CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-10-12 (2)

2026-10-12 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-10-12

2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-109390 — 9.8 — AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control…
  • CVE-2026-85499 — 9.1 — Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept role and monitoring-proxy functionality. Under a non-default configuration with a readonly Canopy user a…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.