Skip to content
Threat Feed
Subscribe

Tag

Message-Injection

2 briefs RSS
high advisory

CVE-2026-61428: PraisonAI AgentMail Webhook Signature Bypass

PraisonAI AgentMail versions before 4.6.78 are vulnerable to CVE-2026-61428, an authentication bypass flaw in webhook mode that allows unauthenticated attackers to inject messages with spoofed sender addresses, enabling them to trigger replies to attacker-controlled addresses and bypass email filtering.

PraisonAI AgentMail authentication-bypass web-exploitation message-injection email-spoofing cve
3t 1c
critical advisory

Apache Artemis and ActiveMQ Artemis Authentication Bypass Vulnerability

CVE-2026-27446 allows an unauthenticated remote attacker to inject malicious messages or exfiltrate data from Apache Artemis and ActiveMQ Artemis brokers due to a missing authentication check in the Core protocol.

apache-artemis apache-activemq authentication-bypass message-injection data-exfiltration
2r 5t