2026.11
CVE-2026-123790: ComfyUI-Easy-Use Unauthenticated RCE via the Preview Save Route
Research / Vulnerability Research
index / archive
Archive
All notes arranged by date. Each post is a place to slow down and verify.
2026.10
CVE-2026-105744: Docling Arbitrary File Read/Write via Untrusted TikZ
Research / Vulnerability Research
2026.09
CVE-2026-86775: knowns Path Traversal via the Document API
Research / Vulnerability Research
2026.09
CVE-2026-86543: knowns Unauthenticated Management API Exposure
Research / Vulnerability Research
2026.09
CVE-2026-86544: knowns Authorization Bypass via Misclassified Code Actions
Research / Vulnerability Research
2026.09
CVE-2026-86542: knowns Unauthenticated Arbitrary File Write via Import Name
Research / Vulnerability Research
2026.09
CVE-2026-86541: knowns Path Traversal in the code.replace MCP Action
Research / Vulnerability Research
2026.09
CVE-2026-86540: knowns Arbitrary Code Execution via the LSP Binary Override
Research / Vulnerability Research
2026.09
CVE-2026-86538: knowns Unauthenticated Arbitrary File Read via templateFile
Research / Vulnerability Research
2026.09
CVE-2026-86439: knowns Path Traversal via MCP Doc and Memory Tools
Research / Vulnerability Research
2026.08
CVE-2026-55533: PraisonAI Recipe Server Authentication Fail-Open
Research / Vulnerability Research
2026.08
CVE-2026-55529: PraisonAI MCP Origin Validation Bypass
Research / Vulnerability Research