CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-04-08 (15)

2026-04-08 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-04-08

15 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-34078 — 10.0 — Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flat…
  • CVE-2025-52908 — 9.8 — An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads …
  • CVE-2026-33815 — 9.8 — Memory-safety vulnerability in github.com/jackc/pgx/v5.
  • CVE-2026-33816 — 9.8 — Memory-safety vulnerability in github.com/jackc/pgx/v5.
  • CVE-2026-39397 — 9.8 — @delmaredigital/payload-puck is a PayloadCMS plugin for integrating Puck visual page builder. Prior to 0.6.23, all /api/puck/* CRUD endpoint handlers registered by createPuckPlugin() called Payload's local API with the d…
  • CVE-2026-31789 — 9.8 — Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an att…
  • CVE-2026-3296 — 9.8 — The Everest Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.3 via deserialization of untrusted input from form entry metadata. This is due to the html-admin-page…
  • CVE-2026-4003 — 9.8 — The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15. This is due to a flawed authorization logic check in the usersp…
  • CVE-2026-3535 — 9.8 — The DSGVO Google Web Fonts GDPR plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the DSGVOGWPdownloadGoogleFonts() function in all versions up to, and including, 1.1. T…
  • CVE-2026-35580 — 9.1 — Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs were interpolated directly into shell co…
  • CVE-2026-35573 — 9.1 — ChurchCRM is an open-source church management system. Prior to 6.5.3, a path traversal vulnerability in ChurchCRM's backup restore functionality allows authenticated administrators to upload arbitrary files and achieve r…
  • CVE-2025-71058 — 9.1 — Dual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that the response originates from a legitimate configured upstream DNS server. The implementation matches responses primarily b…
  • CVE-2025-69515 — 9.1 — An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device reporting an incorrect or s…
  • CVE-2026-34045 — 9.1 — Podman Desktop is a graphical tool for developing on containers and Kubernetes. Prior to 1.26.2, an unauthenticated HTTP server exposed by Podman Desktop allows any network attacker to remotely trigger denial-of-service …
  • CVE-2026-28386 — 9.1 — Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks. Impact summary: Th…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.