CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-01-09 (3)

2026-01-09 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-01-09

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2025-14736 — 9.8 — The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.28.29. This is due to insufficient validation of user-supplied role values in the 'valid…
  • CVE-2025-13761 — 9.6 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an unauthenticated user to execute arbitrary code in the context of an authent…
  • CVE-2025-14741 — 9.1 — The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to missing authorization to unauthorized data modification and deletion due to a missing capability check on the 'delete_object' function in all version…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.