CVE-2026 records published in January 2026

This page lists the 1,830 CVE-2026 records published in January 2026, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 12 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2026 list filters these records by severity or signal.

Critical

25413.9% of these records

Listed in CISA KEV

120.7% of these records

Reported exploited

40.2% of these records

Detection signal

392.1% of these records

Exploit code

864.7% of these records

Actionable vendor fix

1,28570.2% of these records

Figures as of 2026-10-24 13:48 UTC. Records published in January 2026 have had from about nine months to about 10 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.