Yazoul - Cybersecurity Alerts13h ago

🔴 New security advisory:

CVE-2026-44336 affects Praison Praisonai.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-44336-praisonai-path-traversal-leads-to-rce

#Cybersecurity #PatchNow #InfoSecCommunity

PraisonAI path traversal leads to RCE (CVE-2026-44336)

CVE-2026-44336: Critical path traversal in PraisonAI 4.6.33 and earlier allows arbitrary file write via MCP tools, leading to unauthenticated RCE. Update to 4.6.34 immediately.

Yazoul Security
Yazoul - Cybersecurity Alerts13h ago

🔴 New security advisory:

CVE-2026-44336 affects Praison Praisonai.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-44336-praisonai-path-traversal-leads-to-rce

#Cybersecurity #PatchNow #InfoSecCommunity

PraisonAI path traversal leads to RCE (CVE-2026-44336)

CVE-2026-44336: Critical path traversal in PraisonAI 4.6.33 and earlier allows arbitrary file write via MCP tools, leading to unauthenticated RCE. Update to 4.6.34 immediately.

Yazoul Security
Yazoul - Cybersecurity Alerts21h ago

🔴 New security advisory:

CVE-2026-44335 affects Praison Praisonaiagents.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-44335-praisonai-ssrf-via-url-bypass

#Cybersecurity #PatchNow #InfoSecCommunity

PraisonAI SSRF via URL bypass (CVE-2026-44335)

CVE-2026-44335: Critical SSRF in PraisonAI pre-1.6.32 lets attackers bypass URL checks to scan internal networks. Update to version 1.6.32 immediately.

Yazoul Security
Yazoul - Cybersecurity Alerts21h ago

🔴 New security advisory:

CVE-2026-44335 affects Praison Praisonaiagents.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-44335-praisonai-ssrf-via-url-bypass

#Cybersecurity #PatchNow #InfoSecCommunity

PraisonAI SSRF via URL bypass (CVE-2026-44335)

CVE-2026-44335: Critical SSRF in PraisonAI pre-1.6.32 lets attackers bypass URL checks to scan internal networks. Update to version 1.6.32 immediately.

Yazoul Security
Yazoul - Cybersecurity Alerts1d ago

🔴 New security advisory:

CVE-2026-41501 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-41501-electerm-unauthenticated-rce

#Cybersecurity #PatchNow #InfoSecCommunity

electerm unauthenticated RCE (CVE-2026-41501)

CVE-2026-41501: critical RCE in electerm <3.3.8 lets attackers execute commands without authentication via version string injection. Patch by updating to 3.3.8.

Yazoul Security
Yazoul - Cybersecurity Alerts1d ago

🔴 New security advisory:

CVE-2026-41501 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-41501-electerm-unauthenticated-rce

#Cybersecurity #PatchNow #InfoSecCommunity

electerm unauthenticated RCE (CVE-2026-41501)

CVE-2026-41501: critical RCE in electerm <3.3.8 lets attackers execute commands without authentication via version string injection. Patch by updating to 3.3.8.

Yazoul Security
Yazoul - Cybersecurity Alerts1d ago

🚨 New security advisory:

CVE-2026-42454 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-42454-termix-server-rce-via-shell-injection

#Cybersecurity #PatchNow #InfoSecCommunity

Termix server RCE via shell injection (CVE-2026-42454)

CVE-2026-42454: Critical RCE in Termix <2.1.0 lets authenticated attackers execute commands on managed servers via malicious container IDs. Update to 2.1.0 immediately.

Yazoul Security
Yazoul - Cybersecurity Alerts1d ago

🚨 New security advisory:

CVE-2026-42454 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-42454-termix-server-rce-via-shell-injection

#Cybersecurity #PatchNow #InfoSecCommunity

Termix server RCE via shell injection (CVE-2026-42454)

CVE-2026-42454: Critical RCE in Termix <2.1.0 lets authenticated attackers execute commands on managed servers via malicious container IDs. Update to 2.1.0 immediately.

Yazoul Security
Yazoul - Cybersecurity Alerts2d ago

🚨 New security advisory:

CVE-2026-41070 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-41070-openvpn-auth-oauth2-bypasses-sso-auth

#Cybersecurity #PatchNow #InfoSecCommunity

openvpn-auth-oauth2 bypasses SSO auth (CVE-2026-41070)

CVE-2026-41070: openvpn-auth-oauth2 1.26.3 to 1.27.3 bypasses SSO auth in plugin mode, admitting denied clients (CVSS 10.0). Patch now to version 1.27.3.

Yazoul Security
Yazoul - Cybersecurity Alerts2d ago

🚨 New security advisory:

CVE-2026-41070 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-41070-openvpn-auth-oauth2-bypasses-sso-auth

#Cybersecurity #PatchNow #InfoSecCommunity

openvpn-auth-oauth2 bypasses SSO auth (CVE-2026-41070)

CVE-2026-41070: openvpn-auth-oauth2 1.26.3 to 1.27.3 bypasses SSO auth in plugin mode, admitting denied clients (CVSS 10.0). Patch now to version 1.27.3.

Yazoul Security