NVD disclosure day
CVE-2026-61447
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in PraisonAI's CodeAgent allows attackers to execute arbitrary Python code by influencing LLM output, potentially exfiltrating environment secrets and gaining host system control. This issue is relevant because it could lead to unauthorized access and system compromise.
CVE-2026-61445
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
PraisonAI's AICoder component has critical vulnerabilities allowing arbitrary file writes and command execution. Attackers can exploit this by injecting malicious prompts through the chat interface, potentially leading to compromised system integrity and data confidentiality. This issue is relevant for any organization
CVE-2026-60090
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in PraisonAI's knowledge-store backends, allowing unauthenticated attackers to inject SQL/CQL commands by exploiting improper validation of the `dimension` argument during collection creation. This could lead to unauthorized access to or manipulation of sensitive data. It is important to
CVE-2026-57828
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The Joomla extension Phoca Downloads has a vulnerability allowing authenticated users to upload and execute arbitrary files, leading to remote code execution. This could impact Joomla websites, and affected instances need to be identified and remediated.
CVE-2026-57827
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The RSFiles Joomla extension has a critical vulnerability allowing unauthenticated arbitrary file uploads, which can lead to remote code execution. This means an attacker could upload executable files to a web server and gain unauthorized control. Confirming the presence and exposure of this extension within your envir