cvegen

january 2026

cves
4,302
against an average 2025 month
1.1×
busiest day
jan 13, 444
used in real attacks
16

january 2026 brought 4,302 cves, close to an average 2025 month.

12 of its 31 days ran above the 2025 average for that weekday.

444

on jan 13, the busiest day.

456

rated critical, cvss 9 or higher. 373 of them can be hit over the network with no login and nothing for a user to click.

1,258

in open-source packages, 2.8 times their 2025 monthly average. no other kind of software grew as fast.

404

came in two single drops: patchstack 309 on jan 22, patchstack 95 on jan 23.

16 already used in real attacks

cisa kev, as of oct 24

  • 2
    fortinet products
    jan 13, 27
  • 2
    smartertools smartermail
    jan 22, 23
  • 2
    solarwinds web help desk
    jan 28
  • 2
    ivanti endpoint manager mobile
    jan 29
  • 1
    synacor zimbra collaboration suite
    jan 5
  • 1
    microsoft sharepoint
    jan 13
  • 1
    microsoft windows
    jan 13
  • 1
    oracle http server and oracle weblogic server proxy plug-in
    jan 20
  • 1
    cisco unified communications manager
    jan 21
  • 1
    gnu inetutils
    jan 21
and 2 more productsall 16 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
january 1 to 31, 2026
cves
4,302
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667