Daily High-Risk Vuln Digest 2026-11-05 (17)
Daily High-Risk Vulnerability Digest · 2026-11-05
17 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).
今日收录
- CVE-2026-97693 —
9.9— Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there is insufficient isolation between execution-capable Docker sandboxes and trusted … - CVE-2026-122310 —
9.9— Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw path, whose fragment or query the Kubernetes client discards. A namespace-scoped user who can create a… - CVE-2026-54384 —
9.8— VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a full session for a victim's account by submitting a linked Google or Facebook account identifi… - CVE-2026-68991 —
9.8— In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition. - CVE-2026-19256 —
9.8— The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against the short numeric code used by its default-enabled passwordless email login, and does not fe… - CVE-2026-100109 —
9.8— The Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capability checks when creating users through an action available to unauthenticated visitors, and lets the caller choose the new accou… - CVE-2026-105330 —
9.8— Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz 24.09.06 and 24.09.07 on all platforms allows an unauthenticated, network-reachable attacker to obtain full administrative access via a forg… - CVE-2026-82907 —
9.8— Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker who captures a live externalLoginKey value to obtain a c… - CVE-2026-83542 —
9.8— Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to execute arbitrary code on the server by staging crafted widget … - CVE-2026-81815 —
9.8— SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24.09.08 on MySQL/MariaDB-backed deployments allows a remote unauthenticated attacker to disclose arbitrary rows from the quer… - CVE-2026-57566 —
9.3— Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the unauthenticated /api/opds/proxy route in apps/readest-app/src/app/api/… - CVE-2026-100144 —
9.3— The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment callback before using it in a SQL statement, and treats an empty API key, which is its own default, as valid authentication, al… - CVE-2026-69006 —
9.1— Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. - CVE-2026-69043 —
9.1— In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption - CVE-2026-69068 —
9.1— Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. - CVE-2026-117691 —
9.1— A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server processes percent-encoded parameter names (like %53AMLResponse) while the signature verification logic on… - CVE-2026-122120 —
9.0— In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.
Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.