<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-02T03:54:48.017913+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0fc8f986-0684-40ce-ac2d-e963d2e2565d/export</id>
    <title>0fc8f986-0684-40ce-ac2d-e963d2e2565d</title>
    <updated>2026-10-02T03:54:48.058302+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0fc8f986-0684-40ce-ac2d-e963d2e2565d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57123", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmcjkkqrk25", "content": "CVE-2026-57123 - praisonaiagents\nThe PraisonAI MCP server is exposed to the public internet without authentication or origin validation. This allows anyone to access and use the tools\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiagents #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-09-16T04:30:04.964611Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0fc8f986-0684-40ce-ac2d-e963d2e2565d/export"/>
    <published>2026-09-16T04:30:04.964611+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2f9cd995-d2ba-4d81-a055-9b7d171f2e56/export</id>
    <title>2f9cd995-d2ba-4d81-a055-9b7d171f2e56</title>
    <updated>2026-10-02T03:54:48.060855+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2f9cd995-d2ba-4d81-a055-9b7d171f2e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57123", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mviil2byam25", "content": "\ud83d\udea8 CVE-2026-57123 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, ToolsMCPServer.run_sse and launch...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57123\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T16:07:38.449526Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2f9cd995-d2ba-4d81-a055-9b7d171f2e56/export"/>
    <published>2026-09-14T16:07:38.449526+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a929b049-1a43-4a66-a018-d5ae5b2ba3f9/export</id>
    <title>a929b049-1a43-4a66-a018-d5ae5b2ba3f9</title>
    <updated>2026-10-02T03:54:48.060994+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a929b049-1a43-4a66-a018-d5ae5b2ba3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57123", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvighxi6ij2t", "content": "CVE-2026-57123 - praisonaiagents\nThe PraisonAI agents component opens its network interface to all computers and does not require a login or verify where requests originate. Because of this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiagents #mervinpraison #CVE #infosec", "creation_timestamp": "2026-09-14T15:30:07.867826Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a929b049-1a43-4a66-a018-d5ae5b2ba3f9/export"/>
    <published>2026-09-14T15:30:07.867826+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8835ff30-d05e-4f32-a147-01173e47b330/export</id>
    <title>8835ff30-d05e-4f32-a147-01173e47b330</title>
    <updated>2026-10-02T03:54:48.061095+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "8835ff30-d05e-4f32-a147-01173e47b330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57123", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x227-pf99-vffg", "content": "", "creation_timestamp": "2026-07-20T22:36:36.874939Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8835ff30-d05e-4f32-a147-01173e47b330/export"/>
    <published>2026-07-20T22:36:36.874939+00:00</published>
  </entry>
</feed>
