<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: element-hq-element-web</title><description>Every new CVE for element-hq-element-web.</description><link>https://agentprime.io/</link><item><title>CVE-2026-119407: Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL Parameters</title><link>https://agentprime.io/advisories/CVE-2026-119407/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119407/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 11:30:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55850: Element Web: A malicious homeserver can inject HTML in Element Web using its homepage</title><link>https://agentprime.io/advisories/CVE-2026-55850/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55850/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Aug 2026 18:30:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59161: In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left</title><link>https://agentprime.io/advisories/CVE-2025-59161/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59161/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Sep 2025 16:44:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-32026: Element Web could load a malicious instance of Element Call leaking media encryption keys</title><link>https://agentprime.io/advisories/CVE-2025-32026/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32026/</guid><description>CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Apr 2025 15:22:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-51750: Element allows a malicious homeserver can modify events leading to unrenderable events or rooms</title><link>https://agentprime.io/advisories/CVE-2024-51750/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-51750/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Nov 2024 16:34:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-51749: Element&apos;s thumbnails can be abused to misrepresent the content of an attachment</title><link>https://agentprime.io/advisories/CVE-2024-51749/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-51749/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Nov 2024 16:34:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-47779: Element Web vulnerable to potential exposure of access token via authenticated media</title><link>https://agentprime.io/advisories/CVE-2024-47779/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-47779/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Oct 2024 15:28:00 GMT</pubDate><category>CVE</category></item></channel></rss>