CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-11-11 (23)

2026-11-11 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-11-11

23 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-120002 — 9.9 — Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-121653 — 9.8 — SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.
  • CVE-2026-112967 — 9.8 — Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.
  • CVE-2026-116928 — 9.8 — Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
  • CVE-2026-119958 — 9.8 — Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
  • CVE-2026-85844 — 9.8 — Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-88218 — 9.8 — Double free in Windows DNS allows an unauthorized attacker to execute code over a network.
  • CVE-2026-88234 — 9.8 — Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.
  • CVE-2026-88243 — 9.8 — Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
  • CVE-2026-95882 — 9.8 — Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
  • CVE-2026-95901 — 9.8 — Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
  • CVE-2026-96157 — 9.8 — Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
  • CVE-2026-89324 — 9.8 — The Basel Post Types plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.18. The vulnerability exists because a missing-quotes coding error in the defined() call for SECURE…
  • CVE-2026-126261 — 9.8 — A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can r…
  • CVE-2026-108186 — 9.6 — Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
  • CVE-2026-125347 — 9.6 — Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secur…
  • CVE-2026-121367 — 9.6 — On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain conditions, RIPv2 might be silently enabled on management interfaces even when the RIP agent intends to disab…
  • CVE-2026-121529 — 9.6 — A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM …
  • CVE-2026-121683 — 9.4 — Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.
  • CVE-2026-125757 — 9.1 — mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in the shared rspamd container by storing a malicious domain-wide footer. A…
  • CVE-2026-109454 — 9.0 — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
  • CVE-2026-80095 — 9.0 — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-95962 — 9.0 — Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.