CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-09-06 (3)

2026-09-06 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-09-06

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-16310 — 9.8 — The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' parameter due to missing validation on a user controlled key. This makes it p…
  • CVE-2026-75816 — 9.8 — The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to the pre_update_value function lacking any cap…
  • CVE-2026-67277 — 8.2 — RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the s… [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.