder Series (CVSS 9.3, KiloView Encoder Series E1 hardware · KiloView Encoder S… +5)
- [CVE-2026-1610](https://cve.now/CVE-2026-1610.md): Tenda AX12 Pro V2 Telnet Service hard-coded credentials (CVSS 9.2, Tenda AX12 Pro)
- [CVE-2026-1457](https://cve.now/CVE-2026-1457.md): Authenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385 (CVSS 8.5, TP-Link Systems VIGI C485)
- [CVE-2026-1601](https://cve.now/CVE-2026-1601.md): Totolink A7000R cstecgi.cgi setUploadUserData command injection (CVSS 5.3, Totolink A7000R)
- [CVE-2025-15548](https://cve.now/CVE-2025-15548.md): Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800v (CVSS 5.3, TP-Link Systems VX800v)
- [CVE-2025-15543](https://cve.now/CVE-2025-15543.md): Read-Only Root Access via USB Storage Device in TP-Link VX800v (CVSS 5.1, TP-Link Systems VX800v)
- [CVE-2025-15542](https://cve.now/CVE-2025-15542.md): Denial of Service (DoS) of VoIP Communication on TP-Link VX800v (CVSS 6.3, TP-Link Systems VX800v)
- [CVE-2025-15541](https://cve.now/CVE-2025-15541.md): Access to System Files via SFTP on TP-Link VX800v (CVSS 6.9, TP-Link Systems VX800v)
- [CVE-2025-13399](https://cve.now/CVE-2025-13399.md): Insecure Encryption in Communication with the Web Interface on TP-Link VX800v (CVSS 7.7, TP-Link Systems VX800v)
- [CVE-2026-1600](https://cve.now/CVE-2026-1600.md): Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic error (CVSS 5.3, Bdtask Bhojon All-In-One Restaurant Management System)
- [CVE-2026-24780](https://cve.now/CVE-2026-24780.md): AutoGPT is Vulnerable to RCE via Disabled Block Execution (CVSS 8.6, Significant-Gravitas AutoGPT · agpt)
- [CVE-2026-24414](https://cve.now/CVE-2026-24414.md): Icinga for Windows certificate can have too-open permissions (CVSS 6.8, icinga-powershell-framework)
- [CVE-2026-1599](https://cve.now/CVE-2026-1599.md): Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic error (CVSS 5.3, Bdtask Bhojon All-In-One Restaurant Management System)
- [CVE-2025-15545](https://cve.now/CVE-2025-15545.md): Insufficient Backup File Upload Input Validation on TP-Link Archer RE605X (CVSS 7.3, TP-Link Systems Archer RE605X)
- [CVE-2026-24413](https://cve.now/CVE-2026-24413.md): Icinga has insecure permission of %ProgramData%\\icinga2\\var on Windows (CVSS 6.8, icinga2)
- [CVE-2026-24054](https://cve.now/CVE-2026-24054.md): Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers (CVSS 8.8, kata-containers)
- [CVE-2026-23896](https://cve.now/CVE-2026-23896.md): immich API Key Privilege Escalation vulnerability (CVSS 7.2, immich-app immich)
- [CVE-2026-1598](https://cve.now/CVE-2026-1598.md): Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting (CVSS 5.1, Bdtask Bhojon All-In-One Restaurant Management System)
- [CVE-2026-1597](https://cve.now/CVE-2026-1597.md): Bdtask SalesERP Administrative Endpoint improper authorization (CVSS 5.3, Bdtask SalesERP)
- [CVE-2025-62514](https://cve.now/CVE-2025-62514.md): \`libparsec\_crypto\` does not check for weak order point of curve 25519 (CVSS 8.3, Scille parsec-cloud)
- [CVE-2026-1596](https://cve.now/CVE-2026-1596.md): D-Link DWR-M961 formLtefotaUpgradeQuectel sub\_419920 command injection (CVSS 5.3, D-Link DWR-M961)
- [CVE-2026-1595](https://cve.now/CVE-2026-1595.md): itsourcecode Society Management System edit\_student\_query.php sql injection (CVSS 6.9, itsourcecode Society Management System)
- [CVE-2026-0936](https://cve.now/CVE-2026-0936.md): Insertion of Sensitive Information into Logfile (CVSS 5.1, B&R Industrial Automation Process Visualization Interface)
- [CVE-2025-13905](https://cve.now/CVE-2025-13905.md): CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or mo (CVSS 7.0, Schneider Electric EcoStruxure™ Process Expert)
- [CVE-2025-7714](https://cve.now/CVE-2025-7714.md): Time Based SQLi in Global Medya's PHP CMS (CVSS 7.5, Global Interactive Design Media Software Content Management…)
