Skip to content
OpenAdvisories

Archive

11 July 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-61447 Public exploit EPSS 15%

    PraisonAI before 1.6.78 Remote Code Execution via CodeAgent

    PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through promp…

  • Critical 10.0
    CVE-2026-57827 Public exploit Scanner template EPSS 17%

    Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12

    Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

  • High 7.2
    CVE-2026-3576 Public exploit Scanner template

    Planyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter

    The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion in all versions up to, and including, 3.0. The ulap.php file acts as an AJAX proxy and is directly accessible without WordPr…