CVE-2026-44338 2

Vulnerability (CVE)

Praison AI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

PraisonAI's legacy Flask API server hard-codes AUTH_ENABLED = False and AUTH_TOKEN = None, leaving endpoints like /agents and /chat reachable without a token in all versions from 2.5.6 through 4.6.33; CVE-2026-44338 carries a CVSS score of 7.3 and is...

Vulnerabilities & Patching

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

Cyber Risks The Hacker News

Microsoft disclosed CVE-2026-42897, a spoofing bug stemming from a cross-site scripting flaw with a CVSS score of 8.1 affecting on-premise Exchange Server, which is under active exploitation in the wild. Microsoft is offering a temporary mitigation through...

Vulnerabilities & Patching