agentprime: esaqa-gmbh-psonoEvery new CVE for esaqa-gmbh-psono.https://agentprime.io/CVE-2026-117472: URL prefix handling permits API key read-scope bypass in Psono Serverhttps://agentprime.io/advisories/CVE-2026-117472/https://agentprime.io/advisories/CVE-2026-117472/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 05:56:16 GMTCVECVE-2026-117471: User-controlled Duo host permits authenticated SSRF in Psono Serverhttps://agentprime.io/advisories/CVE-2026-117471/https://agentprime.io/advisories/CVE-2026-117471/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 05:55:07 GMTCVECVE-2026-117470: WebAuthn assertion replay permits second-factor bypass in Psono Serverhttps://agentprime.io/advisories/CVE-2026-117470/https://agentprime.io/advisories/CVE-2026-117470/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 05:53:41 GMTCVECVE-2026-117469: File-transfer type confusion permits unauthorized repository writes in Psono Serverhttps://agentprime.io/advisories/CVE-2026-117469/https://agentprime.io/advisories/CVE-2026-117469/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 05:52:24 GMTCVECVE-2026-117468: Device-code claim permits restricted token escalation in Psono Serverhttps://agentprime.io/advisories/CVE-2026-117468/https://agentprime.io/advisories/CVE-2026-117468/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 05:41:30 GMTCVE