Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-55533 Authentication Bypass in PraisonAI (CVE-2026-55533)
authentication bypass in PraisonAI (CVE-2026-55533). Data can be tampered with by attackers. Exploitable via `POST /v1/recipes/run`. Mitigation: upgrade to `4.6.58` or later.
CVE-2026-55539 Vulnerability in PraisonAI (CVE-2026-55539)
vulnerability in PraisonAI (CVE-2026-55539). Risk of unauthorized operations or information disclosure. Exploitable via `GET /agents`. Mitigation: upgrade to `4.6.34` or later.
CVE-2026-55527 Path Traversal in praisonaiagents (CVE-2026-55527)
path traversal in praisonaiagents (CVE-2026-55527). Data can be tampered with by attackers. Exploitable via `POST /jobs`. Mitigation: upgrade to `1.6.58` or later.
CVE-2026-55541 Vulnerability in PraisonAI (CVE-2026-55541)
vulnerability in PraisonAI (CVE-2026-55541). Risk of unauthorized operations or information disclosure. Exploitable via `POST /agents`. Mitigation: upgrade to `4.6.34` or later.
CVE-2026-55535 Vulnerability in PraisonAI (CVE-2026-55535)
vulnerability in PraisonAI (CVE-2026-55535). Confidential information can be exposed externally. Exploitable via ``webhook_url``. Mitigation: upgrade to `4.6.58` or later.
CVE-2026-55537 Vulnerability in PraisonAI (CVE-2026-55537)
vulnerability in PraisonAI (CVE-2026-55537). Confidential information can be exposed externally. Exploitable via `POST /callback`. Mitigation: upgrade to `4.5.126` or later.
CVE-2026-55538 Vulnerability in PraisonAI (CVE-2026-55538)
vulnerability in PraisonAI (CVE-2026-55538). Risk of unauthorized operations or information disclosure. Exploitable via `POST /agents`. Mitigation: upgrade to `4.6.58` or later.
CVE-2026-55540 Path Traversal in PraisonAI (CVE-2026-55540)
path traversal in PraisonAI (CVE-2026-55540). Confidential information can be exposed externally. Exploitable via ``praisonai.code``. Mitigation: upgrade to `4.6.58` or later.
CVE-2026-55530 Vulnerability in praisonaiagents (CVE-2026-55530)
vulnerability in praisonaiagents (CVE-2026-55530). Data can be tampered with by attackers. Exploitable via ``ast_grep_rewrite``. Mitigation: upgrade to `1.6.58` or later.
CVE-2026-55534 Vulnerability in PraisonAI (CVE-2026-55534)
vulnerability in PraisonAI (CVE-2026-55534). Risk of unauthorized operations or information disclosure. Exploitable via `POST /agents`. Mitigation: upgrade to `4.6.58` or later.
CVE-2026-55526 Vulnerability in praisonaiagents (CVE-2026-55526)
vulnerability in praisonaiagents (CVE-2026-55526). Confidential information can be exposed externally. Exploitable via ``scrape_page``. Mitigation: upgrade to `1.6.58` or later.
CVE-2026-55531 Vulnerability in PraisonAI (CVE-2026-55531)
vulnerability in PraisonAI (CVE-2026-55531). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.6.58` or later.
CVE-2026-55528 Vulnerability in praisonaiagents (CVE-2026-55528)
vulnerability in praisonaiagents (CVE-2026-55528). Data can be tampered with by attackers. Exploitable via `GET /info`. Mitigation: upgrade to `1.6.58` or later.
CVE-2026-55529 Vulnerability in PraisonAI (CVE-2026-55529)
vulnerability in PraisonAI (CVE-2026-55529). Confidential information can be exposed externally. Exploitable via ``Origin``. Mitigation: upgrade to `4.6.58` or later.
CVE-2026-55525 SSRF (Server-Side Request Forgery) in praisonaiagents (CVE-2026-55525)
SSRF in praisonaiagents (CVE-2026-55525). Confidential information can be exposed externally. Exploitable via ``web_crawl``. Mitigation: upgrade to `1.6.58` or later.
CVE-2026-79673 Authorization Flaw in CVE-2026-79673 (CVE-2026-79673)
vulnerability in CVE-2026-79673 (CVE-2026-79673). Confidential information can be exposed externally. Exploitable via `PUT /user`.
CVE-2026-79672 Vulnerability in CVE-2026-79672 (CVE-2026-79672)
vulnerability in CVE-2026-79672 (CVE-2026-79672). Data can be tampered with by attackers.
CVE-2026-79671 SSRF (Server-Side Request Forgery) in CVE-2026-79671 (CVE-2026-79671)
SSRF in CVE-2026-79671 (CVE-2026-79671). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.3` or later.
CVE-2026-79669 Vulnerability in CVE-2026-79669 (CVE-2026-79669)
vulnerability in CVE-2026-79669 (CVE-2026-79669). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/system/logs`.
CVE-2026-79666 Vulnerability in CVE-2026-79666 (CVE-2026-79666)
vulnerability in CVE-2026-79666 (CVE-2026-79666). Confidential information can be exposed externally. Exploitable via `GET /api/system/logs`.
CVE-2026-79670 Unrestricted File Upload in CVE-2026-79670 (CVE-2026-79670)
vulnerability in CVE-2026-79670 (CVE-2026-79670). Risk of unauthorized operations or information disclosure.
CVE-2026-79667 Vulnerability in CVE-2026-79667 (CVE-2026-79667)
vulnerability in CVE-2026-79667 (CVE-2026-79667). Confidential information can be exposed externally. Mitigation: upgrade to `4.4.3` or later.
