CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-06-20 (5)

2026-06-20 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-06-20

5 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-11551 — 9.8 — The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updati…
  • CVE-2019-25763 — 9.8 — WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows attackers to gain unauthorized access by exploiting the social media login form functionality. Attackers ca…
  • CVE-2026-48582 — 9.6 — Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-56081 — 9.1 — Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim's email address before that email is verified. By enabling two-factor authentication on…
  • CVE-2026-9265 — 9.1 — Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path. print_attribute() copies a UTF8STRING ASN.1 attribute value into a heap buffer sized exactly to its declare…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.