CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-01-29 (3)

2026-01-29 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-01-29

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-24857 — 9.8 — bulk_extractor is a digital forensics exploitation tool. Starting in version 1.4, bulk_extractor’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image cau…
  • CVE-2020-37000 — 9.8 — Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially cra…
  • CVE-2026-1281 — 0.0 — Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution. [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.