CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-08-29 (8)

2026-08-29 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-08-29

8 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-54745 — 10.0 — Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability th…
  • CVE-2026-10522 — 9.8 — The MemberHero WordPress plugin through 6.9 does not restrict which account fields can be supplied during its frontend registration process, allowing unauthenticated attackers to register a new user with an arbitrary rol…
  • CVE-2026-16259 — 9.8 — The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token w…
  • CVE-2026-80725 — 9.8 — In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate packets beyond GRO_LEGACY_MAX_SIZE (64KB), BIG TCP should only b…
  • CVE-2026-14494 — 9.8 — The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handle_form_submission function. This is due to the plugin dynamically granting the unfi…
  • CVE-2026-77012 — 9.3 — The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated endpoints, relying on a hardcoded default, and does not validate the URLs or destination paths it is gi…
  • CVE-2026-16947 — 9.1 — The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before using it to build a server-side verification request, and does not verify the authenticity of …
  • CVE-2026-82454 — 9.1 — The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken function extracted the 'alg' field from the attacker-supplied J…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.