NE
Product
Network-AI
16
CVEs
0
On KEV
9.9
Max CVSS
3
New 30D
Severity mix
Critical 2High 8Medium 5Low 1
Watch
Add Network-AI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73615 | 8.8 | Aug 13 | Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch Affected: before 5.15.1 |
| CVE-2026-73614 | 8.8 | Aug 13 | Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation Affected: before 5.15.1 |
| CVE-2026-42856 | 8.7 | May 11 | Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls Affected: < 5.1.3 |
| CVE-2026-64623 | 8.6 | Jul 20 | Network-AI before 5.13.4 Cryptographic Signature Verification Bypass Affected: before 5.13.4 |
| CVE-2026-46701 | 7.6 | Jul 20 | Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret Affected: < 5.4.5 |
| CVE-2026-64622 | 7.5 | Jul 20 | Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox Affected: 5.12.2 through 5.13.3 |
| CVE-2026-109331 | 7.4 | Oct 12 | Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget Affected: 5.14.0 before 5.15.2 |
| CVE-2026-58484 | 7.1 | Jul 20 | Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning Affected: < 5.12.2 |
Showing 8