CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-05-18 (3)

2026-05-18 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-05-18

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-8507 — 9.8 — Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING (or BIT STRING) attribute on a SAFEBAG, via info() or info_as_hash(), a…
  • CVE-2026-8721 — 9.8 — Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to SvPV_nolen. The Perl len…
  • CVE-2026-7304 — 9.8 — SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized with…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.