network-ai records
6 published records for vendor network-ai.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-346 Origin Validation Error1
- CWE-352 Cross-Site Request Forgery (CSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2026-46701No exploit | Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secretnetwork-ai · network-ai · CWE-346 | High7.6 | — | 0.2% | Jul 20, 2026 |
28Monitor | CVE-2026-58484No exploit | Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruningnetwork-ai · network-ai · CWE-22 | High7.1 | — | 0.2% | Jul 20, 2026 |
26Monitor | CVE-2026-58481No exploit | Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directorynetwork-ai · network-ai · CWE-22 | Medium6.5 | — | 0.2% | Jul 20, 2026 |
24Monitor | CVE-2026-58413No exploit | EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment datanetwork-ai · network-ai · CWE-22 | Medium6.1 | — | 0.2% | Jul 20, 2026 |
23Monitor | CVE-2026-58482No exploit | Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actionsnetwork-ai · network-ai · CWE-352 | Medium5.9 | — | 0.2% | Jul 20, 2026 |
22Monitor | CVE-2026-58414No exploit | Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backupsnetwork-ai · network-ai · CWE-22 | Medium5.5 | — | 0.2% | Jul 20, 2026 |
- CVE-2026-4670130Monitor
Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret
HighCVSS 7.6No exploitEPSS 0%network-ai · network-aiJul 20, 2026
- CVE-2026-5848428Monitor
Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning
HighCVSS 7.1No exploitEPSS 0%network-ai · network-aiJul 20, 2026
- CVE-2026-5848126Monitor
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory
MediumCVSS 6.5No exploitEPSS 0%network-ai · network-aiJul 20, 2026
- CVE-2026-5841324Monitor
EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data
MediumCVSS 6.1No exploitEPSS 0%network-ai · network-aiJul 20, 2026
- CVE-2026-5848223Monitor
Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions
MediumCVSS 5.9No exploitEPSS 0%network-ai · network-aiJul 20, 2026
- CVE-2026-5841422Monitor
Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups
MediumCVSS 5.5No exploitEPSS 0%network-ai · network-aiJul 20, 2026