tag
Unauthenticated-Access
High
PraisonAI API Server Missing Authentication (CVE-2026-44338)
CVE-2026-44338 / [GHSA-6rmh-7xcm-cpxj](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6rmh-7xcm-cpxj)·
[PraisonAI](https://github.com/MervinPraison/PraisonAI) api_server.py (Flask-based agent API server)
unpatched
Critical
FreePBX Unauthenticated UCP Access via Hard-Coded Credentials (CVE-2026-46376)
CVE-2026-46376 (GHSA-m55x-h47x-v3gx)·
FreePBX (userman module) — User Control Panel (UCP)
patched