CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-07-23 (5)

2026-07-23 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-07-23

5 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-16606 — 9.8 — A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution (pre-auth RCE) on GNU/Linux or Oracle Solaris. The Fsas …
  • CVE-2026-14282 — 9.8 — The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is …
  • CVE-2026-15011 — 9.8 — The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in all versions up to, and including, 6.0.5 due to the use of dynamic function invocation on an …
  • CVE-2026-15015 — 9.8 — The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authoriz…
  • CVE-2026-65907 — 9.1 — In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.