CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-08-22 (5)

2026-08-22 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-08-22

5 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-74581 — 9.8 — In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6_rule_suppress() drops a suppressed route with ip6_rt_put_flags(), but leaves res->rt6 pointing at the …
  • CVE-2026-77000 — 9.8 — The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in…
  • CVE-2026-77001 — 9.8 — The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing u…
  • CVE-2026-77002 — 9.8 — The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, inc…
  • CVE-2026-78003 — 9.8 — The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the add_list() …

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.