EUVD-2026-34215

Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing CORS rules that allow cross-site theft...

PT-2026-46153

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Internal multimedia session archives are accessible without authentication. This issue is exacerbated by loose Cross-Origin Resource Sharing CORS rules, which...

CVE-2026-49202: Improper Authentication

Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing CORS rules that allow cross-site theft...

CVE-2026-47119 Agent Zero < 1.15 Stored XSS via image_get API Endpoint

Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SVG files through the imageget API endpoint without Content-Security-Policy, X-Content-Type-Options, or Content-Dispositio...