CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-03-03 (5)

2026-03-03 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-03-03

5 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-2628 — 9.8 — The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5. This makes it possible for unauthenticated attackers t…
  • CVE-2026-1492 — 9.8 — The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all v…
  • CVE-2025-59059 — 9.8 — Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.
  • CVE-2026-22891 — 9.8 — A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63). A specially crafted Intan CLP file can lead to arbitrary code e…
  • CVE-2026-21385 — 0.0 — Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation. [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.