January 2026 - Page 36 of 75 -

CVE-2025-67822: Critical Authentication Bypass in Mitel MX-ONE Enables Unauthorized Administrative Control

Vulnerabilities

AegironJanuary 17, 2026January 17, 20269 mins0

Executive Summary CVE ID: CVE-2025-67822Product: MiVoice MX-ONE (Provisioning Manager component)Vendor: MitelSeverity: CriticalCVSS v3.1 Score: 9.4Attack Vector: NetworkAuthentication…

CVE-2026-23520: Critical Command Injection Flaw in Arcane Docker Manager Enables Remote Code Execution

Vulnerabilities

AegironJanuary 17, 2026January 17, 202611 mins0

At-a-glance summary What this vulnerability is Arcane Docker Manager includes an automated updater feature that can run…

CVE-2026-23744: One HTTP Request, Total Host Takeover — Critical MCPJam Inspector Remote Code Execution

Vulnerabilities

AegironJanuary 17, 2026January 17, 202614 mins0

CVE: CVE-2026-23744CVSS v3.1 Base Score: 9.8 (Critical) — Network exploitable, low complexity, no privileges required.Severity: CriticalExploitability: Very…

CVE-2026-23523: One Click to Command Execution — Critical Deeplink RCE in Dive MCP Desktop App

Vulnerabilities

AegironJanuary 17, 2026January 17, 20269 mins0

CVE ID: CVE-2026-23523Product: Dive – MCP Host Desktop ApplicationAffected versions: All versions prior to 0.13.0Fixed version: 0.13.0…

Unauthenticated Admin Access Discovered: CVE-2026-23800 Actively Threatens Modular DS WordPress Sites

Vulnerabilities

AegironJanuary 17, 2026January 17, 20268 mins0

Executive Summary CVE ID: CVE-2026-23800Product: Modular DS – modular-connector (WordPress plugin component)Vulnerability Type: Incorrect Privilege Assignment /…

EasyDiscuss Joomla Component Exposed: Stored XSS Vulnerabilities Allow Malicious Script Execution Across User Sessions

Vulnerabilities

AegironJanuary 17, 2026January 17, 20268 mins0

Product: EasyDiscuss (Joomla discussion/forum component)Vendor: StackIdeasAffected Area: User profile avatar text handling and forum post renderingImpact: Stored…

Critical Windows Security Vulnerabilities: LSASS Remote Code Execution and VBS Enclave Privilege Escalation (CVE-2026-20854 & CVE-2026-20876)

CyberSecurity News

CyberDefenderJanuary 17, 2026January 17, 20269 mins0

CVE-2026-20854 affects the Windows Local Security Authority Subsystem Service (LSASS), a critical process responsible for handling user…

Critical Windows Kernel Privilege Escalation via Graphics Component Use-After-Free (CVE-2026-20822)

CyberSecurity News

CyberDefenderJanuary 17, 2026January 17, 20267 mins0

Product Name: Microsoft WindowsAffected Component: Windows Graphics Component (Microsoft Graphics Kernel Subsystem)Vulnerability Type: Elevation of Privilege (Use-After-Free)Attack…

Critical Microsoft Office Remote Code Execution Vulnerabilities in Word and Excel (CVE-2026-20944, CVE-2026-20955, CVE-2026-20957)

CyberSecurity News

CyberDefenderJanuary 17, 2026January 17, 20268 mins0

CVE-2026-20944, CVE-2026-20955, and CVE-2026-20957 are critical remote code execution vulnerabilities affecting Microsoft Word and Microsoft Excel, posing…

CVE-2026-20952 and CVE-2026-20953 Two Critical Remote Code Execution Vulnerabilities in Microsoft Office

CyberSecurity News

CyberDefenderJanuary 17, 2026January 17, 202615 mins0

CVE-2026-20952 and CVE-2026-20953 are critical remote code execution (RCE) vulnerabilities affecting Office. Both vulnerabilities carry a CVSS…