CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-06-02 (6)

2026-06-02 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-06-02

6 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-45131 — 10.0 — CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (pull-request.yaml) executes attacker-controlled code from fork pull requests in a privileged contex…
  • CVE-2026-45132 — 10.0 — CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive credentials (Personal Access Token and SSH signing key) to …
  • CVE-2026-8206 — 9.8 — The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. This is due to the plugin accepting an arbit…
  • CVE-2026-22872 — 9.1 — Capsule is a multi-tenancy and policy-based framework for Kubernetes. The Capsule Controller runs with cluster-admin privileges. Although the TenantResource RawItems processing logic forcibly sets the namespace, this is …
  • CVE-2022-0492 — 0.0 — Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature. [KEV]
  • CVE-2025-48595 — 0.0 — Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation. [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.