Description of the security update for Office 2016: January 26, 2026 (KB5002713)

None None...

CVE-2025-59105

creationtimestamp| type| source ---|---|--- 2026-01-26 11:20:08+00:00| seen| Telegram/A8CETiYU1iGZxSgsnj4xlbjJYRp-S0TgVnpcyD1NiuwlhnI...

Oracle HTTP Server (January 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: Weblogic Server Proxy...

GHSA-4XC4-762W-M6CG

creationtimestamp| type| source ---|---|--- 2026-01-24 21:26:00+00:00| seen| https://gist.github.com/alon710/af7f1621d94bc4520e512228571073ac 2026-01-24 21:26:09+00:00| seen| https://gist.github.com/alon710/d0d64a6b47dd3930f853faaddb139d32 2026-01-24 22:41:32+00:00| seen|...

GHSA-2GQC-6J2Q-83QP

creationtimestamp| type| source ---|---|--- 2026-01-24 21:24:37+00:00| seen| https://gist.github.com/alon710/c5951996d1cad3ddfdf0314481d66b05 2026-01-24 22:32:37+00:00| seen| https://gist.github.com/alon710/122a4775211986e69d62ce1028832f7e 2026-01-24 22:32:40+00:00| seen|...

GHSA-5QW5-WF2Q-F538

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:55+00:00| seen| https://gist.github.com/alon710/6406010f2fb61f504b578e59fec018fa 2026-01-24 22:28:06+00:00| seen| https://gist.github.com/alon710/d0c1178fbf8fa30b7662bbfd575162bb 2026-01-24 22:28:08+00:00| seen|...

January Linux Patch Wednesday

JanuaryLinux Patch Wednesday. In January, Linux vendors started fixing 918 vulnerabilities, one and a half times more than in December. Of these, 616 are in the Linux Kernel. Three show signs of exploitation in the wild: 🔻 AuthBypass - GNU Inetutils telnetd CVE-2026-24061 🔻 RCE - Safari...

About Information Disclosure – Desktop Window Manager (CVE-2026-20805) vulnerability

About Information Disclosure - Desktop Window Manager CVE-2026-20805 vulnerability. Desktop Window Manager is a compositing window manager that has been part of Windows since Windows Vista. Exploitation of the vulnerability, which was addressed in the January Microsoft Patch Tuesday, allows a loc...

CVE-2026-24403

creationtimestamp| type| source ---|---|--- 2026-01-24 04:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5disa7ef2c...

CVE-2026-22583

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement CloudPagesUrl module allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026...

CVE-2026-22582

CVE-2026-22582 concerns Salesforce Marketing Cloud Engagement, specifically the MicrositeUrl module. The issue is described as Improper Neutralization of Argument Delimiters in a Command (Argument Injection) that enables Web Services Protocol Manipulation. Public sources indicate the affected sco...

CVE-2026-22586

The CVE-2026-22586 entry concerns Salesforce Marketing Cloud Engagement, specifically modules such as CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, and View As Webpage. The root cause is a hard-coded cryptographic key that enables Web Services Protocol Manipu...

CVE-2026-22585

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

CVE-2026-22585

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

CVE-2025-66719

creationtimestamp| type| source ---|---|--- 2026-01-23 21:15:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4mnhoodc23 2026-01-23 23:52:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4vgh5bjv23 2026-07-07 20:50:06+00:00| seen|...

GO-2026-4310 Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to emails in github.com/axllent/mailpit

Mailpit is vulnerable to Cross-Site WebSocket Hijacking CSWSH allowing unauthenticated access to emails in github.com/axllent/mailpit. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

Oracle Business Intelligence Enterprise Edition (OAS 7.6) (January 2026 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 7.6.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product o...

Oracle VM VirtualBox (CVE-2026-21986) (January 2026 CPU)

The 7.1.14 and 7.2.4 versions of VM VirtualBox installed on the remote host are affected by a vulnerability as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14...

Oracle Business Intelligence Enterprise Edition (OAS 8.2) (January 2026 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 8.2.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product o...

Oracle HTTP Server and Weblogic Proxy Plug-in vulnerability

Added: 01/23/2026 Background Oracle HTTP Server is the web server component for Oracle Fusion Middleware. Problem A vulnerability in Oracle HTTP Server and Weblogic Proxy Plug-in could allow a remote attacker to execute arbitrary commands by requesting a specially crafted path which allows...