CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-07-16 (6)

2026-07-16 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-07-16

6 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-20156 — 9.8 — As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening rele…
  • CVE-2026-20157 — 9.8 — As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening rele…
  • CVE-2026-15013 — 9.8 — The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass via SAML Signature Algorithm Confusion in all versions up to, and including, 5.4.3. The vulnerability exists because `Mo_SAM…
  • CVE-2026-12492 — 9.8 — The Happy Coders OTP Login for WooCommerce WordPress plugin before 2.8 does not verify that a one-time password was actually validated before authenticating a user based on a supplied identifier, allowing unauthenticated…
  • CVE-2026-62948 — 9.6 — OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/statefiles.c statefiles_write_state6() and state…
  • CVE-2026-54458 — 9.6 — WWBN AVideo is an open source video platform. Versions prior to 29.0 contain a stored DOM Cross-Site Scripting vulnerability in the YPTSocket plugin. Any unauthenticated remote attacker can execute arbitrary JavaScript i…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.