CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-04-17 (3)

2026-04-17 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-04-17

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-6443 — 9.8 — All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's th…
  • CVE-2026-5426 — 9.1 — Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via …
  • CVE-2026-40322 — 9.0 — SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, Mermaid diagrams are rendered with securityLevel set to "loose", and the resulting SVG is injected into the DOM via innerHTML. T…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.