CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-10-24 (2)

2026-10-24 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-10-24

2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-115806 — 9.8 — The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted input in the migration search-and-replace rou…
  • CVE-2026-110956 — 9.8 — The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before authenticating a user, treating an empty stored value as a match, so an unauthenticated attacker can log …

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.