| CVE-2026-24742 | CVE-2026-24742: Medium Vulnerability in Discourse | MEDIUM | Incorrect Authorization | Discourse | -- | Jan 28, 2026 |
| CVE-2026-24739 | CVE-2026-24739: Medium Vulnerability in SensioLabs Symfony | MEDIUM | Injection | Symfony | -- | Jan 28, 2026 |
| CVE-2026-24775 | CVE-2026-24775: Medium Vulnerability in OpenProject | MEDIUM | Other | Openproject | -- | Jan 28, 2026 |
| CVE-2026-24772 | CVE-2026-24772: High Vulnerability in OpenProject | HIGH | Other | Openproject | -- | Jan 28, 2026 |
| CVE-2026-24685 | CVE-2026-24685: Critical Vulnerability in OpenProject | CRITICAL | Command Injection | Openproject | -- | Jan 28, 2026 |
| CVE-2026-23553 | CVE-2026-23553: Low Vulnerability in Xen | LOW | Improper Initialization | Xen | -- | Jan 28, 2026 |
| CVE-2026-1056 | CVE-2026-1056: Critical Vulnerability in Snow Monkey Forms Plugin for WordPress | CRITICAL | Path Traversal | — | Yes | Jan 28, 2026 |
| CVE-2026-0818 | CVE-2026-0818: Medium Vulnerability in Mozilla Thunderbird | MEDIUM | Improper Encoding | Thunderbird | -- | Jan 28, 2026 |
| CVE-2025-40551 | CVE-2025-40551: Critical Vulnerability in SolarWinds Web Help Desk | CRITICAL | Insecure Deserialization | Web Help Desk | -- | Jan 28, 2026 |
| CVE-2025-40536 | CVE-2025-40536: High Vulnerability in SolarWinds Web Help Desk | HIGH | Other | Web Help Desk | -- | Jan 28, 2026 |
| CVE-2026-24860 | CVE-2026-24860: Unknown Vulnerability in Fortinet | UNKNOWN | Unknown | — | -- | Jan 28, 2026 |
| CVE-2026-24842 | CVE-2026-24842: High Vulnerability in isaacs tar | HIGH | Path Traversal | Tar | -- | Jan 28, 2026 |
| CVE-2026-24841 | CVE-2026-24841: Critical Vulnerability in Dokploy | CRITICAL | Command Injection | Dokploy | Yes | Jan 28, 2026 |
| CVE-2026-21569 | CVE-2026-21569: High Vulnerability in Atlassian Crowd | HIGH | XXE | Crowd | -- | Jan 28, 2026 |
| CVE-2026-24784 | CVE-2026-24784: Medium Vulnerability in DNN DotNetNuke | MEDIUM | XSS | Dotnetnuke | -- | Jan 28, 2026 |
| CVE-2026-24783 | CVE-2026-24783: High Vulnerability in Script3 Soroban Fixed Point Math | HIGH | Other | Soroban-Fixed-Point-Math | -- | Jan 27, 2026 |
| CVE-2026-24779 | CVE-2026-24779: High Vulnerability in vllm | HIGH | SSRF | Vllm | -- | Jan 27, 2026 |
| CVE-2026-24778 | CVE-2026-24778: High Vulnerability in Ghost Content Management System | HIGH | XSS | Ghost | -- | Jan 27, 2026 |
| CVE-2026-24770 | CVE-2026-24770: Critical Vulnerability in Infiniflow RAGFlow | CRITICAL | Path Traversal | Ragflow | -- | Jan 27, 2026 |
| CVE-2026-24765 | CVE-2026-24765: High Vulnerability in PHPUnit | HIGH | Insecure Deserialization | Debian Linux | -- | Jan 27, 2026 |