Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.088 | 5,9 % |
| <10 % | 347.080 | 93,0 % |
New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data
Researchers has demonstrated Node2Shell, a working exploit that lets an attacker run code inside a Node.js application through specially crafted, Brotli-compressed data. The research targets CVE-2026-111497, a high-severity memory flaw in t
CVE-2026-98913 | Linux Kernel up to 6.1.188/6.6.157/6.12.110/6.18.52 thunderx nicvf_probe memory leak (EUVD-2026-108869)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.1.188/6.6.157/6.12.110/6.18.52. Impacted is the function nicvf_probe of the component thunderx. This manipulation causes memory leak. The identification of thi
CVE-2026-98912 | Linux Kernel up to 6.18.52 ALSA OSS Sequencer snd_seq_oss_read buffer overflow (EUVD-2026-108868)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.52. This issue affects the function snd_seq_oss_read of the component ALSA OSS Sequencer. The manipulation results in buffer overflow. This vulnerab
CVE-2026-98915 | Linux Kernel up to 6.1.188/6.6.157/6.12.110/6.18.52 video-i2c video_unregister_device denial of service (EUVD-2026-108871)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.188/6.6.157/6.12.110/6.18.52. This affects the function video_unregister_device of the component video-i2c. This manipulation causes denial of servi
CVE-2026-98914 | Linux Kernel up to 6.18.52 amdgpu infinite loop (EUVD-2026-108870)
A vulnerability was found in Linux Kernel up to 6.18.52. It has been rated as problematic. This vulnerability affects unknown code of the component amdgpu. The manipulation leads to infinite loop. This vulnerability is uniquely identified a
CVE-2026-98916 | Linux Kernel up to 6.6.159/6.12.113/6.18.52 nl80211 input validation (EUVD-2026-108872)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.6.159/6.12.113/6.18.52. The affected element is an unknown function of the component nl80211. Such manipulation leads to improper input validation. This vulnera
CVE-2026-55889 | flatpak xdg-desktop-portal up to 1.22.0 FileTransfer FileTransfer.RetrieveFiles random values (EUVD-2026-108751)
A vulnerability, which was classified as problematic, has been found in flatpak xdg-desktop-portal up to 1.22.0. The affected element is the function FileTransfer.RetrieveFiles of the component FileTransfer. The manipulation leads to insuff
CVE-2026-55888 | Flatpak XDG Desktop Portal up to 1.22.0 FileChooser.SaveFiles sandbox (EUVD-2026-108752)
A vulnerability classified as problematic was found in Flatpak XDG Desktop Portal up to 1.22.0. Impacted is the function FileChooser.SaveFiles. Executing a manipulation can lead to sandbox issue. This vulnerability is tracked as CVE-2026-55
CVE-2026-114649 | MongoDB C# Driver up to 3.12.x TLS Client Certificate Comparison certificate validation (WID-SEC-2026-4126)
A vulnerability classified as problematic was found in MongoDB C# Driver up to 3.12.x. The affected element is an unknown function of the component TLS Client Certificate Comparison. The manipulation results in improper certificate validati
CVE-2026-114648 | MongoDB C# Driver up to 3.12.x LINQ Query Processing neutralization (WID-SEC-2026-4126)
A vulnerability categorized as very critical has been discovered in MongoDB C# Driver up to 3.12.x. This vulnerability affects unknown code of the component LINQ Query Processing. Such manipulation leads to improper neutralization. This vul
CVE-2026-114647 | MongoDB C# Driver up to 3.12.x Document Replacement Validation FindOneAndReplace input validation (WID-SEC-2026-4126)
A vulnerability identified as problematic has been detected in MongoDB C# Driver up to 3.12.x. Affected by this issue is the function FindOneAndReplace of the component Document Replacement Validation. This manipulation causes improper inpu
CVE-2026-114646 | MongoDB C# Driver up to 3.12.x BSON input validation (WID-SEC-2026-4126)
A vulnerability was found in MongoDB C# Driver up to 3.12.x. It has been classified as critical. The affected element is an unknown function of the component BSON Handler. Performing a manipulation results in improper input validation. This
CVE-2026-114644 | MongoDB C# Driver up to 3.12.x Deserialization resource consumption (WID-SEC-2026-4126)
