Thursday, January 22, 2026 Archive

Archived Security Snapshot

Critical vulnerabilities, curated daily for security professionals

🎯 SSCV Profile

See how vulnerabilities affect your specific environment

CRS uses the System Security Context Vector (SSCV) Framework v1.0 to adjust CVSS scores based on your system's exposure level, network position, and business criticality. Learn more about SSCV Framework

Risk scores will be adjusted based on your selected environment

Archived Security Brief

Yesterday's vulnerability disclosures included 14 critical-severity CVEs, a 17% increase from the prior day's 12 critical issues. High-priority vulnerabilities rose significantly to 100, representing a 45% increase from 69 the previous day. Five actively exploited vulnerabilities were added to the KEV catalog, including CVE-2026-20805 affecting Microsoft Windows, CVE-2025-37164 in HPE OneView, and CVE-2025-8110 targeting Gogs. Critical vulnerabilities of note include CVE-2026-23524 (CVSS 9.8) in Laravel Reverb, CVE-2026-24061 (CVSS 9.8) in GNU Inetutils telnetd, and CVE-2021-47748 (CVSS 9.8) in Hasura GraphQL. Patch availability currently stands at 0%, requiring organizations to prioritize compensating controls and monitoring.

  • 14 critical CVEs disclosed, up 17% from prior day
  • 100 high-priority vulnerabilities, a 45% increase
  • 5 actively exploited: Microsoft Windows, HPE OneView, Gogs, Microsoft Office
  • 0% patch availability for newly disclosed vulnerabilities
  • Affected products include Laravel Reverb, GNU Inetutils, Hasura GraphQL, Academy LMS

Immediate action: Organizations using Microsoft Windows, HPE OneView, Gogs, and Microsoft Office should implement compensating controls immediately given confirmed active exploitation. With no patches currently available for yesterday's disclosures, focus on network segmentation, enhanced monitoring, and vendor advisory tracking for affected critical systems.

💡 Tip: Swipe CVE cards left to ⭐ star, right to ❌ remove

Section Navigation