// day
Jan 26, 2026
2 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Jan 26, 2026
Microsoft Office: Microsoft Office Security Feature Bypass Vulnerability
› Microsoft Office
Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attacker to bypass a security feature locally. Some of the impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. Added to CISA KEV on 2026-01-26.
CVE-2026-21509 - highclosedpatchedclosed Jan 26, 2026
SmarterTools SmarterMail: SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
› SmarterTools SmarterMail
SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution. CISA added CVE-2025-52691, CVE-2026-23760 to the Known Exploited Vulnerabilities catalog on 2026-01-26 based on evidence of active exploitation.
CVE-2025-52691CVE-2026-23760
