CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-05-16 (4)

2026-05-16 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-05-16

4 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-44774 — 9.9 — Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, and 3.7.1, Traefik's Kubernetes Gateway API provider allows a tenant with HTTPRoute creation permissions to expose the REST provider handler, …
  • CVE-2021-47965 — 9.8 — WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation. Attackers can upload…
  • CVE-2026-41258 — 9.1 — OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria() method in OpenMRS Core evaluates database-stored criteria str…
  • CVE-2026-45010 — 9.1 — phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/check endpoint, which accepts arbitrary user-id parameters without session binding or rate limiting.…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.