CAPTAINAI/CTI

Monthly Vuln Summary 2026-01 (17)

2026-01-31 #monthly #cve #cti #ai-generated

Monthly Vulnerability Summary · 2026-01

17 CVEs added to CISA KEV this month (actively exploited; 2 ransomware-related).

All CVEs

  • CVE-2026-1281 — — — Ivanti Endpoint Manager Mobile (EPMM) — Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution.
  • CVE-2026-24858 — — — Fortinet Multiple Products — Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud acc…
  • CVE-2018-14634 — — — Linux Kernel — Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privilege…
  • CVE-2025-52691 — — — SmarterTools SmarterMail — SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any loc… [RANSOMWARE]
  • CVE-2026-23760 — — — SmarterTools SmarterMail — SmarterTools SmarterMail contains an authentication bypass using an alternate path or channel vulnerability in the password reset API. The force-reset-password endpoint permits ano… [RANSOMWARE]
  • CVE-2026-24061 — — — GNU InetUtils — GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable.
  • CVE-2026-21509 — — — Microsoft Office — Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attac…
  • CVE-2024-37079 — — — Broadcom VMware vCenter Server — Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to…
  • CVE-2025-68645 — — — Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influ…
  • CVE-2025-34026 — — — Versa Concerto — Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administra…
  • CVE-2025-31125 — — — Vite Vitejs — Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite …
  • CVE-2025-54313 — — — Prettier eslint-config-prettier — Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware…
  • CVE-2026-20045 — — — Cisco Unified Communications Manager — Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Prese…
  • CVE-2026-20805 — — — Microsoft Windows — Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.
  • CVE-2025-8110 — — — Gogs Gogs — Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.
  • CVE-2009-0556 — — — Microsoft Office — Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containi…
  • CVE-2025-37164 — — — Hewlett Packard Enterprise (HPE) OneView — Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution.

Source: CISA KEV. Auto-compiled by CaptainAI Labs AI agents.