{"vulnerability": "cve-2026-5712", "sightings": [{"uuid": "d8899132-9bee-4bc4-a6b0-e35e8097c0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5712", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mknrwqq5hv2t", "content": "\ud83d\udfe0 CVE-2026-5712 - High (8)\n\nThis vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5712/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-29T19:01:26.156610Z"}, {"uuid": "2dfb79df-8fef-44db-a865-362fb172228a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5712", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ml4ebzet3f2o", "content": "\ud83d\udccc CVE-2026-5712 - This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit th... https://www.cyberhub.blog/cves/CVE-2026-5712", "creation_timestamp": "2026-05-05T14:07:08.238900Z"}, {"uuid": "2c898b7a-6cdc-4428-8a32-cfcacf6cbb4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57129", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2rcg-mm5h-xchx", "content": "", "creation_timestamp": "2026-07-20T22:36:20.104137Z"}, {"uuid": "9b37cf6a-d27c-4f7a-bb1d-74cfb4ca8072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57128", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-35w5-pcw4-jx94", "content": "", "creation_timestamp": "2026-07-20T22:36:22.323871Z"}, {"uuid": "7e00da54-378a-4e69-9b46-0f7a659112dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57127", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4hj-7hfh-g2f4", "content": "", "creation_timestamp": "2026-07-20T22:36:24.641022Z"}, {"uuid": "54806cdc-271d-4703-8b35-c5f9ce0023e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57126", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vxgj-xg5c-p4h7", "content": "", "creation_timestamp": "2026-07-20T22:36:26.963634Z"}, {"uuid": "0175fbcb-1b57-4769-942e-5e08036ab650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57124", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w", "content": "", "creation_timestamp": "2026-07-20T22:36:31.354220Z"}, {"uuid": "4fc2aea4-8142-4e52-be74-34646852caad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57121", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rh39-9c67-59mh", "content": "", "creation_timestamp": "2026-07-20T22:36:39.126011Z"}, {"uuid": "9e9556e1-6e30-47bc-a0cc-4687e7eefd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57125", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4869-x4pr-q22x", "content": "", "creation_timestamp": "2026-07-20T22:36:29.185298Z"}, {"uuid": "94573abc-6e2c-4435-9141-8ae1f3527404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57122", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x92v-rpx6-p6cw", "content": "", "creation_timestamp": "2026-07-20T22:36:33.530998Z"}, {"uuid": "8835ff30-d05e-4f32-a147-01173e47b330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57123", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x227-pf99-vffg", "content": "", "creation_timestamp": "2026-07-20T22:36:36.874939Z"}, {"uuid": "c3f6e450-4741-499b-9d59-6ad806e49aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57127", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcoi3qaq2u", "content": "CVE-2026-57127 - praisonai\nThe PraisonAI recipe serve auth middleware can be disabled unintentionally if no secret key is set. This can leave your API unprotected. To fix this, ensure you set the secret key in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #pip #CVE #infosec", "creation_timestamp": "2026-07-23T16:58:05.923424Z"}, {"uuid": "f70d8e2e-692b-4e9f-aec0-0613ca14c40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57124", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvkwlge2r", "content": "CVE-2026-57124 - praisonai\nPraisonAI's UI management API is accessible without authentication, allowing remote attackers to execute local commands as the PraisonAI UI service user. This issue affects PraisonAI\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #pip #CVE #infosec", "creation_timestamp": "2026-07-23T17:02:03.749337Z"}, {"uuid": "d78b998e-bcb5-404b-90d7-2f6863623ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57125", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvighvct7f2j", "content": "CVE-2026-57125 - praisonai\nVersions of PraisonAI and its agent component before 4.6.59 (and 1.6.59 for agents) let anyone on the internet send a request that runs operating-system commands on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #CVE #infosec", "creation_timestamp": "2026-09-14T15:30:05.248660Z"}, {"uuid": "a929b049-1a43-4a66-a018-d5ae5b2ba3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57123", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvighxi6ij2t", "content": "CVE-2026-57123 - praisonaiagents\nThe PraisonAI agents component opens its network interface to all computers and does not require a login or verify where requests originate. Because of this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiagents #mervinpraison #CVE #infosec", "creation_timestamp": "2026-09-14T15:30:07.867826Z"}, {"uuid": "6dc4ede7-3dad-493e-92be-11b3c6087bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57126", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvii6rhrqp2p", "content": "\ud83d\udfe0 CVE-2026-57126 - High (8.5)\n\nPraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, SpiderTools._validate_u...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-57126/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-14T16:00:52.640390Z"}, {"uuid": "09be5f08-8fe4-440d-8023-f01ba0343c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57129", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvii6yvog62r", "content": "\ud83d\udfe0 CVE-2026-57129 - High (7.5)\n\nPraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, MentionsParser._process...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-57129/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-14T16:01:09.111890Z"}, {"uuid": "2f9cd995-d2ba-4d81-a055-9b7d171f2e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57123", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mviil2byam25", "content": "\ud83d\udea8 CVE-2026-57123 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, ToolsMCPServer.run_sse and launch...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57123\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T16:07:38.449526Z"}, {"uuid": "56dd7c40-2daf-408f-b721-0c8c286814b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57125", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mviilcn2cv2w", "content": "\ud83d\udea8 CVE-2026-57125 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthen...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57125\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T16:07:48.186636Z"}, {"uuid": "70ab156a-f7d5-4171-8570-3f5c6ba98a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57126", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ezafzbwbvzt3j", "content": "CVE-2026-57126 - praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS\nCVE ID : CVE-2026-57126\n \n Published : Sept. 14, 2026, 3:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, SpiderToo...", "creation_timestamp": "2026-09-14T16:17:31.638635Z"}, {"uuid": "ed576d0f-c60b-40fe-8030-17a82f982a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57124", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipbsoeoz24", "content": "\ud83d\udea8 CVE-2026-57124 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57124\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:07:47.167500Z"}, {"uuid": "73ecee4b-48bf-406f-83df-2d2eb03ae85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57127", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipc2mj652b", "content": "\ud83d\udea8 CVE-2026-57127 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWT...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57127\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:07:53.074963Z"}, {"uuid": "cdcf6192-aa4d-4bc1-95be-bbadd9149540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57125", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvjtqil5zp2f", "content": "CVE-2026-57125 - praisonaiagents\nVersions of PraisonAI and PraisonAIAgents older than 4.6.59 and 1.6.59 let anyone send a specially crafted request to run arbitrary system commands. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiagents #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-09-15T05:00:12.174983Z"}, {"uuid": "0fc8f986-0684-40ce-ac2d-e963d2e2565d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57123", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmcjkkqrk25", "content": "CVE-2026-57123 - praisonaiagents\nThe PraisonAI MCP server is exposed to the public internet without authentication or origin validation. This allows anyone to access and use the tools\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiagents #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-09-16T04:30:04.964611Z"}]}