Skip to content
OpenAdvisories

Archive

21 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /21 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-23524 Public exploit

    Laravel Redis Horizontal Scaling Insecure Deserialization

    Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can be instantiat…

    laravel reverb laravel/reverb Packagist
  • Critical 9.8
    CVE-2026-24061 Exploited Public exploit EPSS 99%

    telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment…

    GNU Inetutils inetutils inetutils Debian Ubuntu Alpine
    KEV Jan 26, 2026
  • Critical 9.8
    CVE-2025-15521 Public exploit

    Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover

    The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.5.0. This is due to the plugin not properly validating a user's iden…

    kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution Web / CMS