January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-1281+1 related CVE | Unauthenticated RCE in Ivanti Endpoint Manager Mobile (EPMM) | 9.8 | 99% | KEVPoC | KEV |
| CVE-2026-21509 | Local Security Feature Bypass in Microsoft Office Under Active Exploitation | 7.8 | 71% | KEV | KEV |
| CVE-2026-23760 | Unauthenticated Admin Password Reset Bypass in SmarterTools SmarterMail | 9.3 | 96% | KEVRansomwarePoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 185.102.115.27 | wn IoCs associated with CVE-2026-23800: 62[.]60[.]131[.]161 185[.]102[.]115[.]27 backup[@]wordpress[.]com backup1[@]wordpress[.]com Wh |
| ipv4 | 185.196.0.11 | nown IoCs associated with CVE-2026-23550: 45[.]11[.]89[.]19 185[.]196[.]0[.]11 64[.]188[.]91[.]37 Known IoCs associated with CVE-202 |
| ipv4 | 213.155.157.123 | \Outlook\LoadMacroProviderOnBoot Monitor for connections to 213[.]155[.]157[.]123:443 and remote connectivity to Microsoft Office CDN e |
| ipv4 | 45.11.89.19 | origin=mo&type=x Known IoCs associated with CVE-2026-23550: 45[.]11[.]89[.]19 185[.]196[.]0[.]11 64[.]188[.]91[.]37 Known IoCs asso |
| ipv4 | 62.60.131.161 | [.]188[.]91[.]37 Known IoCs associated with CVE-2026-23800: 62[.]60[.]131[.]161 185[.]102[.]115[.]27 backup[@]wordpress[.]com backup1 |
| ipv4 | 64.188.91.37 | d with CVE-2026-23550: 45[.]11[.]89[.]19 185[.]196[.]0[.]11 64[.]188[.]91[.]37 Known IoCs associated with CVE-2026-23800: 62[.]60[.] |
From the original article
7 min read at recordedfuture.com
January 2026 saw a modest 5% increase in high-impact vulnerabilities, with Recorded Future's Insikt Group® identifying 23 vulnerabilities requiring immediate remediation, up from 22 in December 2025. Noteworthy trends last month included Russian state-sponsored exploitation of a Microsoft Office zero-day and critical authentication bypass flaws affecting enterprise infrastructure.
By Insikt Group® · recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.