Daily High-Risk Vuln Digest 2026-03-04 (2)

Daily High-Risk Vulnerability Digest · 2026-03-04

2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-3136 — 9.8 — An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patch…
  • CVE-2026-27446 — 9.8 — Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbo…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.