CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-10-26 (3)

2026-10-26 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-10-26

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-115188 — 9.9 — An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicly accessible media d…
  • CVE-2026-107656 — 9.8 — An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0…
  • CVE-2026-109618 — 0.0 — PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution. [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.