<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: appsmith</title><description>Every new CVE for appsmith.</description><link>https://agentprime.io/</link><item><title>CVE-2026-49979: Appsmith: SSRF via `POST /api/v1/admin/send-test-email` — JavaMail Bypasses WebClient IP Filter</title><link>https://agentprime.io/advisories/CVE-2026-49979/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-49979/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jun 2026 21:38:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55454: Appsmith: Caddy admin API exposed without authentication</title><link>https://agentprime.io/advisories/CVE-2026-55454/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55454/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jun 2026 21:38:07 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-55455: Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist</title><link>https://agentprime.io/advisories/CVE-2026-55455/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55455/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jun 2026 21:36:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-50189: Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route</title><link>https://agentprime.io/advisories/CVE-2026-50189/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-50189/</guid><description>CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jun 2026 21:35:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-7299: CVE-2026-7299</title><link>https://agentprime.io/advisories/CVE-2026-7299/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7299/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Jun 2026 14:07:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5418: appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-5418/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5418/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Apr 2026 18:30:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34411: Appsmith &lt; 1.98 Unauthenticated Instance Configuration Disclosure via Management APIs</title><link>https://agentprime.io/advisories/CVE-2026-34411/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34411/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 16:24:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-30862: Critical Stored XSS &amp; Privilege Escalation in Appsmith</title><link>https://agentprime.io/advisories/CVE-2026-30862/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-30862/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Mar 2026 22:26:11 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-24042: Appsmith public apps can execute unpublished actions (viewMode confusion)</title><link>https://agentprime.io/advisories/CVE-2026-24042/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24042/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Jan 2026 03:52:54 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-22794: Account Takeover Vulnerability in Appsmith</title><link>https://agentprime.io/advisories/CVE-2026-22794/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-22794/</guid><description>CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Jan 2026 21:54:52 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-55604: Appsmith&apos;s Broken Access Control Allows Viewer Role User to Query Datasources</title><link>https://agentprime.io/advisories/CVE-2024-55604/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-55604/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Mar 2025 14:15:05 GMT</pubDate><category>CVE</category></item></channel></rss>