CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-03-01 (2)

2026-03-01 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-03-01

2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-28562 — 9.8 — wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted identifiers. Attackers exploit the wpfob pa…
  • CVE-2026-3395 — 9.8 — A flaw has been found in MaxSite CMS up to 109.1. This impacts the function eval of the file application/maxsite/admin/plugins/editor_markitup/preview-ajax.php of the component MarkItUp Preview AJAX Endpoint. Executing a…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.