CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-04-21 (9)

2026-04-21 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-04-21

9 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-32604 — 9.9 — Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This…
  • CVE-2026-24467 — 9.8 — OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Starting in version 1.0.0 and prior to version 2.0.13, OpenAEV's password reset imple…
  • CVE-2026-32311 — 9.8 — Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Flowsint allows a user to create investigations, which are used to manage sketches and ana…
  • CVE-2026-6748 — 9.8 — Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
  • CVE-2026-6760 — 9.8 — Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
  • CVE-2026-6768 — 9.8 — Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
  • CVE-2026-6771 — 9.8 — Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
  • CVE-2026-6257 — 9.1 — Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to …
  • CVE-2026-33432 — 9.1 — Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions up to and including 8.2.8.2, when LDAP authentication is enabled, Roxy-WI constructs an LDAP search filter by directly co…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.