CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-04-14 (5)

2026-04-14 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-04-14

5 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-4365 — 9.1 — The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the delete_question_answer() function in all versions up to, and including, 4.3.2.8. The plugin expos…
  • CVE-2026-40313 — 9.1 — PraisonAI is a multi-agent teams system. In versions 4.5.139 and below, the GitHub Actions workflows are vulnerable to ArtiPACKED attack, a known credential leakage vector caused by using actions/checkout without setting…
  • CVE-2026-31908 — 9.1 — Header injection vulnerability in Apache APISIX. The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0. …
  • CVE-2009-0238 — 0.0 — Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed o… [KEV]
  • CVE-2026-32201 — 0.0 — Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network. [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.