Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 547 of 677
- 9.8 /10 CriticalCVE-2026-57147 No auth
PraisonAI praisonai-platform - Authentication Bypass
PraisonAI praisonai-platform < 0.1.6 contains a broken authentication caused by default JWT_SECRET and missing production guard in auth_service.py, letting remote unauthenticated attackers forge tokens and bypass authentication, exploit requires PLATFORM_JWT_SECRET and PLATFORM_ENV unset.
- 9.8 /10 CriticalCVE-2026-57141 No auth
PraisonAI - Command Injection
PraisonAI < 1.7.2 contains a command injection caused by execution of model-generated JavaScript using new Function() and with(sandbox), letting attackers execute OS commands and access host process capabilities, exploit requires attacker to influence the code argument.
- 9.4 /10 CriticalCVE-2026-57140 No auth
PraisonAI - Authentication Bypass
PraisonAI 1.6.0 to 1.7.2 contains an authentication bypass caused by missing authentication middleware on GET /api/agents and POST /api/chat endpoints, letting remote attackers access agent data and invoke agents, exploit requires network access to the service.
- 9.8 /10 CriticalCVE-2026-57139
PraisonAI - Authentication Bypass
PraisonAI 1.5.0 to 1.7.2 contains an authentication bypass caused by unrestricted HTTP POST requests in MCPServer.startHttp(), letting remote attackers execute server-side handlers with elevated privileges or disclose data, exploit requires network access to the port.
- 9.9 /10 CriticalCVE-2026-57138 Auth required
PraisonAI - Remote Code Execution
PraisonAI 1.4.0 to 1.7.2 contains a remote code execution caused by insecure sandboxing in codeMode using new Function() and bypassing restrictions, letting attackers execute arbitrary code and access host resources, exploit requires control of codeMode input.
- 8.8 /10 HighCVE-2026-57137 Auth required
PraisonAI - Command Injection
PraisonAI 1.4.0 to 1.7.2 contains a command injection caused by passing executable tools to generateText() before onToolCall approval, letting attackers execute rejected commands or operations, exploit requires use of onToolCall approval callback.
- 8.8 /10 HighCVE-2026-57136 Auth required
PraisonAI - Command Injection
PraisonAI 1.2.3 to 1.7.2 contains a command injection caused by improper validation of only the first executable in commands, letting attackers execute arbitrary commands with PraisonAI process privileges, exploit requires command input.
- 7.6 /10 HighCVE-2026-57135 Auth required
PraisonAI - Broken Access Control
PraisonAI 1.2.3 to 1.7.2 contains a broken access control vulnerability caused by improper network isolation in SandboxExecutor's buildEnv() injecting invalid proxy variables, letting attackers bypass network isolation and access internal or external services.
- 8.2 /10 HighCVE-2026-57134 No auth
PraisonAI - Authentication Bypass
PraisonAI 1.5.1 to 1.7.2 contains a broken authentication caused by improper validation of Basic and OAuth policies in MCPSecurity.evaluatePolicy(), letting attackers with invalid credentials access protected MCP tools, exploit requires use of Basic or OAuth policies with non-empty Authorization header.
- 8.8 /10 HighCVE-2026-57133 Auth required
PraisonAI - Command Injection
PraisonAI 1.5.1 to 1.7.2 contains a command injection caused by improper validation of shell() helper in utility-tools.ts, letting attackers execute arbitrary commands with PraisonAI process privileges, exploit requires crafted command input.
- 8.3 /10 HighCVE-2026-57112
PraisonAI praisonaiagents - DNS Rebinding
PraisonAI praisonaiagents 0.6.0 to 1.6.59 and PraisonAI 3.10.0 to 4.6.59 contain a DNS rebinding vulnerability caused by lack of Host, Origin, or authentication enforcement in SseServerTransport on legacy /sse and /messages/ endpoints, letting malicious websites invoke registered tools with server user privileges, exploit requires reachable local or internal SSE server.
- 7.8 /10 HighCVE-2026-57014 Auth required
phNxpNciHal_ext - Out of Bounds Write
phNxpNciHal_ext.cc contains an out-of-bounds write caused by missing bounds check in phNxpNciHal_ext_process_nfc_init_rsp, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.
- 8.4 /10 HighCVE-2026-57012 No auth
Setup Wizard - Privilege Escalation
Setup Wizard contains a privilege escalation caused by missing permission check in remote package install, letting remote attackers escalate privileges without additional execution rights, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-57008 No auth
Modem - Information Disclosure
Modem contains an information disclosure caused by improper input validation, letting remote attackers disclose sensitive information without needing additional privileges or user interaction.
- 8.8 /10 HighCVE-2026-56997 Auth required
VP9 - Out of Bounds Write
VP9 hardware decoder contains an out-of-bounds write caused by missing bounds check in Av1DecodeFrameTag, letting remote attackers escalate privileges without additional execution rights, exploit requires no user interaction.