CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-02-07 (4)

2026-02-07 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-02-07

4 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-25592 — 9.9 — Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, spec…
  • CVE-2026-25763 — 9.9 — OpenProject is an open-source, web-based project management software. Prior to versions 16.6.7 and 17.0.3, an arbitrary file write vulnerability exists in OpenProject’s repository changes endpoint (/projects/:project_id/…
  • CVE-2025-64111 — 9.8 — Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, due to the insufficient patch for CVE-2024-56731, it's still possible to update files in the .git directory and achieve remote command executio…
  • CVE-2026-25804 — 9.1 — Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrec…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.