Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-16599 |
|
Vulnerability in dos (CVE-2026-16599)
vulnerability in dos (CVE-2026-16599). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70551 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-70551 (CVE-2026-70551)
SSRF in CVE-2026-70551 (CVE-2026-70551). Confidential information can be exposed externally.
|
| CVE-2026-16286 |
|
Unrestricted File Upload in CVE-2026-16286 (CVE-2026-16286)
vulnerability in CVE-2026-16286 (CVE-2026-16286). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69104 |
|
Vulnerability in CVE-2026-69104 (CVE-2026-69104)
vulnerability in CVE-2026-69104 (CVE-2026-69104). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15310 |
|
Vulnerability in CVE-2026-15310 (CVE-2026-15310)
vulnerability in CVE-2026-15310 (CVE-2026-15310). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79622 |
|
Path Traversal in path-traversal (CVE-2026-79622)
path traversal in path-traversal (CVE-2026-79622). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79623 |
|
Command Injection in CVE-2026-79623 (CVE-2026-79623)
command injection in CVE-2026-79623 (CVE-2026-79623). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75803 |
|
Vulnerability in CVE-2026-75803 (CVE-2026-75803)
vulnerability in CVE-2026-75803 (CVE-2026-75803). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78885 |
|
Authentication Bypass in CVE-2026-78885 (CVE-2026-78885)
authentication bypass in CVE-2026-78885 (CVE-2026-78885). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78887 |
|
Vulnerability in CVE-2026-78887 (CVE-2026-78887)
vulnerability in CVE-2026-78887 (CVE-2026-78887). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79406 |
|
Vulnerability in CVE-2026-79406 (CVE-2026-79406)
vulnerability in CVE-2026-79406 (CVE-2026-79406). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79655 |
|
Vulnerability in path-traversal (CVE-2026-79655)
vulnerability in path-traversal (CVE-2026-79655). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57863 |
|
Path Traversal in path-traversal (CVE-2026-57863)
path traversal in path-traversal (CVE-2026-57863). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63076 |
|
Vulnerability in dos (CVE-2026-63076)
vulnerability in dos (CVE-2026-63076). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63074 |
|
Vulnerability in dos (CVE-2026-63074)
vulnerability in dos (CVE-2026-63074). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14457 |
|
Vulnerability in dos (CVE-2026-14457)
vulnerability in dos (CVE-2026-14457). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77998 |
|
Vulnerability in CVE-2026-77998 (CVE-2026-77998)
vulnerability in CVE-2026-77998 (CVE-2026-77998). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63073 |
|
Vulnerability in dos (CVE-2026-63073)
vulnerability in dos (CVE-2026-63073). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63075 |
|
Vulnerability in dos (CVE-2026-63075)
vulnerability in dos (CVE-2026-63075). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78886 |
|
Path Traversal in path-traversal (CVE-2026-78886)
path traversal in path-traversal (CVE-2026-78886). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78581 |
|
Vulnerability in CVE-2026-78581 (CVE-2026-78581)
vulnerability in CVE-2026-78581 (CVE-2026-78581). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54874 |
|
Vulnerability in dos (CVE-2026-54874)
vulnerability in dos (CVE-2026-54874). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18798 |
|
Vulnerability in dos (CVE-2026-18798)
vulnerability in dos (CVE-2026-18798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63072 |
|
Out-of-Bounds Write in dos (CVE-2026-63072)
out-of-bounds write in dos (CVE-2026-63072). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55546 |
|
Code Injection in qwed-mcp (CVE-2026-55546)
code injection in qwed-mcp (CVE-2026-55546). Successful exploitation can lead to full system takeover. Exploitable via ``global_dict``. Mitigation: upgrade to `0.2.1` or later.
|
| CVE-2026-55536 |
|
Vulnerability in PraisonAI (CVE-2026-55536)
vulnerability in PraisonAI (CVE-2026-55536). Confidential information can be exposed externally. Exploitable via ``start_session``. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55532 |
|
Vulnerability in PraisonAI (CVE-2026-55532)
vulnerability in PraisonAI (CVE-2026-55532). Data can be tampered with by attackers. Exploitable via `Host header`. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55624 |
|
Vulnerability in CVE-2026-55624 (CVE-2026-55624)
vulnerability in CVE-2026-55624 (CVE-2026-55624). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55533 |
|
Authentication Bypass in PraisonAI (CVE-2026-55533)
authentication bypass in PraisonAI (CVE-2026-55533). Data can be tampered with by attackers. Exploitable via `POST /v1/recipes/run`. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55539 |
|
Vulnerability in PraisonAI (CVE-2026-55539)
vulnerability in PraisonAI (CVE-2026-55539). Risk of unauthorized operations or information disclosure. Exploitable via `GET /agents`. Mitigation: upgrade to `4.6.34` or later.
