CVE ID :CVE-2026-61445 Published : July 11, 2026, 2:16 p.m. | 10 hours, 16 minutes ago Description :PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to…
CVE-2026-61429 – PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backend
CVE ID :CVE-2026-61429 Published : July 11, 2026, 2:16 p.m. | 10 hours, 16 minutes ago Description :PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers…
CVE-2026-61426 – PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults
CVE ID :CVE-2026-61426 Published : July 11, 2026, 2:16 p.m. | 10 hours, 16 minutes ago Description :PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key…
CVE-2026-44383 – Hydro-Québec Le Circuit Electrique charging station backend Insufficient Session Expiration
CVE ID :CVE-2026-44383 Published : July 10, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Multiple connections to the backend using the same charging station ID are allowed, which could allow an…
CVE-2026-42952 – Hydro-Québec Le Circuit Electrique charging station backend Improper Restriction of Excessive Authentication Attempts
CVE ID :CVE-2026-42952 Published : July 10, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could allow…
CVE-2026-20744 – Hydro-Québec Le Circuit Electrique charging station backend Improper Access Control
CVE ID :CVE-2026-20744 Published : July 10, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation. Severity:…
CVE-2026-14480 – OpenPLC v3 External Control of File Name or Path
CVE ID :CVE-2026-14480 Published : July 10, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy web UI program‑upload workflow….
CVE-2026-57584 – Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS
CVE ID :CVE-2026-57584 Published : July 10, 2026, 10:16 p.m. | 2 hours, 16 minutes ago Description :Phalcon is a high-performance, full-stack PHP framework. Prior to 5.15.0, every Phalcon MVC application built with a…
CVE-2026-55615 – Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879
CVE ID :CVE-2026-55615 Published : July 10, 2026, 12:16 a.m. | 16 minutes ago Description :Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight…
CVE-2026-54771 – Langroid: handle_message() executes user-supplied tool JSON without sender verification
CVE ID :CVE-2026-54771 Published : July 10, 2026, 12:16 a.m. | 16 minutes ago Description :Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.3, a Langroid application exposing a chat…