CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-07-11 (3)

2026-07-11 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-07-11

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-57211 — 10.0 — RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_i…
  • CVE-2026-61459 — 9.8 — MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security chec…
  • CVE-2026-12761 — 9.8 — The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass leading to account takeover in versions up to and including 7.7.0. This is due to …

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.