Exploited Vulnerabilities DailyVulnerabilities added to KEV in January 2026
Added17
Ransomware-linked2
Vendors14
By vendor
3
2
1
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-29 | 98.6% | Unknown |
| CVE-2026-24858 | Fortinet Multiple Products | 2026-01-27 | 85.7% | Unknown |
| CVE-2026-24061 | GNU InetUtils | 2026-01-26 | 98.9% | Unknown |
| CVE-2026-23760 | SmarterTools SmarterMail | 2026-01-26 | 96.5% | Known |
| CVE-2026-21509 | Microsoft Office | 2026-01-26 | 70.7% | Unknown |
| CVE-2025-52691 | SmarterTools SmarterMail | 2026-01-26 | 85.6% | Known |
| CVE-2018-14634 | Linux Kernel | 2026-01-26 | 14.6% | Unknown |
| CVE-2024-37079 | Broadcom VMware vCenter Server | 2026-01-23 | 22.3% | Unknown |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-01-22 | 48.8% | Unknown |
| CVE-2025-54313 | Prettier eslint-config-prettier | 2026-01-22 | 4.5% | Unknown |
| CVE-2025-34026 | Versa Concerto | 2026-01-22 | 81.9% | Unknown |
| CVE-2025-31125 | Vite Vitejs | 2026-01-22 | 65.1% | Unknown |
| CVE-2026-20045 | Cisco Unified Communications Manager | 2026-01-21 | 4.5% | Unknown |
| CVE-2026-20805 | Microsoft Windows | 2026-01-13 | 7.2% | Unknown |
| CVE-2025-8110 | Gogs Gogs | 2026-01-12 | 85.2% | Unknown |
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | 2026-01-07 | 90.1% | Unknown |
| CVE-2009-0556 | Microsoft Office | 2026-01-07 | 67.3% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.