CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-08-02 (3)

2026-08-02 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-08-02

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-8457 — 9.8 — The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 2.8.7. This is due to the plugin's Apple login handler accepting the Apple id_token and decod…
  • CVE-2026-16256 — 9.8 — The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce checks on AJAX actions available to unauthenticated users that create and update WordPress accounts, and it trusts an attacke…
  • CVE-2026-68579 — 9.6 — FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStream_Read function (client/Windows/wf_cliprdr.c). When an OLE paste consumer (e.g. explorer.exe) calls IS…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.