| CVE-2026-22686 | CVE-2026-22686: Critical Vulnerability in Agentfront Enclave | CRITICAL | Code Injection | Enclave | Yes | Jan 14, 2026 |
| CVE-2026-23478 | CVE-2026-23478: Critical Vulnerability in Cal.com | CRITICAL | Other | Cal.Com | -- | Jan 13, 2026 |
| CVE-2026-20963 | CVE-2026-20963: Critical Vulnerability in Microsoft SharePoint | CRITICAL | Insecure Deserialization | Sharepoint Server | Yes | Jan 13, 2026 |
| CVE-2026-22755 | CVE-2026-22755: Critical Vulnerability in Vivotek Devices | CRITICAL | Command Injection | — | -- | Jan 13, 2026 |
| CVE-2026-0892 | CVE-2026-0892: Critical Vulnerability in Mozilla Firefox and Thunderbird | CRITICAL | Buffer Overflow | Firefox | -- | Jan 13, 2026 |
| CVE-2026-0884 | CVE-2026-0884: Critical Vulnerability in Mozilla Firefox and Thunderbird | CRITICAL | Use After Free | Firefox | -- | Jan 13, 2026 |
| CVE-2026-0881 | CVE-2026-0881: Critical Vulnerability in Mozilla Firefox and Thunderbird | CRITICAL | Access Control | Firefox | -- | Jan 13, 2026 |
| CVE-2026-0879 | CVE-2026-0879: Critical Vulnerability in Mozilla Firefox and Thunderbird | CRITICAL | Buffer Overflow | Firefox | -- | Jan 13, 2026 |
| CVE-2026-0501 | CVE-2026-0501: Critical Vulnerability in SAP S/4HANA | CRITICAL | SQL Injection | — | -- | Jan 13, 2026 |
| CVE-2026-0500 | CVE-2026-0500: Critical Vulnerability in SAP Wily Introscope Enterprise Manager | CRITICAL | Code Injection | Introscope Enterprise Manager | -- | Jan 13, 2026 |
| CVE-2026-0498 | CVE-2026-0498: Critical Vulnerability in SAP S/4HANA | CRITICAL | Code Injection | S\/4 Hana | -- | Jan 13, 2026 |
| CVE-2026-0491 | CVE-2026-0491: Critical Vulnerability in SAP Landscape Transformation | CRITICAL | Code Injection | — | -- | Jan 13, 2026 |
| CVE-2026-22813 | CVE-2026-22813: Critical Vulnerability in Anoma OpenCode | CRITICAL | XSS | Opencode | Yes | Jan 12, 2026 |
| CVE-2026-22799 | CVE-2026-22799: Critical Vulnerability in Emlog | CRITICAL | Unrestricted File Upload | Emlog | -- | Jan 12, 2026 |
| CVE-2026-22794 | CVE-2026-22794: Critical Vulnerability in Appsmith | CRITICAL | Other | Appsmith | Yes | Jan 12, 2026 |
| CVE-2025-12420 | CVE-2025-12420: Critical Vulnerability in ServiceNow AI Platform | CRITICAL | Other | Now Assist Ai Agents | Yes | Jan 12, 2026 |
| CVE-2026-22785 | CVE-2026-22785: Critical Vulnerability in orval | CRITICAL | Command Injection | Orval | Yes | Jan 12, 2026 |
| CVE-2026-22783 | CVE-2026-22783: Critical Vulnerability in dfir-iris iris | CRITICAL | External Control of File Name | Iris | -- | Jan 12, 2026 |
| CVE-2026-22781 | CVE-2026-22781: Critical Vulnerability in Ritlabs TinyWeb | CRITICAL | Command Injection | Tinyweb | -- | Jan 12, 2026 |
| CVE-2026-22252 | CVE-2026-22252: Critical Vulnerability in LibreChat | CRITICAL | Improper Authorization | Librechat | -- | Jan 12, 2026 |