Archive

13 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /13 February 2026 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 5.5

CVE-2026-20833 Public exploit

Windows Kerberos Information Disclosure Vulnerability

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Jan 13, 2026
Medium 5.5

CVE-2026-20805 Exploited Public exploit

Desktop Window Manager Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 13, 2026
KEV Jan 13, 2026
Medium 5.5

CVE-2025-9435 Public exploit

Path Traversal

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module

Zohocorp ManageEngine ADManager Plus

Jan 13, 2026
Medium 5.4

CVE-2025-14001 Public exploit

WP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication

The WP Duplicate Page plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'duplicateBulkHandle' and 'duplicateBulkHandleHPOS' functions in all versions up to, and including, 1.8. This makes it possib…

Ninja Team WP Duplicate Page Web / CMS

Jan 13, 2026
Medium 6.5

CVE-2025-55462 Public exploit

A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header…

Jan 13, 2026