<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-19T12:36:59.619283+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/64b93853-04a4-4f5c-9567-0ded043fa426/export</id>
    <title>64b93853-04a4-4f5c-9567-0ded043fa426</title>
    <updated>2026-09-19T12:36:59.640674+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "64b93853-04a4-4f5c-9567-0ded043fa426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvme7cocsb2w", "content": "CVE-2026-57140 - praisonai\nVersions 1.6.0 through 1.7.1 of PraisionAI's AgentOS expose two web endpoints that anyone who can reach the server can call without proving who they are. Through these\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #npm #CVE #infosec", "creation_timestamp": "2026-09-16T05:00:08.763452Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/64b93853-04a4-4f5c-9567-0ded043fa426/export"/>
    <published>2026-09-16T05:00:08.763452+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e460e96b-c7d0-4477-ac18-09774018eef4/export</id>
    <title>e460e96b-c7d0-4477-ac18-09774018eef4</title>
    <updated>2026-09-19T12:36:59.644398+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e460e96b-c7d0-4477-ac18-09774018eef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvl4jmnzjz2p", "content": "CVE-2026-57140 - praisonai\nVersions 1.6.0 through 1.7.2 of PraisonAI expose API endpoints that let anyone on the network view agent details and send commands without proving who they are. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #CVE #infosec", "creation_timestamp": "2026-09-15T17:10:05.101375Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e460e96b-c7d0-4477-ac18-09774018eef4/export"/>
    <published>2026-09-15T17:10:05.101375+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/63a8bc49-bb2e-4bc2-a8d0-7552c562545a/export</id>
    <title>63a8bc49-bb2e-4bc2-a8d0-7552c562545a</title>
    <updated>2026-09-19T12:36:59.644798+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "63a8bc49-bb2e-4bc2-a8d0-7552c562545a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57140", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklolpyvl2j", "content": "\ud83d\udea8 CVE-2026-57140 \u2014 CVSS 9.4 CRITICAL\n\nPraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57140\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:08:38.266886Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/63a8bc49-bb2e-4bc2-a8d0-7552c562545a/export"/>
    <published>2026-09-15T12:08:38.266886+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/00d2ce0c-6d8b-4347-a88a-49bb62360bce/export</id>
    <title>00d2ce0c-6d8b-4347-a88a-49bb62360bce</title>
    <updated>2026-09-19T12:36:59.645112+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "00d2ce0c-6d8b-4347-a88a-49bb62360bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57140", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9752-mhqh-h34f", "content": "", "creation_timestamp": "2026-07-20T22:35:59.845185Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/00d2ce0c-6d8b-4347-a88a-49bb62360bce/export"/>
    <published>2026-07-20T22:35:59.845185+00:00</published>
  </entry>
</feed>
