| CVE / ID | Title | Severity | CVSS | Source | Date |
|---|
| GHSA-r253-r9jw-qg44 | Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args | CRITICAL | 10.0 | GitHub | 2026-06-18 |
| GHSA-82fg-2r99-h7v6 | Duplicate Advisory: PickleScan's pkgutil.resolve_name has a universal blocklist bypass | CRITICAL | 10.0 | GitHub | 2026-06-17 |
| CVE-2026-54782 | CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation | CRITICAL | 10.0 | GitHub | 2026-06-19 |
| CVE-2026-45480 | Azure Active Directory Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-06-09 |
| CVE-2026-48567 | Azure HorizonDB Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-06-09 |
| CVE-2026-32169 | Azure Cloud Shell Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-03-10 |
| CVE-2026-40412 | Azure Orbital Spatio Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-23652 | Microsoft Power Pages Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-47280 | Azure Resource Manager Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-42822 | Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-42826 | Azure DevOps Information Disclosure Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-41104 | Microsoft Planetary Computer Pro Information Disclosure Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-42901 | Microsoft Entra ID Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-42960 | Possible cache poisoning via promiscuous records for the authority section | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2025-55241 | Azure Entra ID Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2025-09-09 |
| CVE-2025-54914 | Azure Networking Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2025-09-09 |
| CVE-2022-49043 | xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. | CRITICAL | 10.0 | Microsoft | 2025-01-14 |
| CVE-2025-53767 | Azure OpenAI Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2025-08-12 |
| CVE-2026-55255 | Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flo | CRITICAL | 9.9 | GitHub | 2026-06-19 |
| CVE-2026-54051 | Network-AI: Improper Neutralization of Special Elements used in an OS Command | CRITICAL | 9.9 | GitHub | 2026-06-19 |
| GHSA-vmmj-pfw7-fjwp | npm PraisonAI codeMode sandbox escape via Function constructor | CRITICAL | 9.9 | GitHub | 2026-06-18 |
| CVE-2026-47647 | Dynamics 365 Elevation of Privilege Vulnerability | CRITICAL | 9.9 | Microsoft | 2026-06-09 |
| CVE-2026-48584 | Microsoft Azure Synapse Elevation of Privilege Vulnerability | CRITICAL | 9.9 | Microsoft | 2026-06-09 |
| CVE-2026-26030 | GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable | CRITICAL | 9.9 | Microsoft | 2026-03-10 |
| CVE-2026-33109 | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability | CRITICAL | 9.9 | Microsoft | 2026-05-12 |
| CVE-2026-40411 | Azure Virtual Network Gateway Remote Code Execution Vulnerability | CRITICAL | 9.9 | Microsoft | 2026-05-12 |
| CVE-2026-42898 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | CRITICAL | 9.9 | Microsoft | 2026-05-12 |
| CVE-2026-42823 | Azure Logic Apps Elevation of Privilege Vulnerability | CRITICAL | 9.9 | Microsoft | 2026-05-12 |
| CVE-2026-24304 | Azure Resource Manager Elevation of Privilege Vulnerability | CRITICAL | 9.9 | Microsoft | 2026-01-13 |
| CVE-2024-41110 | Moby authz zero length regression | CRITICAL | 9.9 | Microsoft | 2024-07-09 |
| CVE-2025-21415 | Azure AI Face Service Elevation of Privilege Vulnerability | CRITICAL | 9.9 | Microsoft | 2025-01-14 |
| CVE-2026-49980 | Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026 | CRITICAL | 9.8 | GitHub | 2026-06-16 |
| CVE-2026-47103 | python-statemachine SCXML <data expr> Eval Injection | CRITICAL | 9.8 | GitHub | 2026-06-18 |
| GHSA-cwj8-7gp2-ggcw | praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery | CRITICAL | 9.8 | GitHub | 2026-06-18 |
| GHSA-f38v-77qj-h4jq | praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard) | CRITICAL | 9.8 | GitHub | 2026-06-18 |
| GHSA-p75f-6fp4-p57w | PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Co | CRITICAL | 9.8 | GitHub | 2026-06-18 |
| GHSA-892r-p3jq-jp24 | PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation | CRITICAL | 9.8 | GitHub | 2026-06-18 |
| GHSA-x8cv-xmq7-p8xp | PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints | CRITICAL | 9.8 | GitHub | 2026-06-18 |
| GHSA-fq2m-6wqh-x44g | PraisonAI: Jobs API exposes agent-execution endpoints with no authentication | CRITICAL | 9.8 | GitHub | 2026-06-18 |
| GHSA-j4hj-7hfh-g2f4 | praisonai: recipe serve auth middleware silently disables itself when no secret is set | CRITICAL | 9.8 | GitHub | 2026-06-18 |