CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-01-02 (2)

2026-01-02 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-01-02

2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2025-14998 — 9.8 — The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.24. This is due to the plugin not properly validating a user's identity prior to updati…
  • CVE-2025-68620 — 9.1 — Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 expose two features that can be chained together to steal JWT authentication tokens without any prior authentication.…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.