CVE-2026-79668 Vulnerability in CVE-2026-79668 (CVE-2026-79668)
vulnerability in CVE-2026-79668 (CVE-2026-79668). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/echo/like/`.
CVE-2026-79660 Information Disclosure in c (CVE-2026-79660)
vulnerability in c (CVE-2026-79660). Risk of unauthorized operations or information disclosure.
CVE-2026-79665 Vulnerability in CVE-2026-79665 (CVE-2026-79665)
vulnerability in CVE-2026-79665 (CVE-2026-79665). Successful exploitation can lead to full system takeover.
CVE-2026-79659 SSRF (Server-Side Request Forgery) in CVE-2026-79659 (CVE-2026-79659)
SSRF in CVE-2026-79659 (CVE-2026-79659). Confidential information can be exposed externally.
CVE-2026-79664 Vulnerability in CVE-2026-79664 (CVE-2026-79664)
vulnerability in CVE-2026-79664 (CVE-2026-79664). Confidential information can be exposed externally.
CVE-2026-79662 Open Redirect in CVE-2026-79662 (CVE-2026-79662)
vulnerability in CVE-2026-79662 (CVE-2026-79662). Confidential information can be exposed externally. Exploitable via `POST /api/auth/exchange`. Mitigation: upgrade to `4.7.3` or later.
CVE-2026-79661 Vulnerability in CVE-2026-79661 (CVE-2026-79661)
vulnerability in CVE-2026-79661 (CVE-2026-79661). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/echo/like/`. Mitigation: upgrade to `4.7.3` or later.
CVE-2026-79663 Cross-Site Scripting (XSS) in c (CVE-2026-79663)
cross-site scripting in c (CVE-2026-79663). Risk of unauthorized operations or information disclosure.
CVE-2026-79658 Vulnerability in dos (CVE-2026-79658)
vulnerability in dos (CVE-2026-79658). Risk of unauthorized operations or information disclosure.
CVE-2026-78864 Vulnerability in sqli (CVE-2026-78864)
vulnerability in sqli (CVE-2026-78864). Risk of unauthorized operations or information disclosure.
CVE-2026-78684 Vulnerability in dos (CVE-2026-78684)
vulnerability in dos (CVE-2026-78684). Risk of unauthorized operations or information disclosure.
CVE-2026-79657 Unsafe Deserialization in CVE-2026-79657 (CVE-2026-79657)
vulnerability in CVE-2026-79657 (CVE-2026-79657). Successful exploitation can lead to full system takeover.
CVE-2026-77997 Vulnerability in CVE-2026-77997 (CVE-2026-77997)
vulnerability in CVE-2026-77997 (CVE-2026-77997). Risk of unauthorized operations or information disclosure.
CVE-2026-77824 SQL Injection in wordpress (CVE-2026-77824)
SQL injection in wordpress (CVE-2026-77824). Confidential information can be exposed externally.
CVE-2026-77996 Cross-Site Scripting (XSS) in CVE-2026-77996 (CVE-2026-77996)
cross-site scripting in CVE-2026-77996 (CVE-2026-77996). Risk of unauthorized operations or information disclosure.
CVE-2026-75971 Privilege Escalation in wordpress (CVE-2026-75971)
vulnerability in wordpress (CVE-2026-75971). Successful exploitation can lead to full system takeover. Exploitable via ``import_start``.
CVE-2026-75908 Vulnerability in wordpress (CVE-2026-75908)
vulnerability in wordpress (CVE-2026-75908). Risk of unauthorized operations or information disclosure.
CVE-2026-57909 Code Injection in path-traversal (CVE-2026-57909)
code injection in path-traversal (CVE-2026-57909). Risk of unauthorized operations or information disclosure.
CVE-2026-57910 Vulnerability in CVE-2026-57910 (CVE-2026-57910)
vulnerability in CVE-2026-57910 (CVE-2026-57910). Risk of unauthorized operations or information disclosure.
CVE-2026-17587 Vulnerability in wordpress (CVE-2026-17587)
vulnerability in wordpress (CVE-2026-17587). Risk of unauthorized operations or information disclosure.
CVE-2026-78863 Authentication Bypass in CVE-2026-78863 (CVE-2026-78863)
authentication bypass in CVE-2026-78863 (CVE-2026-78863). Risk of unauthorized operations or information disclosure.
CVE-2026-49845 Code Injection in apache (CVE-2026-49845)
code injection in apache (CVE-2026-49845). Successful exploitation can lead to full system takeover.
CVE-2026-18547 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18547)
cross-site scripting in wordpress (CVE-2026-18547). Risk of unauthorized operations or information disclosure.
CVE-2026-19949 SQL Injection in wordpress (CVE-2026-19949)
SQL injection in wordpress (CVE-2026-19949). Successful exploitation can lead to full system takeover.
CVE-2026-79652 Vulnerability in CVE-2026-79652 (CVE-2026-79652)
vulnerability in CVE-2026-79652 (CVE-2026-79652). Confidential information can be exposed externally.
CVE-2026-53561 Authentication Bypass in apache (CVE-2026-53561)
authentication bypass in apache (CVE-2026-53561). Confidential information can be exposed externally.
CVE-2026-55976 SSRF (Server-Side Request Forgery) in apache (CVE-2026-55976)
SSRF in apache (CVE-2026-55976). Confidential information can be exposed externally.
CVE-2026-59335 Vulnerability in CVE-2026-59335 (CVE-2026-59335)
vulnerability in CVE-2026-59335 (CVE-2026-59335). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →