Skip to content
OpenAdvisories

Archive

13 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /13 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-22686 Public exploit

    Sandbox Escape via Host Error Prototype Chain in enclave-vm

    Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.7.0, there is a critical sandbox escape vulnerability in enclave-vm that allows untrusted, sandboxed JavaScript code to execute arbitrary code in the host Node.js run…

    agentfront enclave enclave-vm npm
  • Critical 9.4
    CVE-2025-64155 Public exploit EPSS 44%

    An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…

    Fortinet FortiSIEM Network devices
  • Critical 9.0
    CVE-2025-12548 Public exploit

    Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333

    A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC /…

    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24 Red Hat OpenShift Dev Spaces (RHOSDS) 3.23 Red Hat OpenShift Dev Spaces (RHOSDS) 3.22