January 2026

5 results · Clear filters · Feed

• High 8.1
  CVE-2025-40536 Exploited Public exploit Scanner template EPSS 74%

  SolarWinds Web Help Desk Security Control Bypass Vulnerability

  SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.

  SolarWinds Web Help Desk
  Jan 28, 2026

  KEV Feb 12, 2026
• High 7.8
  CVE-2026-21509 Exploited Public exploit EPSS 71%

  Microsoft Office Security Feature Bypass Vulnerability

  Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Jan 26, 2026

  KEV Jan 26, 2026
• High 8.2
  CVE-2026-20045 Exploited Public exploit

  Cisco Unified Communications Products Remote Code Execution Vulnerability

  A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connectio…

  Cisco Cisco Unified Communications Manager Cisco Unity Connection Cisco Unified Communications Manager IM and Presence Service Network devices
  Jan 21, 2026

  KEV Jan 21, 2026
• High 7.4
  CVE-2025-25249 Exploited

  A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiO…

  Fortinet FortiOS FortiSwitchManager Network devices
  Jan 13, 2026

  KEV Sep 9, 2026
• High 7.2
  CVE-2025-66376 Exploited EPSS 20%

  Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style S…

  Zimbra Collaboration
  Jan 5, 2026

  KEV Mar 18, 2026