CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-03-14 (3)

2026-03-14 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-03-14

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-3891 — 9.8 — The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lkn_pix_for_woocommerce_c6_save_settings' function in all vers…
  • CVE-2026-23941 — 9.4 — Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling. This vulnerability is associated with program files lib/inets/src/ht…
  • CVE-2026-31886 — 9.1 — Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, the dagRunId request field accepted by the inline DAG execution endpoints is passed directly into filepath.Join to construct a temporary direc…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.