A vulnerability was found in MongoDB C# Driver up to 3.12.x. It has been declared as critical. This impacts an unknown function of the component Deserialization. Executing a manipulation can lead to resource consumption. This vulnerability
CVE-2026-114643 | MongoDB C# Driver up to 3.12.x input validation (WID-SEC-2026-4126)
A vulnerability was found in MongoDB C# Driver up to 3.12.x. It has been declared as problematic. Affected by this issue is some unknown functionality. The manipulation results in improper input validation. This vulnerability is reported as
CVE-2026-106017 | OpenVPN up to 3.11.7 Core certificate validation (WID-SEC-2026-4127)
A vulnerability was found in OpenVPN up to 3.11.7. It has been rated as problematic. Impacted is an unknown function of the component Core. The manipulation leads to improper certificate validation. This vulnerability is listed as CVE-2026-
CVE-2026-98878 | Linux Kernel up to 6.18.52 irqchip-gic-v5 irq_eoi denial of service (EUVD-2026-108672)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.52. Affected by this issue is the function irq_eoi of the component irqchip-gic-v5. The manipulation leads to denial of service. This vulnerability
CVE-2026-98877 | Linux Kernel up to 6.18.52 irqchip-gic-v4 __irq_domain_instantiate null pointer dereference (EUVD-2026-108723)
A vulnerability classified as problematic was found in Linux Kernel up to 6.18.52. Affected by this vulnerability is the function __irq_domain_instantiate of the component irqchip-gic-v4. Executing a manipulation can lead to null pointer de
CVE-2026-98880 | Linux Kernel up to 6.6.157/6.12.110/6.18.52 ntfs3 set_blocksize buffer overflow (EUVD-2026-108674)
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.6.157/6.12.110/6.18.52. This affects the function set_blocksize of the component ntfs3. This manipulation causes buffer overflow. This vulnerability appears as
CVE-2026-98879 | Linux Kernel up to 6.18.52 isofs set_blocksize buffer overflow (EUVD-2026-108673)
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.18.52. The impacted element is the function set_blocksize of the component isofs. The manipulation results in buffer overflow. This vulnerability is reported as C
CVE-2026-98882 | Linux Kernel up to 6.12.110/6.18.52 wave5 wave5-vpuapi.c wave5_vpu_dec_get_output_info frame_buf buffer overflow (EUVD-2026-108676)
A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.110/6.18.52. This impacts the function wave5_vpu_dec_get_output_info of the file drivers/media/platform/chips-media/wave5/wave5-vpuapi.c of the compon
CVE-2026-98881 | Linux Kernel up to 6.18.52 Bridge Multicast br_multicast.c br_multicast_dev_del infinite loop (EUVD-2026-108675)
A vulnerability classified as critical has been found in Linux Kernel up to 6.18.52. Affected is the function br_multicast_dev_del of the file net/bridge/br_multicast.c of the component Bridge Multicast. Performing a manipulation results in
CVE-2026-114486 | Devolutions Server up to 2026.3.10 Token Generation improper authorization (WID-SEC-2026-4128)
A vulnerability, which was classified as problematic, was found in Devolutions Server up to 2026.3.10. The impacted element is an unknown function of the component Token Generation. The manipulation results in improper authorization. This v
CVE-2026-114485 | Devolutions Server up to 2026.3.10 User List Endpoint information disclosure (WID-SEC-2026-4128)
A vulnerability has been found in Devolutions Server up to 2026.3.10 and classified as problematic. This affects an unknown function of the component User List Endpoint. This manipulation causes information disclosure. This vulnerability ap
CVE-2026-93981 | honojs hono up to 4.13.6 JSX Rendering hono/jsx/dom/server renderToString/renderToReadableStream cross site scripting (WID-SEC-2026-4131)
A vulnerability categorized as problematic has been discovered in honojs hono up to 4.13.6. Impacted is the function renderToString/renderToReadableStream of the file hono/jsx/dom/server of the component JSX Rendering. The manipulation resu
CVE-2026-84365 | honojs Hono up to 4.13.4 Static Site Generation toSSG ssgParams path traversal (WID-SEC-2026-4131)
