CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-11-08 (2)

2026-11-08 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-11-08

2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-110963 — 9.8 — The Userplace WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to unauthenticated users and publicly exposes the nonce that protects it, allowing unauthenticated attackers …
  • CVE-2026-114432 — 9.8 — The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a form file field, and a flaw in its temporary-file cleanup leaves the uploaded file on disk, allowing un…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.