CERT-In’s Vulnerability Intelligence Brief analysing April 2025 to January 2026 identifies 281 reported vulnerabilities, including 55 critical and 197 high-severity issues, with a 171% surge peaking in November 2025. Remote Code Execution and authentication bypass remain the most dangerous attack vectors, affecting major vendors such as Microsoft, Cisco, Google, Fortinet, and Oracle. The report underscores strict patch timelines, MFA adoption, network segmentation, and continuous monitoring as key remediation measures. Organisations are advised to adopt risk-based vulnerability management and align security controls with evolving threat patterns.