CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-10-14 (81)

2026-10-14 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-10-14

81 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-55675 — 10.0 — The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the…
  • CVE-2026-107594 — 10.0 — The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable…
  • CVE-2026-106042 — 9.9 — An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and ob…
  • CVE-2026-109412 — 9.9 — An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.
  • CVE-2026-77459 — 9.9 — Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and …
  • CVE-2026-97381 — 9.9 — Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After success…
  • CVE-2026-78802 — 9.8 — An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.
  • CVE-2026-106173 — 9.8 — A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4 all versions, FortiSIEM 7.3 all versions, FortiSIEM 7.2 all versions, FortiSIEM 7.…
  • CVE-2026-100202 — 9.8 — Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
  • CVE-2026-102210 — 9.8 — Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
  • CVE-2026-105010 — 9.8 — Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-105723 — 9.8 — Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-69634 — 9.8 — Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69639 — 9.8 — Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69705 — 9.8 — Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69883 — 9.8 — Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69886 — 9.8 — Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
  • CVE-2026-70024 — 9.8 — Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
  • CVE-2026-70096 — 9.8 — Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
  • CVE-2026-70157 — 9.8 — Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
  • CVE-2026-70242 — 9.8 — Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
  • CVE-2026-70275 — 9.8 — Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
  • CVE-2026-70291 — 9.8 — Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
  • CVE-2026-70300 — 9.8 — Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-83517 — 9.8 — Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
  • CVE-2026-83519 — 9.8 — Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
  • CVE-2026-83523 — 9.8 — Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
  • CVE-2026-83578 — 9.8 — Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
  • CVE-2026-83693 — 9.8 — Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
  • CVE-2026-83748 — 9.8 — Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
  • CVE-2026-83770 — 9.8 — Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
  • CVE-2026-83780 — 9.8 — Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
  • CVE-2026-83782 — 9.8 — Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
  • CVE-2026-83789 — 9.8 — Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-83888 — 9.8 — Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-85792 — 9.8 — Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
  • CVE-2026-85809 — 9.8 — Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
  • CVE-2026-85814 — 9.8 — Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
  • CVE-2026-85928 — 9.8 — Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
  • CVE-2026-88102 — 9.8 — Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
  • CVE-2026-88156 — 9.8 — Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
  • CVE-2026-88178 — 9.8 — Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
  • CVE-2026-96096 — 9.8 — Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
  • CVE-2026-96219 — 9.8 — Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
  • CVE-2026-96320 — 9.8 — Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
  • CVE-2026-96909 — 9.8 — Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
  • CVE-2026-96924 — 9.8 — Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
  • CVE-2026-96934 — 9.8 — Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
  • CVE-2026-97016 — 9.8 — Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
  • CVE-2026-97749 — 9.8 — Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
  • CVE-2026-97805 — 9.8 — Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
  • CVE-2026-97814 — 9.8 — Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
  • CVE-2026-97815 — 9.8 — Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
  • CVE-2026-97816 — 9.8 — Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
  • CVE-2026-110392 — 9.8 — Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.
  • CVE-2026-110002 — 9.8 — The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication…
  • CVE-2026-97657 — 9.8 — The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions up to, and including, 10.8.0. This is due to the use of MAC-…
  • CVE-2026-97668 — 9.8 — The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due to insufficient escaping on user suppli…
  • CVE-2026-104800 — 9.8 — The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter. This is due to missing authentication, capability check…
  • CVE-2026-87855 — 9.8 — The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting…
  • CVE-2026-104748 — 9.8 — The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_no…
  • CVE-2026-110634 — 9.8 — git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can emb…
  • CVE-2026-59774 — 9.8 — Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to…
  • CVE-2026-110136 — 9.6 — Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
  • CVE-2026-110142 — 9.6 — Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
  • CVE-2026-110144 — 9.6 — Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: H…
  • CVE-2026-110149 — 9.6 — Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
  • CVE-2026-110152 — 9.6 — Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Cri…
  • CVE-2026-110159 — 9.6 — Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
  • CVE-2026-110161 — 9.6 — Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)
  • CVE-2026-110165 — 9.6 — Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Criti…
  • CVE-2026-70279 — 9.3 — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
  • CVE-2026-55695 — 9.1 — FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php…
  • CVE-2026-110116 — 9.1 — Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send cra…
  • CVE-2026-92097 — 9.1 — The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() function building the {url} template placeho…
  • CVE-2026-105008 — 9.0 — No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
  • CVE-2026-85818 — 9.0 — Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
  • CVE-2026-105134 — 0.0 — Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/… [KEV]
  • CVE-2026-76519 — 0.0 — Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. [KEV]
  • CVE-2026-105133 — 0.0 — Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vuln… [KEV]
  • CVE-2026-0322 — 0.0 — Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.