Security Digest archive
January 2026
6 editorial briefs, 17 known exploited (cisa kev) additions and 50 critical advisories across 21 digest days.
Saturday, January 31, 2026
- Patch this week OpenClaw CVE-2026-25253: One-Click RCE via Token Leak
Friday, January 30, 2026
- Critical 2 advisories: cai-framework, @orval/core
Thursday, January 29, 2026
- Act now Ivanti EPMM Zero-Day RCE: CVE-2026-1281 and CVE-2026-1340
- KEV CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM)
- Critical 3 advisories: dfir-unfurl, github.com/siyuan-note/siyuan/kernel, deephas
Wednesday, January 28, 2026
- Critical 2 advisories: DotNetNuke.Core, capnp
Tuesday, January 27, 2026
- Act now FortiCloud SSO Cross-Account Login: CVE-2026-24858
- KEV CVE-2026-24858 Fortinet Multiple Products
- Critical 3 advisories: @nyariv/sandboxjs, github.com/kyverno/kyverno, n8n
Monday, January 26, 2026
- KEV CVE-2026-24061 GNU InetUtils
- KEV CVE-2026-23760 SmarterTools SmarterMail
- KEV CVE-2026-21509 Microsoft Office
- KEV CVE-2025-52691 SmarterTools SmarterMail
- KEV CVE-2018-14634 Linux Kernel
- Critical 4 advisories: @saltcorn/server, vm2, dcap-qvl, org.apache.continuum:continuum
Friday, January 23, 2026
- KEV CVE-2024-37079 Broadcom VMware vCenter Server
- Critical 1 advisory: github.com/free5gc/nrf
Thursday, January 22, 2026
- KEV CVE-2025-68645 Synacor Zimbra Collaboration Suite (ZCS)
- KEV CVE-2025-54313 Prettier eslint-config-prettier
- KEV CVE-2025-34026 Versa Concerto
- KEV CVE-2025-31125 Vite Vitejs
Wednesday, January 21, 2026
- KEV CVE-2026-20045 Cisco Unified Communications Manager
- Critical 2 advisories: sm-crypto, laravel/reverb
Tuesday, January 20, 2026
Friday, January 16, 2026
- Critical 4 advisories: crawl4ai, Crawl4AI, deno, @mcpjam/inspector
Thursday, January 15, 2026
- Critical 1 advisory: github.com/getarcaneapp/arcane/backend
Wednesday, January 14, 2026
- Critical 1 advisory: enclave-vm
Tuesday, January 13, 2026
- Act now FortiOS CVE-2025-25249 and CVE-2025-61624 Now Exploited
- KEV CVE-2026-20805 Microsoft Windows
- Critical 4 advisories: openc3, UmbracoForms, @orval/mcp, opencode-ai
Monday, January 12, 2026
- KEV CVE-2025-8110 Gogs Gogs
Friday, January 9, 2026
- Critical 4 advisories: com.alibaba:fastjson, uni2ts, github.com/Tencent/WeKnora, org.xwiki.contrib:macro-fullcalendar-pom
Thursday, January 8, 2026
- Critical 1 advisory: @react-router/node
Wednesday, January 7, 2026
- Act now Ni8mare: n8n Unauthenticated Takeover, Plus a KEV RCE
- KEV CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView
- KEV CVE-2009-0556 Microsoft Office
- Critical 5 advisories: wolfssl, n8n, github.com/openflagr/flagr, io.undertow:undertow-core, terminal-controller
Tuesday, January 6, 2026
- Critical 2 advisories: n8n, github.com/kyverno/kyverno
Monday, January 5, 2026
- Critical 2 advisories: jspdf, github.com/harvester/harvester-installer
Friday, January 2, 2026
- Critical 3 advisories: signalk-server, @adonisjs/bodyparser, signalk-server