CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-01-24 (3)

2026-01-24 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-01-24

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2025-71159 — 9.8 — In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node() Previously, btrfs_get_or_create_delayed_node() set the delayed_node's refcount b…
  • CVE-2026-22984 — 9.8 — In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an explicit bounds check on payload_len to avoid a possible out-of-bounds a…
  • CVE-2025-13374 — 9.8 — The Kalrav AI Agent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the kalrav_upload_file AJAX action in all versions up to, and including, 2.3.3. This makes it possib…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.