CVE-2026-46701

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.4.5, the MCP SSE server defaults to an empty secret "process.env'NETWORKAIMCPSECRET' ?? ''" at "bin/mcp-server.ts:89", which causes "isAuthorized" "lib/mcp-transport-sse.ts:254" to return "true" unconditionally for...

libconfig.so Stack Buffer Overflow

The vulnerability of the configset function in the libconfig.so library, a built-in software library for web servers, is related to buffer overflows in the stack due to insufficient input handling. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary...