CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-05-17 (3)

2026-05-17 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-05-17

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2020-37228 — 9.8 — iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object. Attackers can retrieve valid CAPTCHA co…
  • CVE-2018-25332 — 9.8 — GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file upload functionality. Atta…
  • CVE-2018-25335 — 9.8 — WordPress Plugin Peugeot Music 1.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to the upload.php endpoint. Attackers can upload…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.