CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-06-26 (3)

2026-06-26 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-06-26

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-54030 — 9.3 — LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreChat's MCP OAuth implementation does not validate that the resource parameter from OAuth Protected Resource metadata (RFC 9…
  • CVE-2025-55017 — 9.1 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.6, from 1.0.0 before 1.3.6. Users are recommended to up…
  • CVE-2025-64152 — 9.1 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.6, from 2.0.0 before 2.0.7. Users are recommended to up…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.