Daily High-Risk Vuln Digest 2026-02-18 (4)

Daily High-Risk Vulnerability Digest · 2026-02-18

4 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-23647 — 9.8 — Glory RBG-100 recycler systems using the ISPK-08 software component contain hard-coded operating system credentials that allow remote authentication to the underlying Linux system. Multiple local user accounts, including…
  • CVE-2025-66614 — 9.1 — Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0-M1 through 9.0.112. The following versions were EOL at the time the CV…
  • CVE-2021-22175 — 0.0 — GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled. [KEV]
  • CVE-2026-22769 — 0.0 — Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlying operating system a… [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.