Rasa Pro Missing Authentication For Voice Connector APIs

VulnerabilityA vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the credentials.yml file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated...

Malicious code in realtime-voice-component (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7372 Malicious code in realtime-voice-component (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7082 Malicious code in @lovenight/voice (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @lovenight/voice (npm)

--- -= Per source details. Do not edit below this line.=-...

skillfy-poc

Skillfy Feature 3 POC — Multilingual AI Dubbing Proof-of-conc...

screenenv (0.0.1.dev0), simple-voice-chat (>=4.0.1, <=4.2.3) +1 more potentially affected by CVE-2026-49119 via gradio (5.23.1)

gradio PYPI version 5.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - screenenv 0.0.1.dev0 - simple-voice-chat =4.0.1, =4.2.3 - zmp-knowledge-store-mcp-server 0.1.0 Source cves: CVE-2026-49119 Source advisory:...

screenenv (0.0.1.dev0), simple-voice-chat (>=4.0.1, <=4.2.3) +1 more potentially affected by CVE-2026-49119 via gradio (5.23.1)

gradio PYPI version 5.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - screenenv 0.0.1.dev0 - simple-voice-chat =4.0.1, =4.2.3 - zmp-knowledge-store-mcp-server 0.1.0 Source cves: CVE-2026-49119 Source advisory:...

CVE-2026-2891

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities...

CVE-2026-2891 Poly Voice Devices (CCX, Trio, Edge E) – Potential Denial of Service

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities...

CVE-2026-2891

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities...

CVE-2026-2891

The CVE-2026-2891 entry concerns Poly Voice IP devices (CCX, Trio, Edge E) and describes a potential DoS if these devices connect to a malicious SIP server sending malformed data. Affected components are the Poly Voice devices themselves; the root cause is triggered by malformed SIP input from a ...

CVE-2026-2891 Poly Voice Devices (CCX, Trio, Edge E) – Potential Denial of Service

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities...

EUVD-2026-41005

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities...

CVE-2026-2891: Uncontrolled Resource Consumption

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities...

PT-2026-54728

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities...

CVE-2026-10140 Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...

EUVD-2026-40403

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...

CVE-2026-10140 Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...

CVE-2026-10140: Authorization Bypass Through User-Controlled Key

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...