Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,576All CVEsplus 18,890 rejected
- 364Last 24 hours2,985 in the last 7 days
- 17,102Last 30 days1,586 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 47 | 100 | 30 | 0 | 0 | 177 | 178 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-57117 | PraisonAI: Compute-bridged file tools allow shell command injectionMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57146 | PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by defaultMervinPraison · PraisonAI | High7.5 |
| CVE-2026-57144 | PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailableMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57142 | PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yamlMervinPraison · PraisonAI | High7.8 |
| CVE-2026-57121 | PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform APIMervinPraison · PraisonAI | High8.1 |
| CVE-2026-57116 | PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocationMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57114 | PraisonAI: Jobs webhook SSRF protection bypass via DNS rebindingMervinPraison · PraisonAI | High7.2 |
| CVE-2026-57113 | PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletionMervinPraison · PraisonAI | High8.1 |
| CVE-2026-56840 | PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous toolsMervinPraison · PraisonAI | High8.8 |
| CVE-2026-56838 | PraisonAI recipe.run_stream skips dangerous-tool policy enforcementMervinPraison · PraisonAI | High7.8 |
| CVE-2026-56837 | PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missingMervinPraison · PraisonAI | High8.6 |
| CVE-2026-56836 | PraisonAI recipe serve Typer command bypasses the non-localhost authentication guardMervinPraison · PraisonAI | High8.2 |
| CVE-2026-56835 | PraisonAI Slack app_mention bypasses configured user/channel authorizationMervinPraison · PraisonAI | High8.3 |
| CVE-2026-56834 | PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storageMervinPraison · PraisonAI | High7.5 |
| CVE-2026-56833 | PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversalMervinPraison · PraisonAI | High7.5 |
| CVE-2026-56832 | PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvalsMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57118 | PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpointsMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57143 | PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameterMervinPraison · praisonaiagents | High8.8 |
| CVE-2026-62176 | PraisonAI: Code Injection via f-string Interpolation in Deploy API Server GenerationMervinPraison · PraisonAI | Critical9.1 |
| CVE-2026-62179 | PraisonAI: Platform members can delete owner issue dependencies through member-owned related issuesMervinPraison · praisonai-platform | Medium6.5 |
| CVE-2026-57147 | praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgeryMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57148 | praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)MervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57140 | PraisonAI AgentOS exposes unauthenticated agent listing and invocationMervinPraison · PraisonAI | Critical9.4 |
| CVE-2026-57139 | PraisonAI MCPServer exposes unauthenticated HTTP tools/callMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57133 | PraisonAI utility shell safe-command wrapper allowlist bypass via shell chainingMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57135 | PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsMervinPraison · PraisonAI | High7.6 |
| CVE-2026-57134 | PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validationMervinPraison · PraisonAI | High8.2 |
| CVE-2026-57138 | PraisonAI codeMode sandbox escape via Function constructorMervinPraison · PraisonAI | Critical9.9 |
| CVE-2026-57136 | PraisonAI SandboxExecutor allowedCommands bypass via shell chainingMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57137 | PraisonAI AgentLoop onToolCall approval runs after tool executionMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57141 | PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` ToolMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57112 | PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsMervinPraison · PraisonAI | High8.3 |
| CVE-2026-57145 | PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path ValidationMervinPraison · PraisonAI | Critical9.1 |
| CVE-2026-57132 | PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authenticationMervinPraison · PraisonAI | High8.2 |
| CVE-2026-57131 | praisonai: Jobs API exposes agent-execution endpoints with no authenticationMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57124 | PraisonAI UI MCP connect endpoint allows unauthenticated local command executionMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57122 | PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)MervinPraison · PraisonAI | High8.6 |
| CVE-2026-57127 | praisonai: recipe serve auth middleware silently disables itself when no secret is setMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-56839 | PraisonAI Code agent tools fail open without a workspace boundaryMervinPraison · PraisonAI | High7.3 |
| CVE-2026-57119 | PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs APIMervinPraison · PraisonAI | High7.5 |
| CVE-2026-57129 | PraisonAI: Arbitrary File Read via `@file:` Mention Path TraversalMervinPraison · praisonaiagents | High7.5 |
| CVE-2026-57126 | praisonaiagents: SSRF guard validates literal IPs only and never resolves DNSMervinPraison · PraisonAI | High8.5 |
| CVE-2026-57120 | PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunderMervinPraison · praisonaiagents | Medium6.5 |
| CVE-2026-57123 | PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired inMervinPraison · praisonaiagents | Critical9.8 |
| CVE-2026-57130 | PraisonAI: IMAP Command Injection via Unsanitized Email Search ParametersMervinPraison · praisonaiagents | High8.1 |
| CVE-2026-57128 | PraisonAI: Unauthenticated Event Injection via SSE `/publish` EndpointMervinPraison · PraisonAI | Medium4.3 |
| CVE-2026-57115 | PraisonAI: SpiderTools redirect-target SSRF protection bypassMervinPraison · PraisonAI | Medium6.5 |
| CVE-2026-57125 | PraisonAI: Unauthenticated RCE via Jobs API + Approval BypassMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-55536 | Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)MervinPraison · PraisonAI | Critical9.1 |
| CVE-2026-55532 | PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP serverMervinPraison · PraisonAI | High7.6 |