Changes in January 2026

In CISA made 9 changes to its list that its own file does not keep.

  1. CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM)Removed from CISA's list.
  2. CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM)Restored to CISA's list.
  3. CVE-2024-51567 CyberPersons CyberPanelRansomware use: Unknown to Known.
  4. CVE-2024-49039 Microsoft WindowsRansomware use: Unknown to Known.
  5. CVE-2024-30088 Microsoft WindowsRansomware use: Unknown to Known.
  6. CVE-2024-9680 Mozilla FirefoxRansomware use: Unknown to Known.
  7. CVE-2026-21509 Microsoft OfficeEdited: description.
  8. CVE-2026-20805 Microsoft WindowsEdited: description.
  9. CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneViewRenamed from Hewlett Packard (HP) to Hewlett Packard Enterprise (HPE). Edited: description and name.