- [CVE-2025-7713](https://cve.now/CVE-2025-7713.md): Reflected XSS in Global Medya's PHP CMS (CVSS 7.5, Global Interactive Design Media Software Content Management…)
- [CVE-2026-1594](https://cve.now/CVE-2026-1594.md): itsourcecode Society Management System add\_expenses.php sql injection (CVSS 6.9, itsourcecode Society Management System)
- [CVE-2026-1593](https://cve.now/CVE-2026-1593.md): itsourcecode Society Management System edit\_expenses\_query.php sql injection (CVSS 6.9, itsourcecode Society Management System)
- [CVE-2020-37021](https://cve.now/CVE-2020-37021.md): Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path (CVSS 8.5, 10-Strike Bandwidth Monitor)
- [CVE-2020-37020](https://cve.now/CVE-2020-37020.md): SonarQube 8.3.1 - Unquoted Service Path (CVSS 8.5, SonarQube)
- [CVE-2020-37018](https://cve.now/CVE-2020-37018.md): GOautodial 4.0 - Persistent Cross-Site Scripting (CVSS 5.1, GOautodial)
- [CVE-2020-37017](https://cve.now/CVE-2020-37017.md): CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path (CVSS 8.5, Wibu CodeMeter)
- [CVE-2020-37016](https://cve.now/CVE-2020-37016.md): BarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service Path (CVSS 8.5, Barcode-Ocr BarcodeOCR)
- [CVE-2020-37015](https://cve.now/CVE-2020-37015.md): Ruijie Networks Switch eWeb S29\_RGOS 11.4 - Directory Traversal (CVSS 7.1, Ruijienetworks Ruijie Networks Switch eWeb S29\_RGOS)
- [CVE-2020-37013](https://cve.now/CVE-2020-37013.md): Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH) (CVSS 8.4, Tucows Audio Playback Recorder)
- [CVE-2020-37012](https://cve.now/CVE-2020-37012.md): Tea LaTex 1.0 - Remote Code Execution (CVSS 9.3, ammarfaizi2 Tea LaTex)
- [CVE-2020-37011](https://cve.now/CVE-2020-37011.md): Gnome Fonts Viewer 3.34.0 Heap Corruption (CVSS 8.4, GNOME Fonts Viewer)
- [CVE-2020-37010](https://cve.now/CVE-2020-37010.md): BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC) (CVSS 8.4, BearshareOfficial BearShare Lite)
- [CVE-2020-37009](https://cve.now/CVE-2020-37009.md): MedDream PACS Server 6.8.3.751 - Remote Code Execution (CVSS 8.7, MedDream PACS Server)
- [CVE-2020-37008](https://cve.now/CVE-2020-37008.md): EasyPMS 1.0.0 - Authentication Bypass (CVSS 8.7, Elektraweb EasyPMS)
- [CVE-2020-37007](https://cve.now/CVE-2020-37007.md): Liman 0.7 - Cross-Site Request Forgery (Change Password) (CVSS 5.1, salihciftci Liman)
- [CVE-2020-37006](https://cve.now/CVE-2020-37006.md): berliCRM 1.0.24 - 'src\_record' SQL Injection (CVSS 7.1, crm-now berliCRM)
- [CVE-2020-37005](https://cve.now/CVE-2020-37005.md): TimeClock Software 1.01 Authenticated Time-Based SQL Injection (CVSS 7.1, TimeClock Software)
- [CVE-2020-37004](https://cve.now/CVE-2020-37004.md): Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage (CVSS 7.1, codexcube Ultimate Project Manager CRM PRO)
- [CVE-2020-37002](https://cve.now/CVE-2020-37002.md): Ajenti 2.1.36 Authenticated Remote Code Execution (CVSS 8.7, Ajenti Project Ajenti)
- [CVE-2020-37001](https://cve.now/CVE-2020-37001.md): Frigate Professional 3.36.0.9 - 'Pack File' Buffer Overflow (SEH Egghunter) (CVSS 8.4, Frigate3 Frigate Professional)
- [CVE-2020-37000](https://cve.now/CVE-2020-37000.md): Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter) (CVSS 8.4, Cleanersoft Software Free MP3 CD Ripper)
- [CVE-2020-36999](https://cve.now/CVE-2020-36999.md): elaniin CMS 1.0 - Authentication Bypass (CVSS 8.8, Elaniin CMS)
- [CVE-2020-36997](https://cve.now/CVE-2020-36997.md): BacklinkSpeed 2.4 - Buffer Overflow PoC (SEH) (CVSS 8.4, Dummysoftware BacklinkSpeed)
- [CVE-2020-36995](https://cve.now/CVE-2020-36995.md): Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service (CVSS 4.6, telnet-lite Mocha Telnet Lite for iOS)
