•32 minutes ago•CVE-2026-61439
7.5CVE-2026-61439: Prompt Injection Defense Bypass in PraisonAI InjectionDefense Engine
This report provides a comprehensive technical analysis of CVE-2026-61439 (GHSA-fj8f-m44g-c479), a prompt injection defense bypass vulnerability in the PraisonAI multi-agent framework. In versions prior to 4.6.78, the InjectionDefense scanner threshold defaulted to CRITICAL. This allowed single-vector prompt injections classified as HIGH severity (e.g., direct instruction overrides or financial manipulations) to pass through unblocked, enabling attackers to extract system prompts and execute unauthorized agent tools.
2 views•7 min read
•about 2 hours ago•CVE-2026-104890
7.2CVE-2026-104890: Remote Code Execution via Mixed-Case File Upload Bypass in Kunstmaan CMS MediaBundle
Kunstmaan CMS MediaBundle prior to version 7.3.2 contains a critical file upload vulnerability where case-sensitive extension checks can be bypassed using mixed-case file extensions. Because extension normalization occurs after the validation routine, files with mixed-case executable extensions (such as pHp) bypass checks but are stored with normalized lowercase executable extensions, allowing authenticated administrators to achieve remote code execution.
7 views•6 min read
•about 3 hours ago•CVE-2026-106443
8.8CVE-2026-106443: Remote Code Execution in WeasyPrint via Unvalidated Pillow EPS Processing
A critical remote code execution vulnerability was identified in WeasyPrint prior to version 70.0. When compiling HTML containing a malicious Encapsulated PostScript (EPS) graphic on a host with Ghostscript installed, Pillow invokes Ghostscript to process the image, executing arbitrary PostScript commands.
6 views•8 min read
•about 4 hours ago•CVE-2026-106489
6.5CVE-2026-106489: Authorization Bypass via Path Traversal in Spotify Backstage TechDocs Backend
An authorization bypass vulnerability in the Spotify Backstage TechDocs backend plugin allows authenticated attackers with access to at least one valid TechDocs site to read arbitrary static documentation from other entities. This occurs due to un-sanitized relative subpaths passing directly to external storage drivers.
9 views•7 min read
•about 4 hours ago•CVE-2026-106502
5.3CVE-2026-106502: Sensitive Information Exposure in Backstage Scaffolder Backend
The @backstage/plugin-scaffolder-backend package prior to version 4.1.0 is vulnerable to sensitive information exposure in Scaffolder task failure events. Under specific template and failure conditions, an authenticated user can retrieve backend-managed credentials, such as VCS access tokens and API keys, from affected task execution events and stored database logs. This vulnerability has been remediated in version 4.1.0 of the package and is bundled with the Backstage platform release v1.54.6.
8 views•6 min read
•about 6 hours ago•CVE-2026-61436
8.6CVE-2026-61436: Missing Webhook Signature Verification in PraisonAI AgentMail Endpoint
A critical security flaw exists in PraisonAI before version 4.6.78 when operating in AgentMail webhook mode. The application processes incoming POST requests without checking for cryptographic signatures, allowing unauthenticated attackers to forge emails, spoof identities, and force AI agents to execute unauthorized operations.
9 views•7 min read
•about 7 hours ago•CVE-2026-62179
6.5CVE-2026-62179: Missing Authorization in praisonai-platform Dependency Deletion Route
A missing authorization vulnerability (CWE-862) exists in praisonai-platform versions prior to 0.1.9, allowing low-privileged workspace members to delete planning dependencies on issues owned by administrators by routing the deletion request through an attacker-owned issue.
8 views•6 min read
•about 7 hours ago•CVE-2026-46438
6.5CVE-2026-46438: Broken Object Level Authorization in wger Workout Log Endpoint
CVE-2026-46438 is a critical Broken Object Level Authorization (BOLA) / Insecure Direct Object Reference (IDOR) vulnerability identified in the wger fitness manager prior to version 2.6. An authenticated attacker can exploit a missing authorization check on the slot_entry API parameter to inject unauthorized workout logs into another user's training schedule. This results in the corruption of the target user's automated progressive-overload calculations.
12 views•5 min read
•about 14 hours ago•CVE-2026-105795
3.1CVE-2026-105795: Unvalidated Custom Extension Path Traversal in Microsoft Kiota
CVE-2026-105795 (GHSA-6gw6-rv2g-25mg) is a critical path traversal vulnerability in Microsoft Kiota, an OpenAPI-based HTTP client and plugin manifest generator. In affected versions (1.25.1 to < 1.35.0), Kiota propagates the unvalidated `x-ai-capabilities.response_semantics.oauth_card_path` vendor extension directly into generated API plugin manifests, leading to potential path traversal exploitation by downstream consumers.
6 views•6 min read
•about 15 hours ago•CVE-2026-105805
6.9CVE-2026-105805: Sorting-Based Side-Channel Information Disclosure in Payload CMS
CVE-2026-105805 is an authorization bypass and information disclosure vulnerability in Payload CMS. Before version 3.88.0, user-controlled sorting was executed at the database level before field-level access control rules and data redaction were applied. This allowed unauthorized users to reconstruct restricted field values through a sorting side-channel.
9 views•6 min read
•about 15 hours ago•CVE-2026-105847
7.1CVE-2026-105847: Information Disclosure via Polymorphic Join Queries in Payload CMS
Payload CMS is subject to an information disclosure vulnerability where users with query permissions can bypass field-level access controls. By leveraging polymorphic join filters, an attacker can perform blind-inference queries to retrieve restricted or hidden fields such as password reset tokens.
7 views•6 min read
•about 17 hours ago•CVE-2026-105846
6.1CVE-2026-105846: Open Redirect in Payload CMS via Control Character Bypass
An open redirect vulnerability exists in Payload CMS within its Next.js-based authentication routing components. The sanitization utility fails to properly account for control characters and ambiguous encodings, allowing unauthenticated attackers to redirect users to external malicious domains after successful authentication.
7 views•6 min read