CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-03-13 (3)

2026-03-13 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-03-13

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-3611 — 10.0 — The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system…
  • CVE-2026-3910 — 0.0 — Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. … [KEV]
  • CVE-2026-3909 — 0.0 — Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android,… [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.