- [CVE-2020-36994](https://cve.now/CVE-2020-36994.md): QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service (CVSS 4.6, QlikTech International AB QlikView)
- [CVE-2026-1590](https://cve.now/CVE-2026-1590.md): itsourcecode School Management System index.php sql injection (CVSS 6.9, itsourcecode School Management System)
- [CVE-2026-1589](https://cve.now/CVE-2026-1589.md): itsourcecode School Management System index.php sql injection (CVSS 6.9, itsourcecode School Management System)
- [CVE-2025-7014](https://cve.now/CVE-2025-7014.md): Session Hijacking in QRMenumPro's Menu Panel (CVSS 5.7, QR Menu Pro Smart Menu Systems Menu Panel)
- [CVE-2025-7013](https://cve.now/CVE-2025-7013.md): IDOR in QRMenumPro's Menu Panel (CVSS 5.7, QR Menu Pro Smart Menu Systems Menu Panel)
- [CVE-2026-1616](https://cve.now/CVE-2026-1616.md): osim: Path Traversal via query parameters in Nginx configuration (CVSS 7.5, Red Hat osim)
- [CVE-2026-1588](https://cve.now/CVE-2026-1588.md): jishenghua jshERP installByPath install path traversal (CVSS 5.1, jishenghua jshERP)
- [CVE-2026-1587](https://cve.now/CVE-2026-1587.md): Open5GS SGWC s11-handler.c sgwc\_s11\_handle\_modify\_bearer\_request denial of service (CVSS 6.9, Open5GS)
- [CVE-2026-1586](https://cve.now/CVE-2026-1586.md): Open5GS SGWC s11-handler.c ogs\_gtp2\_f\_teid\_to\_ip denial of service (CVSS 6.9, Open5GS)
- [CVE-2025-7016](https://cve.now/CVE-2025-7016.md): Improper Access Control in Akinsoft's QR Menu (CVSS 8.0, Akın Software Computer Import Export Industry and Trade QR…)
- [CVE-2025-7015](https://cve.now/CVE-2025-7015.md): Session Hijacking in Akinsoft's QR Menu (CVSS 5.7, Akın Software Computer Import Export Industry and Trade QR…)
- [CVE-2026-1469](https://cve.now/CVE-2026-1469.md): Stored Cross-Site Scripting (XSS) in RLE NOVA's PlanManager (CVSS 6.9, RLE NOVA PlanManager)
- [CVE-2026-22764](https://cve.now/CVE-2026-22764.md): Dell OpenManage Network Integration, versions prior to 3.9, contains an Improper Authentication vulnerability. (CVSS 4.3, Dell OpenManage Network Integration)
- [CVE-2026-23570](https://cve.now/CVE-2026-23570.md): Log timestamp tampering vulnerability in Content Distribution Service (CVSS 6.5, TeamViewer DEX)
- [CVE-2026-23569](https://cve.now/CVE-2026-23569.md): Out-of-bounds read vulnerability in Content Distribution Service (CVSS 6.5, TeamViewer DEX)
- [CVE-2026-23568](https://cve.now/CVE-2026-23568.md): Out-of-bounds read vulnerability in Content Distribution Service (CVSS 5.4, TeamViewer DEX)
- [CVE-2026-23567](https://cve.now/CVE-2026-23567.md): Integer underflow in Content Distribution Service UDP handler (CVSS 6.5, TeamViewer DEX)
- [CVE-2026-23566](https://cve.now/CVE-2026-23566.md): Log Injection in Content Distribution Service UDP Handler (CVSS 6.5, TeamViewer DEX)
- [CVE-2026-23565](https://cve.now/CVE-2026-23565.md): Denial-of-Service in Content Distribution Service (CVSS 6.5, TeamViewer DEX)
- [CVE-2026-23564](https://cve.now/CVE-2026-23564.md): Transmission of Unencrypted Data in Content Distribution Service (CVSS 6.5, TeamViewer DEX)
- [CVE-2026-23571](https://cve.now/CVE-2026-23571.md): Command Injection in 1E-Nomad-RunPkgStatusRequest Instruction in TeamViewer DEX (CVSS 6.8, TeamViewer DEX)
- [CVE-2026-23563](https://cve.now/CVE-2026-23563.md): Privilege escalation in TeamViewer DEX via DeleteFileByPath instruction (CVSS 5.7, TeamViewer DEX)
- [CVE-2026-1188](https://cve.now/CVE-2026-1188.md): In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor featur (CVSS 6.9, Eclipse Foundation Eclipse OMR)
- [CVE-2025-14975](https://cve.now/CVE-2025-14975.md): Custom Login Page Customizer \< 2.5.4 - Unauthenticated Arbitrary Password Reset (CVSS 8.1, Custom Login Page Customizer)
- [CVE-2026-25067](https://cve.now/CVE-2026-25067.md): SmarterTools SmarterMail \< Build 9518 Unauthenticated background-of-the-day Path Coercion (CVSS 6.9, SmarterTools SmarterMail)
