Daily High-Risk Vuln Digest 2026-06-21 (2)

Daily High-Risk Vulnerability Digest · 2026-06-21

2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-5366 — 9.9 — Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the GitRepository storage class. The commit_sha parameter, which is passed to git commands, lacks val…
  • CVE-2026-56265 — 9.8 — Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any …

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.