CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-09-21 (3)

2026-09-21 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-09-21

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-82187 — 9.8 — The Web to Print Online Designer WordPress plugin before 2.15.0 does not validate the type or extension of uploaded files, and hands the token protecting those uploads to any visitor who asks for it, allowing unauthentic…
  • CVE-2026-86473 — 9.1 — Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its credential as an Authorization bearer header instead, the endpoint returns i…
  • CVE-2026-7273 — 0.0 — Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a cr… [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.