Archive

26 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /26 February 2026 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 7.8

CVE-2026-21509 Exploited Public exploit EPSS 71%

Microsoft Office Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024

Jan 26, 2026
KEV Jan 26, 2026
Critical 9.9

CVE-2016-15057 Public exploit

Apache Continuum: Command injection leading to RCE

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can u…

Apache Software Foundation Apache Continuum org.apache.continuum:continuum Maven

Jan 26, 2026
Medium 5.4

CVE-2025-70368 Public exploit

Worklenz version 2.1.5 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Project Updates feature. An at…

Jan 26, 2026