CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-08-12 (22)

2026-08-12 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-08-12

22 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-45618 — 10.0 — LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches the issue.
  • CVE-2026-73263 — 9.9 — Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfig_content containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfig…
  • CVE-2026-62878 — 9.8 — Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
  • CVE-2026-62893 — 9.8 — Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
  • CVE-2026-65768 — 9.8 — Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.
  • CVE-2026-65791 — 9.8 — Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
  • CVE-2026-16230 — 9.8 — The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete_file function in all versions up to, and including, 3.0.6. This makes it possib…
  • CVE-2026-15039 — 9.8 — The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote …
  • CVE-2026-16051 — 9.8 — The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to o…
  • CVE-2026-18366 — 9.8 — The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the access control decisions WordPress already made for unrelated privileged actions, which allows unauthenticat…
  • CVE-2026-18391 — 9.8 — The WooCommerce Subscriptions WordPress plugin before 9.1.0 does not validate user input before unserializing it on stores with High-Performance Order Storage enabled, leading to a PHP Object Injection issue which unauth…
  • CVE-2026-26035 — 9.8 — An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 throug…
  • CVE-2026-73032 — 9.6 — PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval()…
  • CVE-2026-70398 — 9.6 — A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controlle…
  • CVE-2026-50516 — 9.4 — Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-70306 — 9.3 — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
  • CVE-2026-69223 — 9.1 — Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.
  • CVE-2026-71290 — 9.1 — Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can…
  • CVE-2026-67568 — 9.1 — The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information…
  • CVE-2026-68431 — 9.1 — In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2_PROTO_NUMB…
  • CVE-2026-16538 — 9.1 — The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its…
  • CVE-2026-65660 — 8.8 — Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.