Daily High-Risk Vuln Digest 2026-06-06 (3)

Daily High-Risk Vulnerability Digest · 2026-06-06

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-46389 — 10.0 — UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs) consumed by UDS Core's Identity deployment. In versions 0.11.0 through 0.26.0, a logic error in the `client-kubernetes…
  • CVE-2026-10580 — 9.8 — The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1.9.4. This is due to a logic conflation in …
  • CVE-2026-45758 — 9.6 — Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of guardrails-ai (0.10.1) to PyPI. Aany user who install…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.