CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-02-03 (5)

2026-02-03 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-02-03

5 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2025-5319 — 9.8 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System allows…
  • CVE-2021-39935 — 0.0 — GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API. [KEV]
  • CVE-2025-64328 — 0.0 — Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() fu… [KEV]
  • CVE-2019-19006 — 0.0 — Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin. [KEV]
  • CVE-2025-40551 — 0.0 — SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited wit… [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.