|
| CVE-2026-55527 |
|
Path Traversal in praisonaiagents (CVE-2026-55527)
path traversal in praisonaiagents (CVE-2026-55527). Data can be tampered with by attackers. Exploitable via `POST /jobs`. Mitigation: upgrade to `1.6.58` or later.
|
| CVE-2026-55541 |
|
Vulnerability in PraisonAI (CVE-2026-55541)
vulnerability in PraisonAI (CVE-2026-55541). Risk of unauthorized operations or information disclosure. Exploitable via `POST /agents`. Mitigation: upgrade to `4.6.34` or later.
|
| CVE-2026-55535 |
|
Vulnerability in PraisonAI (CVE-2026-55535)
vulnerability in PraisonAI (CVE-2026-55535). Confidential information can be exposed externally. Exploitable via ``webhook_url``. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55537 |
|
Vulnerability in PraisonAI (CVE-2026-55537)
vulnerability in PraisonAI (CVE-2026-55537). Confidential information can be exposed externally. Exploitable via `POST /callback`. Mitigation: upgrade to `4.5.126` or later.
|
| CVE-2026-55538 |
|
Vulnerability in PraisonAI (CVE-2026-55538)
vulnerability in PraisonAI (CVE-2026-55538). Risk of unauthorized operations or information disclosure. Exploitable via `POST /agents`. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55540 |
|
Path Traversal in PraisonAI (CVE-2026-55540)
path traversal in PraisonAI (CVE-2026-55540). Confidential information can be exposed externally. Exploitable via ``praisonai.code``. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55530 |
|
Vulnerability in praisonaiagents (CVE-2026-55530)
vulnerability in praisonaiagents (CVE-2026-55530). Data can be tampered with by attackers. Exploitable via ``ast_grep_rewrite``. Mitigation: upgrade to `1.6.58` or later.
|
| CVE-2026-55534 |
|
Vulnerability in PraisonAI (CVE-2026-55534)
vulnerability in PraisonAI (CVE-2026-55534). Risk of unauthorized operations or information disclosure. Exploitable via `POST /agents`. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55526 |
|
Vulnerability in praisonaiagents (CVE-2026-55526)
vulnerability in praisonaiagents (CVE-2026-55526). Confidential information can be exposed externally. Exploitable via ``scrape_page``. Mitigation: upgrade to `1.6.58` or later.
|
| CVE-2026-55531 |
|
Vulnerability in PraisonAI (CVE-2026-55531)
vulnerability in PraisonAI (CVE-2026-55531). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55528 |
|
Vulnerability in praisonaiagents (CVE-2026-55528)
vulnerability in praisonaiagents (CVE-2026-55528). Data can be tampered with by attackers. Exploitable via `GET /info`. Mitigation: upgrade to `1.6.58` or later.
|
| CVE-2026-55529 |
|
Vulnerability in PraisonAI (CVE-2026-55529)
vulnerability in PraisonAI (CVE-2026-55529). Confidential information can be exposed externally. Exploitable via ``Origin``. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55525 |
|
SSRF (Server-Side Request Forgery) in praisonaiagents (CVE-2026-55525)
SSRF in praisonaiagents (CVE-2026-55525). Confidential information can be exposed externally. Exploitable via ``web_crawl``. Mitigation: upgrade to `1.6.58` or later.
|
| CVE-2026-79673 |
|
Authorization Flaw in CVE-2026-79673 (CVE-2026-79673)
vulnerability in CVE-2026-79673 (CVE-2026-79673). Confidential information can be exposed externally. Exploitable via `PUT /user`.
|
| CVE-2026-79672 |
|
Vulnerability in CVE-2026-79672 (CVE-2026-79672)
vulnerability in CVE-2026-79672 (CVE-2026-79672). Data can be tampered with by attackers.
|
| CVE-2026-79671 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-79671 (CVE-2026-79671)
SSRF in CVE-2026-79671 (CVE-2026-79671). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.3` or later.
|
| CVE-2026-79669 |
|
Vulnerability in CVE-2026-79669 (CVE-2026-79669)
vulnerability in CVE-2026-79669 (CVE-2026-79669). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/system/logs`.
|
| CVE-2026-79666 |
|
Vulnerability in CVE-2026-79666 (CVE-2026-79666)
vulnerability in CVE-2026-79666 (CVE-2026-79666). Confidential information can be exposed externally. Exploitable via `GET /api/system/logs`.
|
| CVE-2026-79670 |
|
Unrestricted File Upload in CVE-2026-79670 (CVE-2026-79670)
vulnerability in CVE-2026-79670 (CVE-2026-79670). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79667 |
|
Vulnerability in CVE-2026-79667 (CVE-2026-79667)
vulnerability in CVE-2026-79667 (CVE-2026-79667). Confidential information can be exposed externally. Mitigation: upgrade to `4.4.3` or later.
|