CVEs published January 18, 2026
77,396 CVEs in 2026
Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system.
The software has a path traversal vulnerability due to an incomplete fix. `path.Clean` normalizes a path but does not prevent absolute paths in a malicious tar file.
A weakness has been identified in D-Link DIR-823X 250416.
A security flaw has been discovered in Yonyou KSOA 9.0.
A vulnerability was identified in Yonyou KSOA 9.0.
A vulnerability was determined in Yonyou KSOA 9.0.
A vulnerability was found in Yonyou KSOA 9.0.
A vulnerability has been found in Yonyou KSOA 9.0.
A flaw has been found in itsourcecode Society Management System 1.0.
A vulnerability was identified in EasyCMS up to 1.6.
Kimai's export functionality uses a Twig sandbox with an overly permissive security policy (`DefaultPolicy`) that allows arbitrary method calls on objects available in the template context.
A stored Cross-Site Scripting (XSS) vulnerability in the Mermaid artifact renderer allows attackers to execute arbitrary JavaScript within the application context.
A stored Cross-Site Scripting (XSS) vulnerability exists in the 1Panel App Store when viewing application details.
A security vulnerability has been detected in lwj flow up to a3d2fe8133db9d3b50fda4f66f68634640344641.
A vulnerability was detected in itsourcecode Society Management System 1.0.
A weakness has been identified in EyouCMS up to 1.7.1/5.0.
A vulnerability was found in Sanluan PublicCMS up to 5.202506.d.
A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1.
A flaw has been found in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04.
A vulnerability was detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04.
A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04.
A vulnerability has been found in Sanluan PublicCMS up to 5.202506.d.