Oracle Essbase Information Disclosure Vulnerability (January 2026 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the January 2026 Critical Patch Update CPU. It is, therefore, affected by: - yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor...

Oracle VM VirtualBox (CVE-2026-21986) (January 2026 CPU)

The 7.1.14 and 7.2.4 versions of VM VirtualBox installed on the remote host are affected by a vulnerability as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14...

WT-2026-0001

SmarterMail WT-2026-0001 Authentication Bypass Exploit 📌 O...

Fake LastPass maintenance emails target users

The LastPass Threat Intelligence, Mitigation, and Escalation TIME team has published a warning about an active phishing campaign in which fake “maintenance” emails pressure users to back up their vaults within 24 hours. The emails lead to credential-stealing phishing sites rather than any...

Vulnerabilities fixed in Atlassian products

Atlassian has fixed vulnerabilities in several products, which use Oracle middle-ware products such as the Oracle Utilities Application Framework, WebLogic Server, Data Integrator and Business Intelligence Enterprise Edition. These vulnerabilities allow unauthenticated attackers to perform a deni...

Oracle WebCenter Sites (January 2026 CPU)

The 12.2.1.4.0 and 14.1.2.0.0 versions of WebCenter Sites installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Core Apache Log4j. The...

Oracle Primavera P6 Enterprise Project Portfolio Management (January 2026 CPU)

The versions of Primavera P6 Enterprise Project Portfolio Management installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and...

Oracle GoldenGate Information Exposure Vulnerability (January 2026 CPU)

The detected versions of GoldenGate installed on the remote host are affected by a information exposure vulnerability as referenced in the January 2026 CPU advisory. - Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A...

Oracle Java SE Multiple Vulnerabilities (January 2026 CPU)

The version of Java installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in Oracle Java SE component: JavaFX libxslt. Supported versions that are affected are Oracle Java SE: 8u471-b50. Difficult to exploit...

Oracle Solaris Critical Patch Update : jan2026_SRU11_4_88_207_01

The version of Solaris installed on the remote host is prior to 11.4.88.207.01. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11jan2026SRU1148820701 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Oracle Solaris Critical Patch Update : jan2026_SRU11_4_87_207_02

The version of Solaris installed on the remote host is prior to 11.4.87.207.02. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11jan2026SRU1148720702 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's...

CVE-2026-21982

creationtimestamp| type| source ---|---|--- 2026-01-20 22:38:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcv7utxhj42a 2026-01-20 23:53:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcve3qjlb72n 2026-01-21 07:51:09+00:00| seen|...

CVE-2025-58933

creationtimestamp| type| source ---|---|--- 2026-01-20 20:22:44+00:00| seen| Telegram/-VmPYmlVI5BwcmAhzgJR3LskqmV2AuhNYszG9vvtS-WTfw0...

Security Bulletin: NVIDIA CUDA Toolkit - January 2026

NVIDIA has released a software update for NVIDIA® CUDA® Toolkit. To protect your system, download and install the latest release from the CUDA Toolkit Downloads page. Go to NVIDIA Product Security...

Oracle Critical Patch Update Advisory - January 2026

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...

CVE-2026-1139

creationtimestamp| type| source ---|---|--- 2026-01-19 06:03:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcqxtl5vjg2i 2026-01-19 07:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcr3ixplwd27...

January 17, 2026—KB5077793 (OS Build 26100.32234) Out-of-band

January 17, 2026—KB5077793 OS Build 26100.32234 Out-of-band ​​​​This out-of-band update for Windows Server 2025 KB5077793 is cumulative. It includes updates from previous security releases, along with an additional fix. To learn more about differences between security updates, optional non-securi...

January 17, 2026—KB5077795 (OS Build 17763.8280) Out-of-band

January 17, 2026—KB5077795 OS Build 17763.8280 Out-of-band Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business device...

CVE-2026-23723

creationtimestamp| type| source ---|---|--- 2026-01-16 23:38:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclbfc2cox2y...

CVE-2025-69581

creationtimestamp| type| source ---|---|--- 2026-01-16 23:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcl7ejtlbs2b 2026-01-16 23:52:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclc6zk6gh2k...