CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-01-30 (3)

2026-01-30 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-01-30

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-1699 — 10.0 — In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while checking out and executing untrusted pull request code. This allowed any GitHub us…
  • CVE-2026-1340 — 9.8 — A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. [KEV]
  • CVE-2026-22806 — 9.1 — vCluster Platform provides a Kubernetes platform for managing virtual clusters, multi-tenancy, and cluster sharing. Prior to versions 4.6.0, 4.5.4, 4.4.2, and 4.3.10, when an access key is created with a limited scope, t…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.