cisa.gov | Bulletins
Follow
Vulnerability Summary for the Week of January 12, 2026
The document details several high-severity vulnerabilities across various software products from different vendors. These vulnerabilities include buffer overflows, unquoted service path issues, and remote command execution flaws. Some vulnerabilities allow for remote code execution, while others enable privilege escalation to the system level. Several Adobe products, such as Dreamweaver and Illustrator, are affected by vulnerabilities, including heap-based buffer overflows and improper input validation. These issues often require user interaction, such as opening a malicious file, to be exploited. Advantech's IoTSuite and IoT Edge Products have a critical SQL injection vulnerability. Acer products like Acer Backup Manager and Updater Service also present unquoted service path vulnerabilities. The CVSS scores range from 7.8 to 10, indicating significant risk. The published dates for these vulnerabilities are primarily in January 2026. Exploitation details, including CVE identifiers and links to vendor advisories or exploit databases, are provided. These vulnerabilities often allow attackers to execute arbitrary code or gain unauthorized access.