CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-05-10 (4)

2026-05-10 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-05-10

4 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-6722 — 9.8 — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP objects in a global map without incrementi…
  • CVE-2021-47932 — 9.8 — WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability that allows attackers to create administrator accounts by submitting crafted requests to the AJAX handler. Attackers can send …
  • CVE-2021-47933 — 9.8 — WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to the REST API endpoint. Attackers can upload PHP files…
  • CVE-2021-47940 — 9.8 — WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting the AJAX fileupload action. Atta…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.