CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-06-10 (17)

2026-06-10 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-06-10

17 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-10520 — 10.0 — An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution [KEV]
  • CVE-2026-10523 — 9.9 — An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full admi…
  • CVE-2026-45552 — 9.9 — Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the install blueprint declares only bp.before_request → @jwt_required() (app/routes/install/routes.py:…
  • CVE-2026-45556 — 9.9 — Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, POST /waf///rule//save accepts a config_file_name form field that is pass…
  • CVE-2026-45558 — 9.9 — Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the HAProxy section-save endpoints (POST /api/service/haproxy//section/ and t…
  • CVE-2026-25089 — 9.8 — A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, Fo… [KEV]
  • CVE-2026-45657 — 9.8 — Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.
  • CVE-2026-47291 — 9.8 — Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.
  • CVE-2026-49841 — 9.8 — FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the mod_vert…
  • CVE-2025-6254 — 9.8 — The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles tha…
  • CVE-2026-42904 — 9.6 — Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.
  • CVE-2026-53474 — 9.6 — A flaw was found in migration-planner. A remote authenticated attacker could exploit this vulnerability by uploading a specially crafted RVTools .xlsx file. Due to improper input sanitization, malicious SQL embedded with…
  • CVE-2026-34182 — 9.1 — Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. I…
  • CVE-2026-45602 — 9.1 — No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.
  • CVE-2026-49840 — 9.1 — FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, esl_recv_eve…
  • CVE-2026-9067 — 9.1 — The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the end…
  • CVE-2026-45550 — 9.1 — Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, PUT /smon/check (app/routes/smon/routes.py:117-138) gates only on roxywi_common.check_user_group_for_f…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.