CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-03-16 (5)

2026-03-16 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-03-16

5 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-32621 — 9.9 — Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Prior to 2.9.6, 2.10.5, 2.11.6, 2.12.3, and 2.13.2, a vulnerability exists in query plan execution within the gateway that may a…
  • CVE-2016-20026 — 9.8 — ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow unauthenticated attackers to access the manager application. Attackers can authenticate with hardcoded credentials st…
  • CVE-2016-20030 — 9.8 — ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters via the username parameter. Attackers can send request…
  • CVE-2025-52648 — 9.8 — HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity co…
  • CVE-2025-47813 — 0.0 — Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie. [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.