<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T18:19:27.559643+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9f58239a-40ce-40d8-af2e-fef94a14ba8f/export</id>
    <title>9f58239a-40ce-40d8-af2e-fef94a14ba8f</title>
    <updated>2026-09-14T18:19:27.585375+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9f58239a-40ce-40d8-af2e-fef94a14ba8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp4ahmwr222", "content": "CVE-2026-61436 - PraisonAI before 4.6.78 Missing Webhook Signature Verification\nCVE ID : CVE-2026-61436\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode...", "creation_timestamp": "2026-07-15T16:09:38.445435Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9f58239a-40ce-40d8-af2e-fef94a14ba8f/export"/>
    <published>2026-07-15T16:09:38.445435+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/507819e1-51fe-45d6-af99-dd456f685fea/export</id>
    <title>507819e1-51fe-45d6-af99-dd456f685fea</title>
    <updated>2026-09-14T18:19:27.587323+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "507819e1-51fe-45d6-af99-dd456f685fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3rzyupx2e", "content": "CVE-2026-61433 - PraisonAI before 4.6.78 Code Injection via API deployment generator\nCVE ID : CVE-2026-61433\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 fails to safely encode deployment configuration values when ...", "creation_timestamp": "2026-07-15T16:01:34.562643Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/507819e1-51fe-45d6-af99-dd456f685fea/export"/>
    <published>2026-07-15T16:01:34.562643+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/39aaf71a-adbe-4930-9a14-a8cfa5c8f407/export</id>
    <title>39aaf71a-adbe-4930-9a14-a8cfa5c8f407</title>
    <updated>2026-09-14T18:19:27.587462+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "39aaf71a-adbe-4930-9a14-a8cfa5c8f407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3m2hi2z22", "content": "CVE-2026-61435 - PraisonAI before 4.6.78 Authentication Bypass via Host Header Spoofing\nCVE ID : CVE-2026-61435\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent i...", "creation_timestamp": "2026-07-15T15:58:13.760214Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/39aaf71a-adbe-4930-9a14-a8cfa5c8f407/export"/>
    <published>2026-07-15T15:58:13.760214+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7039ec23-69c4-45bd-9f2a-136bc4a7cead/export</id>
    <title>7039ec23-69c4-45bd-9f2a-136bc4a7cead</title>
    <updated>2026-09-14T18:19:27.587579+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7039ec23-69c4-45bd-9f2a-136bc4a7cead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3bro2kc22", "content": "CVE-2026-61430 - PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawl\nCVE ID : CVE-2026-61430\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl t...", "creation_timestamp": "2026-07-15T15:52:28.881691Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7039ec23-69c4-45bd-9f2a-136bc4a7cead/export"/>
    <published>2026-07-15T15:52:28.881691+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3ced83e3-541f-4dad-acbf-b6f432d19b37/export</id>
    <title>3ced83e3-541f-4dad-acbf-b6f432d19b37</title>
    <updated>2026-09-14T18:19:27.587682+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3ced83e3-541f-4dad-acbf-b6f432d19b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61437", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqg6qh4gow25", "content": "\ud83d\udfe0 CVE-2026-61437 - High (7.8)\n\nPraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61437/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-12T03:00:25.490408Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3ced83e3-541f-4dad-acbf-b6f432d19b37/export"/>
    <published>2026-07-12T03:00:25.490408+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f5fb93bc-682e-4eb3-a13a-e30d6be775ad/export</id>
    <title>f5fb93bc-682e-4eb3-a13a-e30d6be775ad</title>
    <updated>2026-09-14T18:19:27.587786+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f5fb93bc-682e-4eb3-a13a-e30d6be775ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61434", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqfy24w4np2r", "content": "\ud83d\udfe0 CVE-2026-61434 - High (8.8)\n\nPraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61434/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-12T01:00:33.829055Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f5fb93bc-682e-4eb3-a13a-e30d6be775ad/export"/>
    <published>2026-07-12T01:00:33.829055+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18cd5f19-440f-4503-afc8-d43b98c1ef66/export</id>
    <title>18cd5f19-440f-4503-afc8-d43b98c1ef66</title>
    <updated>2026-09-14T18:19:27.587889+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18cd5f19-440f-4503-afc8-d43b98c1ef66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61439", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqf5tmpidk2j", "content": "\u2694\ufe0f ATTACKS CVE Notify: \ud83d\udea8 [CVE-2026-61439](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fj8f-m44g-c4...\nhttps://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fj8f-m44g-c479 #InfoSec #CyberAttack #ThreatIntel", "creation_timestamp": "2026-07-11T17:11:38.321564Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18cd5f19-440f-4503-afc8-d43b98c1ef66/export"/>
    <published>2026-07-11T17:11:38.321564+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c3ac97c0-73a6-434e-bbd0-c9a6015f9a61/export</id>
    <title>c3ac97c0-73a6-434e-bbd0-c9a6015f9a61</title>
    <updated>2026-09-14T18:19:27.587986+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c3ac97c0-73a6-434e-bbd0-c9a6015f9a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqf33uxyh32i", "content": "CVE-2026-61439 - PraisonAI before 4.6.78 Prompt Injection Defense Bypass\nCVE ID : CVE-2026-61439\n \n Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the bloc...", "creation_timestamp": "2026-07-11T16:22:33.709300Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c3ac97c0-73a6-434e-bbd0-c9a6015f9a61/export"/>
    <published>2026-07-11T16:22:33.709300+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/780feb23-2a68-41ec-a9a6-3ed5d3c7e0b8/export</id>
    <title>780feb23-2a68-41ec-a9a6-3ed5d3c7e0b8</title>
    <updated>2026-09-14T18:19:27.588084+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "780feb23-2a68-41ec-a9a6-3ed5d3c7e0b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61439", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqewlowpp32d", "content": "\ud83d\udfe0 CVE-2026-61439 - High (7.5)\n\nPraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the bl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61439/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T15:02:03.026868Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/780feb23-2a68-41ec-a9a6-3ed5d3c7e0b8/export"/>
    <published>2026-07-11T15:02:03.026868+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eaff400b-2fb0-4c40-a8c7-cda1988c8905/export</id>
    <title>eaff400b-2fb0-4c40-a8c7-cda1988c8905</title>
    <updated>2026-09-14T18:19:27.588185+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eaff400b-2fb0-4c40-a8c7-cda1988c8905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61439", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqeuscng642d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61439 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FA0902A0-9243-41EE-AF11-59E00784A489", "creation_timestamp": "2026-07-11T14:29:50.029869Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eaff400b-2fb0-4c40-a8c7-cda1988c8905/export"/>
    <published>2026-07-11T14:29:50.029869+00:00</published>
  </entry>
</feed>