A vulnerability categorized as problematic has been discovered in honojs Hono up to 4.13.4. This affects the function toSSG of the component Static Site Generation. Such manipulation of the argument ssgParams leads to path traversal. This v
CVE-2026-84364 | honojs Hono up to 4.13.4 Dot-notation Parsing parseBody resource consumption (WID-SEC-2026-4131)
A vulnerability was found in honojs Hono up to 4.13.4. It has been classified as problematic. Affected is the function parseBody of the component Dot-notation Parsing. The manipulation leads to resource consumption. This vulnerability is li
CVE-2026-84363 | honojs Hono up to 4.13.4 Cache Middleware cross site scripting (WID-SEC-2026-4131)
A vulnerability was found in honojs Hono up to 4.13.4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Cache Middleware. This manipulation causes cross site scripting. This vulnerabili
Critical HPE Aruba AOS-8 Flaw Allows Hackers to Bypass SSH Authentication and Take Over Systems
Hewlett Packard Enterprise (HPE) has addressed a critical authentication-bypass vulnerability in the SSH daemon of its AOS-8 wireless operating system. This vulnerability, tracked as CVE-2026-79855, could let a remote, unauthenticated attac
CVE-2026-114645 | MongoDB C Driver up to 1.30.13/2.5.6 Kerberos Authentication out-of-bounds write (WID-SEC-2026-4134)
A vulnerability identified as critical has been detected in MongoDB C Driver up to 1.30.13/2.5.6. This issue affects some unknown processing of the component Kerberos Authentication. Performing a manipulation results in out-of-bounds write.
URGENT – PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an un
CVE-2026-113869 | Mozilla Thunderbird up to 158.0.0 use after free (WID-SEC-2026-4064)
A vulnerability categorized as problematic has been discovered in Mozilla Thunderbird up to 158.0.0. This issue affects some unknown processing. The manipulation results in use after free. This vulnerability is identified as CVE-2026-113869
CVE-2026-113868 | Mozilla Thunderbird up to 158.0.0 NTLM Authentication out-of-bounds (WID-SEC-2026-4064)
A vulnerability was found in Mozilla Thunderbird up to 158.0.0. It has been rated as problematic. This vulnerability affects unknown code of the component NTLM Authentication. The manipulation leads to out-of-bounds read. This vulnerability
CVE-2026-113867 | Mozilla Thunderbird up to 158.0.0 Chat injection (WID-SEC-2026-4064)
A vulnerability was found in Mozilla Thunderbird up to 158.0.0. It has been declared as problematic. This affects an unknown part of the component Chat. Executing a manipulation can lead to injection. The identification of this vulnerabilit
CVE-2026-113866 | Mozilla Thunderbird up to 158.0.0 AutoDiscover service cleartext transmission (WID-SEC-2026-4064)
A vulnerability was found in Mozilla Thunderbird up to 158.0.0. It has been classified as problematic. Affected by this issue is some unknown functionality of the component AutoDiscover service. Performing a manipulation results in cleartex
Nach Sicherheitslücke: Internetseite des Saalekreises bleibt vorsorglich offline
Cybersicherheit im Saalekreis Nach Sicherheitslücke: Internetseite des Saalekreises bleibt vorsorglich offline. Nach den Warnungen vor einer ... Weiterlesen
Webseiten-Abschaltung "richtig": Bund stellt bisher keine Angriffe nach PHP-Sicherheitslücke fest
... IT-Sicherheitsbehörde. "Dennoch können erfolgreiche Angriffe derzeit ... Auch der US-Geheimdienst National Security Agency (NSA) mahnte wegen ... Weiterlesen
PHP-Sicherheitslücke: IT-Experten fordern Maßnahmen über Updates hinaus - Tagesschau
Thomas Boele, Sicherheitsexperte beim Softwareunternehmen Check Point, warnte Systembetreiber davor, sich in falscher Sicherheit zu wiegen. Er ... Weiterlesen
CVE-2026-55422 | conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML, with no sanitization (the project has no DOMPurify or equivalent dependency). JSON files are produced automatically by the conda-forge autotick bot (regro/cf-scripts) while it processes every conda-forge feedstock and its upstream source artifact
conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML, with no sanitization (t
CVE-2026-54711 | pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the debug level. This issue has been patched in version 2.7.1.
