Sunday, January 18, 2026 Archive

Archived Security Snapshot

Critical vulnerabilities, curated daily for security professionals

đŸŽ¯ SSCV Profile

See how vulnerabilities affect your specific environment

CRS uses the System Security Context Vector (SSCV) Framework v1.0 to adjust CVSS scores based on your system's exposure level, network position, and business criticality. Learn more about SSCV Framework

Risk scores will be adjusted based on your selected environment

Archived Security Brief

Yesterday's disclosures revealed only 2 critical vulnerabilities, a 91% decrease from the prior day's 22 critical issues. High-priority CVEs dropped 47% to 53, indicating lighter weekend disclosure volume. Five actively exploited vulnerabilities require attention, including CVE-2025-14847 affecting MongoDB, CVE-2026-20805 targeting Microsoft Windows, and CVE-2025-37164 impacting HPE OneView. The critical issues CVE-2025-10484 and CVE-2025-15403 both affect the RegistrationMagic WordPress plugin with privilege escalation flaws. Patch availability stands at 0%, requiring organizations to implement compensating controls until vendor fixes become available.

  • 2 critical CVEs disclosed, down 91% from 22 the prior day
  • 53 high-priority CVEs, a 47% decrease from 100 previously
  • 5 actively exploited vulnerabilities affecting MongoDB, Microsoft Windows, HPE OneView, Microsoft Office, and Gogs
  • 0% patch availability requires alternative mitigations
  • WordPress RegistrationMagic plugin contains two critical privilege escalation flaws

Immediate action: Organizations running MongoDB, Microsoft Windows, HPE OneView, Microsoft Office, or Gogs should review exposure to the five actively exploited vulnerabilities. With no patches currently available for yesterday's disclosures, implement network segmentation and access controls as interim mitigations.

💡 Tip: Swipe CVE cards left to ⭐ star, right to ❌ remove

Section Navigation