Skip to content
OpenAdvisories

Archive

18 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /18 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-23829 Public exploit Scanner template

    Mailpit has SMTP Header Injection via Regex Bypass

    Mailpit is an email testing tool and API for developers. Prior to version 1.28.3, Mailpit's SMTP server is vulnerable to Header Injection due to an insufficient Regular Expression used to validate `RCPT TO` and `MAIL FROM` addresses. An attacker can inject ar…

    axllent mailpit github.com/axllent/mailpit Go
  • High 7.3
    CVE-2026-1122 Public exploit

    Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection

    A vulnerability was determined in Yonyou KSOA 9.0. This impacts an unknown function of the file /worksheet/work_info.jsp of the component HTTP GET Parameter Handler. This manipulation of the argument ID causes sql injection. The attack may be initiated remote…

    Yonyou KSOA
  • Medium 4.7
    CVE-2026-1111 Public exploit

    Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal

    A vulnerability has been found in Sanluan PublicCMS up to 5.202506.d. This impacts the function Save of the file com/publiccms/controller/admin/sys/TaskTemplateAdminController.java of the component Task Template Management Handler. Such manipulation of the ar…

    Sanluan PublicCMS