CVEs published January 19 to January 25, 2026
1,262 CVEs were published Jan 19 to Jan 25, 2026, 114 of them critical. CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,262
- Critical
- 114
- Added to CISA KEV
- 6
- Busiest day
- Thu, Jan 22 (443)
- Quietest day
- Sun, Jan 25 (32)
- January 19, 2026113 CVEs · 10 critical
- January 20, 2026233 CVEs · 14 critical
- January 21, 2026121 CVEs · 12 critical
- January 22, 2026443 CVEs · 41 critical
- January 23, 2026255 CVEs · 30 critical
- January 24, 202665 CVEs · 7 critical
- January 25, 202632 CVEs
Added to CISA KEV 6
- CVE-2026-20045Cisco Unified Communications Products Remote Code Execution VulnerabilityCisco Unified Communications Manager · Cisco Unity Connecti…
- CVE-2025-31125Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` queryvitejs vite · vite
- CVE-2025-34026Versa Concerto Actuator Authentication Bypass Information LeakVersa Concerto
- CVE-2025-54313eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise.eslint-config-prettier · eslint-plugin-prettier +4
- CVE-2025-68645A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper
- CVE-2024-37079vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol.VMware vCenter Server · VMware Cloud Foundation