Skip to content
OpenAdvisories

Archive

28 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /28 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.4
    CVE-2026-1532

    D-Link DCS-700L Music File Upload Service setUploadMusic uploadmusic path traversal

    A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attac…

    D-Link DCS-700L Network devices
  • Low 2.9
    CVE-2026-23553

    x86: incomplete IBPB for vCPU isolation

    In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Conside…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • Low 2.1
    CVE-2026-1237

    Juju has broken CMR authorization

    Vulnerable cross-model authorization in juju. If a charm's cross-model permissions are revoked or expire, a malicious user who is able to update database records can mint an invalid macaroon that is incorrectly validated by the juju controller, enabling a cha…

    Canonical Juju github.com/juju/juju Go
  • Low 2.4
    CVE-2026-1520

    rethinkdb Secondary Index cross site scripting

    A vulnerability was identified in rethinkdb up to 2.4.3. Affected by this issue is some unknown functionality of the component Secondary Index Handler. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit …