Skip to content
OpenAdvisories

Archive

23 January 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-24423 Exploited · Ransomware Public exploit Scanner template EPSS 88%

    SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API

    SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. …

    KEV Feb 5, 2026
  • Critical 9.8
    CVE-2026-0770 Exploited Public exploit Scanner template EPSS 63%

    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to e…

    KEV Jul 21, 2026