CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-10-17 (11)

2026-10-17 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-10-17

11 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-95182 — 10.0 — An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.
  • CVE-2026-104798 — 9.8 — The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.8.7. The public mcs GET parameter is reflected into post content unsanitized…
  • CVE-2026-109219 — 9.8 — The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.4 via the mbw_file_upload function. This is due to missing file extension validation on the attacker-su…
  • CVE-2026-109515 — 9.8 — The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the `sub…
  • CVE-2026-103768 — 9.8 — The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient f…
  • CVE-2026-89079 — 9.8 — The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to upd…
  • CVE-2026-104730 — 9.8 — The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted in…
  • CVE-2026-111641 — 9.8 — FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /ap…
  • CVE-2026-110916 — 9.6 — Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Mediu…
  • CVE-2026-57169 — 9.6 — Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers//exec does not enforce authentication on the WebSocket upgrade request. When an unauthenticated…
  • CVE-2026-94134 — 9.1 — The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless host_key is configured or no_host_key_check is explicitly set to false, it accepts any server key. This affects SSH and SFTP …

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.