CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-05-09 (3)

2026-05-09 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-05-09

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-41070 — 10.0 — openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows. From version 1.26.3 to before version 1.27.3, when openvpn-auth-oauth2 is deployed i…
  • CVE-2026-42298 — 10.0 — Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (.github/workflows/pr-docker-build.yml) allows any unauthenticated us…
  • CVE-2026-42454 — 9.9 — Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, all Docker container management endpoints in Termix interpolate the containerId URL pa…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.