Daily High-Risk Vuln Digest 2026-06-21 (2)
Daily High-Risk Vulnerability Digest · 2026-06-21
2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).
今日收录
- CVE-2026-5366 —
9.9— Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in theGitRepositorystorage class. Thecommit_shaparameter, which is passed to git commands, lacks val… - CVE-2026-56265 —
9.8— Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any …
Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.