CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-06-24 (7)

2026-06-24 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-06-24

7 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-12416 — 9.8 — The Invoice Generator plugin for WordPress is vulnerable to Account Takeover via Password Reset in all versions up to, and including, 1.0.0. This is due to the pravel_invoice_change_password() function being registered…
  • CVE-2026-12417 — 9.8 — The SignUp & SignIn plugin for WordPress is vulnerable to Authentication Bypass via Weak Password Reset Validation leading to Account Takeover in versions up to, and including, 1.0.0. This is due to the `pravel_change_pa…
  • CVE-2026-52914 — 9.8 — In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix fragment reassembly length accounting batman-adv keeps a running payload length for queued fragments and uses it to validate a fragment …
  • CVE-2026-52924 — 9.8 — In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctp_stream_update() is only invoked when the association is moved into COOKIE_WAIT during associatio…
  • CVE-2026-52931 — 9.8 — In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid use of uninit sender vars batadv_tp_recv_ack() and batadv_tp_stop() are only valid for tp_vars in the BATADV_TP_SENDER role.…
  • CVE-2026-50574 — 9.6 — yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format (such as an HLS/DASH stream), yt-dlp passes insufficiently sanitized inpu…
  • CVE-2026-44792 — 9.0 — n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Dat…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.