praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}

CVE-2026-47416

## Summary **Type:** Vertical privilege escalation. The `PATCH /workspaces/{workspace_id}/members/{user_id}` endpoint i

历史摘要 · 未重新核验 · GitHub Advisory

Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks

CVE-2026-0257

Palo Alto Networks 警告称，黑客正在积极利用 PAN-OS GlobalProtect 的身份验证绕过漏洞（CVE-2026-0257）攻击企业网络。该漏洞允许未认证的攻击者绕过 GlobalProtect 门户或网关的身

历史摘要 · 未重新核验 · BleepingComputer

Threat IntelligenceExploitation of KnowledgeDeliver via ViewState Deserialization VulnerabilityBy Mandiant • 7-minute read

Mandiant发布了关于KnowledgeDeliver应用ViewState反序列化漏洞（ViewState Deserialization Vulnerability）的威胁情报报告。该漏洞可能允许攻击者通过精心构造的ViewStat

历史摘要 · 未重新核验 · Mandiant

Stateful Greybox Fuzzing.

该论文针对协议实现中的状态化漏洞（stateful bugs）提出了自动化的灰盒模糊测试方法。许多协议实现是反应式系统，其行为依赖当前状态，只有到达特定状态后输入特定事件序列才能触发漏洞。现有模糊测试方法缺乏对协议状态的明确认知，难以有效覆

历史摘要 · 未重新核验 · USENIX Security

A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function...

CVE-2026-10120

A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSetFirewallRule of

历史摘要 · 未重新核验 · GitHub Advisory

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could...

CVE-2026-9831

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-c

历史摘要 · 未重新核验 · GitHub Advisory

praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role

CVE-2026-47409

## Summary **Type:** Authorization bypass enabling owner lockout. The `DELETE /workspaces/{workspace_id}/members/{user_

历史摘要 · 未重新核验 · GitHub Advisory

praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link)

CVE-2026-47414

## Summary **Type:** Insecure Direct Object Reference. Five label endpoints — `PATCH /workspaces/{workspace_id}/labels/

历史摘要 · 未重新核验 · GitHub Advisory

praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks

CVE-2026-47406

## Summary **Type:** Insecure Direct Object Reference. The dependency endpoints (`POST/GET /workspaces/{workspace_id}/i

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID

CVE-2026-47399

### Summary PraisonAI Platform's workspace-scoped REST routes contain a systemic object-level authorization flaw that a

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation

CVE-2026-47407

## Summary The Platform server exposes resources under `/api/v1/workspaces/{workspace_id}/...` and protects them with a

历史摘要 · 未重新核验 · GitHub Advisory

praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership

CVE-2026-47408

## Summary **Type:** Insecure Direct Object Reference. The `GET /workspaces/{workspace_id}/issues/{issue_id}/activity`

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API

CVE-2026-48169

### Summary The PraisonAI Platform API has two authorization failures that together break workspace isolation. The serv

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

CVE-2026-47391

## Summary The first-party PraisonAI A2A server example combines three behaviors into a remotely exploitable Critical c

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

CVE-2026-47396

### Summary PraisonAI's call server exposes a network-facing agent control API without authentication when `CALL_SERVER

历史摘要 · 未重新核验 · GitHub Advisory

Ivanti Endpoint Manager Mobile代码注入漏洞

Ivanti Endpoint Manager Mobile代码注入漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Huawei Secoway USG firewall weak password

Huawei Secoway USG firewall weak password

历史摘要 · 未重新核验 · 知道创宇 / Seebug

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

CVE-2026-0257

Palo Alto Networks 于2026年5月30日发布警告，称其 PAN-OS 和 Prisma Access 产品中存在一个近期公开的中等严重性漏洞（CVE-2026-0257，CVSS 评分 7.8），目前已被在野积极利用。该

历史摘要 · 未重新核验 · The Hacker News

praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset

CVE-2026-47410

## Summary **Type:** Insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal `"dev

历史摘要 · 未重新核验 · GitHub Advisory

Euler: Detecting Network Lateral Movement via Scalable Temporal Graph Link Prediction.

本文提出 EULER 框架，用于在大规模网络日志中检测横向移动攻击。横向移动是高级持续性威胁（APT）的关键阶段，但传统的检测方法难以处理大规模、动态的网络数据。作者将网络主机日志抽象为时间图，将问题转化为异常边检测。EULER 框架采用模

历史摘要 · 未重新核验 · NDSS