| CVE-2026-23518 | CVE-2026-23518: Critical Vulnerability in fleetdm fleet | CRITICAL | Other | Fleet | -- | Jan 21, 2026 |
| CVE-2026-22822 | CVE-2026-22822: Critical Vulnerability in External Secrets Operator | CRITICAL | Incorrect Authorization | External Secrets Operator | -- | Jan 21, 2026 |
| CVE-2026-24061 | CVE-2026-24061: Critical Vulnerability in Debian Inetutils | CRITICAL | Injection | Debian Linux | Yes | Jan 21, 2026 |
| CVE-2026-21969 | CVE-2026-21969: Critical Vulnerability in Oracle Agile Product Lifecycle Management for Process | CRITICAL | Unknown | Agile Product Lifecycle Management For Process | -- | Jan 20, 2026 |
| CVE-2026-21962 | CVE-2026-21962: Critical Vulnerability in Oracle Weblogic Server Proxy Plug-in | CRITICAL | Access Control | Http Server | Yes | Jan 20, 2026 |
| CVE-2026-21636 | CVE-2026-21636: Critical Vulnerability in Node.js | CRITICAL | Access Control | Node.Js | -- | Jan 20, 2026 |
| CVE-2025-55130 | CVE-2025-55130: Critical Vulnerability in Node.js | CRITICAL | Other | Node.Js | Yes | Jan 20, 2026 |
| CVE-2025-56005 | CVE-2025-56005: Critical Vulnerability in dabeaz PLY | CRITICAL | Insecure Deserialization | Ply | Yes | Jan 20, 2026 |
| CVE-2026-22844 | CVE-2026-22844: Critical Vulnerability in Zoom Node Multimedia Routers | CRITICAL | Command Injection | — | -- | Jan 20, 2026 |
| CVE-2026-1221 | CVE-2026-1221: Critical Vulnerability in BROWAN COMMUNICATIONS PrismX MX100 AP Controller | CRITICAL | Hardcoded Credentials | — | -- | Jan 20, 2026 |
| CVE-2026-0907 | CVE-2026-0907: Critical Vulnerability in Google Chrome | CRITICAL | Other | Chrome | -- | Jan 20, 2026 |
| CVE-2026-0906 | CVE-2026-0906: Critical Vulnerability in Google Chrome | CRITICAL | Other | Chrome | -- | Jan 20, 2026 |
| CVE-2026-0905 | CVE-2026-0905: Critical Vulnerability in Google Chrome | CRITICAL | Information Disclosure | Chrome | -- | Jan 20, 2026 |
| CVE-2026-23837 | CVE-2026-23837: Critical Vulnerability in MyTube | CRITICAL | Incorrect Authorization | Mytube | -- | Jan 19, 2026 |
| CVE-2026-23841 | CVE-2026-23841: Critical Vulnerability in Leepeuker Movary | CRITICAL | Input Validation | Movary | -- | Jan 19, 2026 |
| CVE-2026-23840 | CVE-2026-23840: Critical Vulnerability in Leepeuker Movary | CRITICAL | Input Validation | Movary | -- | Jan 19, 2026 |
| CVE-2026-23839 | CVE-2026-23839: Critical Vulnerability in Leepeuker Movary | CRITICAL | Input Validation | Movary | -- | Jan 19, 2026 |
| CVE-2026-23836 | CVE-2026-23836: Critical Vulnerability in HotCRP | CRITICAL | Input Validation | Hotcrp | -- | Jan 19, 2026 |
| CVE-2026-22797 | CVE-2026-22797: Critical Vulnerability in OpenStack keystonemiddleware | CRITICAL | Other | — | -- | Jan 19, 2026 |
| CVE-2026-0610 | CVE-2026-0610: Critical Vulnerability in Devolutions Server | CRITICAL | SQL Injection | Devolutions Server | -- | Jan 19, 2026 |