Statistiche CVE: gennaio 2026

🌐 Scopri le cifre chiave delle vulnerabilità pubblicate a gennaio 2026 su CVE Find.

🔎 Panoramica

• Numero totale di CVE pubblicate : 5,143 (-8.9% rispetto al mese precedente)
• Vulnerabilità aggiunte al catalogo CISA KEV : 17

📂 Distribuzione per categorie principali

• Cross-site Scripting : 616
• Authorization problems : 547
• Overflow : 325
• SQL Injection : 240
• Memory Corruption : 203
• Directory Traversal : 121

📈 Distribuzione per punteggio CVSS

• Low : 119
• Medium : 1971
• High : 1650
• Critical : 492

🏢 Fornitori più colpiti

1. microsoft : 192
2. linux : 181
3. oracle : 64
4. color : 59
5. tenda : 45

📦 Prodotti più colpiti

1. linux linux_kernel : 181
2. microsoft windows_11_25h2 : 83
3. microsoft windows_server_2025 : 83
4. microsoft windows_11_24h2 : 83
5. microsoft windows_11_23h2 : 77

⚠️ CVE rilevanti del mese

• CVE-2026-1699 (10 CRITICAL) : In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while checking out and executing untrusted pu...
• CVE-2026-24729 (10 CRITICAL) : An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execut...
• CVE-2026-24897 (10 CRITICAL) : Erugo is a self-hosted file-sharing platform. In versions up to and including 0.2.14, an authenticated low-privileged user can upload arbitrary files to any specified location d...
• CVE-2025-57792 (10 CRITICAL) : Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint. An attacker can sup...
• CVE-2026-23830 (10 CRITICAL) : SandboxJS is a JavaScript sandboxing library. Versions prior to 0.8.26 have a sandbox escape vulnerability due to `AsyncFunction` not being isolated in `SandboxFunction`. The li...

Esplora tutti i dati in dettaglio su CVE Find.