- [CVE-2025-55704](https://cve.now/CVE-2025-55704.md): Hidden functionality issue exists in multiple MFPs provided by Brother Industries, Ltd., which may allow an attacker to obtain the logs of t (CVSS 5.3, Brother Industries Multiple MFPs · Konica Minolta Multiple…)
- [CVE-2025-53869](https://cve.now/CVE-2025-53869.md): Multiple MFPs provided by Brother Industries, Ltd. (CVSS 3.7, Brother Industries Multiple MFPs · Konica Minolta Multip… +1)
- [CVE-2026-1552](https://cve.now/CVE-2026-1552.md): SEMCMS SEMCMS\_Info.php sql injection (CVSS 5.3, SEMCMS)
- [CVE-2025-45160](https://cve.now/CVE-2025-45160.md): A HTML injection vulnerability exists in the file upload functionality of Cacti \<= 1.2.29. (CVSS 5.4)
- [CVE-2025-63649](https://cve.now/CVE-2025-63649.md): An out-of-bounds read in the http\_parser\_transfer\_encoding\_chunked function (mk\_server/mk\_http\_parser.c) of monkey commit f37e984 allows att (CVSS 7.5)
- [CVE-2025-63650](https://cve.now/CVE-2025-63650.md): An out-of-bounds read in the mk\_ptr\_to\_buf in mk\_core function (mk\_memory.c) of monkey commit f37e984 allows attackers to cause a Denial of (CVSS 7.5)
- [CVE-2025-63651](https://cve.now/CVE-2025-63651.md): A use-after-free in the mk\_string\_char\_search function (mk\_core/mk\_string.c) of monkey commit f37e984 allows attackers to cause a Denial of (CVSS 7.5)
- [CVE-2025-63652](https://cve.now/CVE-2025-63652.md): A use-after-free in the mk\_http\_request\_end function (mk\_server/mk\_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Se (CVSS 7.5)
- [CVE-2025-63653](https://cve.now/CVE-2025-63653.md): An out-of-bounds read in the mk\_vhost\_fdt\_close function (mk\_server/mk\_vhost.c) of monkey commit f37e984 allows attackers to cause a Denial (CVSS 7.5)
- [CVE-2025-63655](https://cve.now/CVE-2025-63655.md): A NULL pointer dereference in the mk\_http\_range\_parse function (mk\_server/mk\_http.c) of monkey commit f37e984 allows attackers to cause a De (CVSS 7.5)
- [CVE-2025-63656](https://cve.now/CVE-2025-63656.md): An out-of-bounds read in the header\_cmp function (mk\_server/mk\_http\_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of (CVSS 7.5)
- [CVE-2025-63657](https://cve.now/CVE-2025-63657.md): An out-of-bounds read in the mk\_mimetype\_find function (mk\_server/mk\_mimetype.c) of monkey commit f37e984 allows attackers to cause a Denial (CVSS 7.5)
- [CVE-2025-63658](https://cve.now/CVE-2025-63658.md): A stack overflow in the mk\_http\_index\_lookup function (mk\_server/mk\_http.c) of monkey commit f37e984 allows attackers to cause a Denial of S (CVSS 7.5)
- [CVE-2025-69516](https://cve.now/CVE-2025-69516.md): A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting ver (CVSS 8.8)
- [CVE-2025-69604](https://cve.now/CVE-2025-69604.md): An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary p (CVSS 7.8)
- [CVE-2025-69749](https://cve.now/CVE-2025-69749.md): Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code. (CVSS 6.1)
- [CVE-2025-69929](https://cve.now/CVE-2025-69929.md): An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the password hashing on the c (CVSS 9.8)
- [CVE-2025-71008](https://cve.now/CVE-2025-71008.md): A segmentation violation in the oneflow.\_oneflow\_internal.autograd.Function.FunctionCtx.mark\_non\_differentiable component of OneFlow v0.9.0 (CVSS 6.2)
- [CVE-2025-71009](https://cve.now/CVE-2025-71009.md): An input validation vulnerability in the flow.scatter/flow.scatter\_add component of OneFlow v0.9.0 allows attackers to cause a Denial of Ser (CVSS 6.2)
- [CVE-2025-71011](https://cve.now/CVE-2025-71011.md): An input validation vulnerability in the flow.Tensor.new\_empty/flow.Tensor.new\_ones/flow.Tensor.new\_zeros component of OneFlow v0.9.0 allows (CVSS 6.2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-01-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.