CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-10-09 (7)

2026-10-09 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-10-09

7 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-107780 — 9.8 — Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers c…
  • CVE-2026-56857 — 9.8 — On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This …
  • CVE-2026-100730 — 9.8 — A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on system…
  • CVE-2026-105278 — 9.8 — The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and…
  • CVE-2026-107938 — 9.1 — In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 a…
  • CVE-2026-97468 — 9.1 — Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that…
  • CVE-2026-108109 — 9.1 — PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otp_code. Atta…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.