CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-03-21 (6)

2026-03-21 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-03-21

6 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2025-15608 — 9.8 — This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes t…
  • CVE-2026-3584 — 9.8 — The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'form_process' function. This is due to the 'prepare_post_data' function mapping user-supplie…
  • CVE-2026-25192 — 9.8 — WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP Web…
  • CVE-2026-29796 — 9.8 — WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP Web…
  • CVE-2026-33228 — 9.8 — flatted is a circular JSON parser. Prior to version 3.4.2, the parse() function in flatted can use attacker-controlled string values from the parsed JSON as direct array index keys, without validating that they are numer…
  • CVE-2026-32046 — 9.8 — OpenClaw versions prior to 2026.2.21 contain an improper sandbox configuration vulnerability that allows attackers to execute arbitrary code by exploiting renderer-side vulnerabilities without requiring a sandbox escape.…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.