CVEs published January 26 to February 1, 2026
838 CVEs were published Jan 26 to Feb 1, 2026, 97 of them critical. CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 838
- Critical
- 97
- Added to CISA KEV
- 7
- Busiest day
- Wed, Jan 28 (202)
- Quietest day
- Sun, Feb 1 (34)
- January 26, 2026118 CVEs · 11 critical
- January 27, 2026196 CVEs · 50 critical
- January 28, 2026202 CVEs · 13 critical
- January 29, 2026122 CVEs · 8 critical
- January 30, 2026121 CVEs · 13 critical
- January 31, 202645 CVEs · 2 critical
- February 1, 202634 CVEs
Added to CISA KEV 7
- CVE-2018-14634An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.The Linux Foundation kernel
- CVE-2025-52691Upload Arbitrary FilesSmarterTools SmarterMail
- CVE-2026-21509Microsoft Office Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-23760SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset APISmarterTools SmarterMail
- CVE-2026-24061telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.GNU Inetutils
- CVE-2026-24858An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.Fortinet FortiWeb · Fortinet FortiNAC-F +4
- CVE-2026-1281A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.Ivanti Endpoint Manager Mobile