Daily High-Risk Vuln Digest 2026-02-18 (4)
Daily High-Risk Vulnerability Digest · 2026-02-18
4 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).
今日收录
- CVE-2026-23647 —
9.8— Glory RBG-100 recycler systems using the ISPK-08 software component contain hard-coded operating system credentials that allow remote authentication to the underlying Linux system. Multiple local user accounts, including… - CVE-2025-66614 —
9.1— Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0-M1 through 9.0.112. The following versions were EOL at the time the CV… - CVE-2021-22175 —
0.0— GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled. [KEV] - CVE-2026-22769 —
0.0— Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlying operating system a… [KEV]
Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.