Security Digest: January 13, 2026 - 8 Critical Vulnerabilities

Today, we highlight eight critical vulnerabilities affecting a range of software, from web forms to cloud environments, with the potential for remote code execution, privilege escalation, and denial of service.

· 6 min read

Security Digest: January 13, 2026 - 8 Critical Vulnerabilities

Executive Summary

Today, we highlight eight critical vulnerabilities affecting a range of software, from web forms to cloud environments, with the potential for remote code execution, privilege escalation, and denial of service. Immediate action is essential to protect your systems from these threats.

Critical Vulnerabilities

  • CVE-2025-68924: Remote Code Execution in Umbraco Forms
    • Impact: Exploitation can lead to remote code execution via malicious URLs.
    • Affected Systems: All Umbraco Forms on .NET Framework up to version 8.
    • Immediate Action: Upgrade to supported versions (v13, v16, or v17) or disable the Webservice data source.
    • Mitigation: Restrict data source management to administrators only.
  • CVE-2026-22771: Lua Script Execution in Envoy Gateway
    • Impact: Potential for leaking proxy credentials and arbitrary code execution.
    • Affected Systems: Envoy Gateway setups using Lua scripts.
    • Immediate Action: Apply patches to enforce Lua strict validation and consider disabling Lua scripts.
    • Mitigation: Use RBAC to restrict EnvoyExtensionPolicy creation.
  • CVE-2026-22812: Unauthenticated Command Execution in OpenCode
    • Impact: Allows local processes or websites to execute shell commands.
    • Affected Systems: Systems running npm opencode-ai.
    • Immediate Action: Stop running OpenCode or restrict network access to the server.
    • Mitigation: Remove permissive CORS settings.
  • CVE-2026-22818: JWT Algorithm Confusion in Hono
    • Impact: Attackers can forge JWTs, leading to unauthorized access.
    • Affected Systems: npm hono with JWK/JWKS JWT verification middleware.
    • Immediate Action: Update to the latest version and specify allowed algorithms explicitly.
    • Mitigation: Ensure JWT middleware configurations specify asymmetric algorithms.
  • CVE-2026-22817: JWT Header Algorithm Influence in Hono
    • Impact: Similar to CVE-2026-22818, allows forging JWTs.
    • Affected Systems: npm hono users with JWT middleware.
    • Immediate Action: Update configurations to enforce specific algorithms.
    • Mitigation: Restrict JWT algorithms explicitly.
  • CVE-2026-21226: Deserialization Flaw in Azure Core
    • Impact: Enables remote code execution via deserialization of untrusted data.
    • Affected Systems: Python applications using azure-core.
    • Immediate Action: Apply the latest patches from Azure.
    • Mitigation: Avoid using untrusted data sources.
  • CVE-2026-22777: CRLF Injection in ComfyUI-Manager
    • Impact: Tampering with configuration files via HTTP query parameters.
    • Affected Systems: ComfyUI-Manager with remote access enabled.
    • Immediate Action: Upgrade to the latest patched versions.
    • Mitigation: Use firewalls to block external access.
  • CVE-2026-22700: Denial of Service in SM2 Decryption
    • Impact: Crafted inputs can crash applications using SM2 decryption.
    • Affected Systems: Rust applications using sm2 library versions 0.14.0.
    • Immediate Action: Implement length checks to handle input properly.
    • Mitigation: Apply defensive coding practices to avoid panics.

Previously Alerted

What to Do Now

  1. Review and apply patches or mitigations for the affected systems immediately.
  2. Verify that all security updates have been applied successfully and confirm system stability.
  3. Monitor systems for unusual activity or potential exploit attempts.
  4. Review and update any access controls and firewall rules to minimize exposure.

Related Resources

  • Check official vendor advisories for detailed patch notes.
  • Stay informed with our upcoming blog post on mitigating similar vulnerabilities.

Keep reading