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the
CVE-2026-63120 | pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with write access to the backup object storage (such as S3, GCS, or Azure) to execute arbitrary file writes and directory creation outside the designated PostgreSQL data directory (pgdata). When a database administrator executes a restore operation (via pghoard_restore
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with write access to the backup object storage
CVE-2026-57117 | PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgent compute bridging wraps read_file, list_files, and write_file when a compute provider is attached. The bridge converts those file operations into shell command strings using raw path arguments, then sends those strings to shell-backed compute providers. An attacker who can influence a file-tool path argument can break out of the quoted path
PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgent compute bridging wraps read_file, list_files, and write_file when a compute provider is attached. The bridge converts
Sicherheitslücke in PHP: KI kann rund um die Uhr Gefahren verbreiten | ndr.de
Das Bundesamt für Sicherheit in der Informationstechnik gab eine offizielle Cybersicherheitswarnung heraus und riet zu Sicherheitsupdates. Auch ... Weiterlesen
CVE-2026-57146 | PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the same A2U subscription and event routes without authentication when the operator starts the documented CLI entrypoint. The current CLI wrapper does not expose --api-key, does not install the common API-key middleware, and doe
PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the s
CVE-2026-57144 | PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, praisonai.sandbox.SandlockSandbox is documented and implemented as the kernel-enforced sandbox backend for untrusted code. Its SandboxConfig.native() path lets callers configure allowed filesystem paths and network=False. On systems where the optional sandlock module imports but reports that Landlock is unavailable, SandlockSandbox.execute() and run_command() do not fail c
PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, praisonai.sandbox.SandlockSandbox is documented and implemented as the kernel-enforced sandbox backend for untrusted code. Its SandboxConfig.native() pa
CVE-2026-57142 | PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.61, PraisonAI recipe execution has a dangerous-tool policy that is supposed to block default-denied tools unless the caller explicitly passes allow_dangerous_tools=True. That policy only checks tools declared in TEMPLATE.yaml requires.tools. For steps-based recipes, the actual execution path loads workflow.yaml with YAMLWorkflowParser. That parser resolves agent-level tools: de
PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.61, PraisonAI recipe execution has a dangerous-tool policy that is supposed to block default-denied tools unless the caller explicitly passes allow_dangerous
CVE-2026-57121 | PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents, issues, labels, issue dependencies, and issue-label attachments — created by the workspace owner or other members. All six content DELETE endpoints enforce workspace membership but perform no ownership or role check. A single malicious or compromised member account can wipe an ent
PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents, issues, labels, issue dependencies, and issue-label attach
CVE-2026-57116 | PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in releases after the published patched version for GHSA-pm96-6xpr-978x / CVE-2026-40151. The chat route directly calls agent.chat(request.message). No-auth and wrong-bearer requests both execute the deployed agent. This is broader than passive metadata disclosure. In any deployment wh
PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in releases after the published patched version for GHSA-pm96-6
CVE-2026-57114 | PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network request. When a job completes, _send_webhook() passes the original hostname to httpx.AsyncClient.post() with no send-time validation, IP pinning,
PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again when the internal Job object is constructed. That validation blo
CVE-2026-57113 | PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, PraisonAI's template loader accepts GitHub template URIs with refs, for example github:owner/repo/[email protected]. The resolver stores the user-controlled template path and ref verbatim, and the cache layer later joins those values into ~/.praison/cache/templates/github/<owner>/<repo>/<template>/<ref> without normalizing each segment or checking that the final path remains i
PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, PraisonAI's template loader accepts GitHub template URIs with refs, for example github:owner/repo/[email protected]. The resolver stores the user-controlled
CVE-2026-56840 | PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.HTTPApproval renders pending tool approval arguments directly into the approval dashboard HTML. An attacker-controlled tool argument can inject JavaScript into that page. When a human opens the approval URL to inspect the risky tool request, the script runs in the dashboard origin and can POST to the same request's /approve/{request_id}/decide endpoint, causin
PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.HTTPApproval renders pending tool approval arguments directly into the approval dashboard HTML. An attacker-controlled tool argument can in
CVE-2026-56838 | PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, PraisonAI recipe execution blocks default-denied dangerous tools unless the caller explicitly passes allow_dangerous_tools=True. The normal recipe.run() path enforces this with _check_tool_policy(). The streaming path, recipe.run_stream(), loads the same recipe, checks dependencies, and then calls _execute_recipe() without running the dangerous-tool policy check. As a resul
PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, PraisonAI recipe execution blocks default-denied dangerous tools unless the caller explicitly passes allow_dangerous_tools=True. The normal recipe.run()
CVE-2026-56837 | PraisonAI is a multi-agent teams system. From version 4.6.56 to before version 4.6.59, PraisonAI's LinearBot starts a public webhook listener on 0.0.0.0 and treats LINEAR_WEBHOOK_SECRET as optional. When the secret is absent, startup only logs a warning and _handle_webhook() skips Linear-Signature verification entirely. An unauthenticated network caller who can reach the webhook endpoint can submit a forged Linear-Event: AgentSession request. The forged reque
PraisonAI is a multi-agent teams system. From version 4.6.56 to before version 4.6.59, PraisonAI's LinearBot starts a public webhook listener on 0.0.0.0 and treats LINEAR_WEBHOOK_SECRET as optional. When the secret is absent, startup only l
CVE-2026-56836 | PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe command is registered in the Typer app and praisonai recipe serve dispatches to the deprecated Typer command in src/praisonai/praisonai/cli/commands/recipe.py. That Typer command can start the Recipe HTTP server on a non-localhost interface with no authentication. It prints a deprecati
PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe command is registered in the Typer app and praisonai recipe ser
CVE-2026-56835 | PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_users, allowed_channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app_mention event handler. A Slack workspace user who can mention the bot in a channel where the Slack app is present can trigger the configured PraisonAI agent even when: the sender is not in
PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_users, allowed_channels, and unknown-user pairing policy in the normal Slack message event handler,
CVE-2026-56834 | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context Discovery feature exposes artifact helper tools through ctx.get_tools(). The implemented artifact tools do not enforce that the supplied artifact_path is an artifact created by the configured store or that it lives under the configured artifact base directory. Instead, artifact_head, artifact_tail, artifact_grep, and artifact_chunk wrap the caller
PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context Discovery feature exposes artifact helper tools through ctx.get_tools(). The implemented artifact tools do not enforce that th
CVE-2026-56833 | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context module provides filesystem-backed history and terminal-log storage. The module also exports agent-callable tool factories. Those tools accept run_id and agent_id arguments from the tool caller. The underlying stores join those values into filesystem paths without rejecting absolute paths or .. traversal. Because run_id can be an absolute path and
PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context module provides filesystem-backed history and terminal-log storage. The module also exports agent-callable tool factories. Tho
CVE-2026-56832 | PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.DiscordApproval approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord channel whose text is classified as approval, such as yes. As a result, any user who can post in the configured approval channel can approve a pending high-risk tool call by sending yes after the approval message appears. the same PoV also sh
PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.DiscordApproval approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord channel whose text
CVE-2026-112904 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 and prior, the nextRestore() and nextBackup() functions in the backup controller accept a file GET parameter and concatenate it directly to DIR_BACKUP without calling sanitizeFileName(). This allows an authenticated administrator to read arbitrary files on the server (via nextRestore) and write SQL dump content to arbitrary locations (v
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 and prior, the nextRestore() and nextBackup() functions in the backup controller accept a file GET parameter and con
CVE-2026-115727 | AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug debugger PIN can execute Python code and operating system commands with llm_server privileges.
AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug deb
CVE-2026-115726 | Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=True after model replies or /editor use, running commands with the victim's privileges.
Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or edi