agentprime: part-db-serverEvery new CVE for part-db-server.https://agentprime.io/CVE-2026-86055: Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeoverhttps://agentprime.io/advisories/CVE-2026-86055/https://agentprime.io/advisories/CVE-2026-86055/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 04:09:27 GMTCVECVE-2026-86020: Part-DB: Spreadsheet Formula Injection in XLSX Part Exportshttps://agentprime.io/advisories/CVE-2026-86020/https://agentprime.io/advisories/CVE-2026-86020/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 04:05:24 GMTCVECVE-2026-86019: Part-DB: Attachment Size Limit Bypass via API Base64 Uploadhttps://agentprime.io/advisories/CVE-2026-86019/https://agentprime.io/advisories/CVE-2026-86019/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 04:04:02 GMTCVECVE-2026-86018: Part-DB: Authenticated Disk Exhaustion via Unbounded Server-Side Attachment Downloadshttps://agentprime.io/advisories/CVE-2026-86018/https://agentprime.io/advisories/CVE-2026-86018/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 04:00:19 GMTCVECVE-2026-59188: Part-DB: SVG Sanitization Bypass via Extension Spoofing Leads to Stored XSS in Attachment Viewerhttps://agentprime.io/advisories/CVE-2026-59188/https://agentprime.io/advisories/CVE-2026-59188/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 03:59:11 GMTCVECVE-2026-55600: Part-DB: Stored HTML injection in BOM validation results via unescaped Part namehttps://agentprime.io/advisories/CVE-2026-55600/https://agentprime.io/advisories/CVE-2026-55600/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 03:55:48 GMTCVECVE-2026-54631: Part-DB: Hardcoded APP_SECRET enables forged remember-me cookiehttps://agentprime.io/advisories/CVE-2026-54631/https://agentprime.io/advisories/CVE-2026-54631/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 03:53:33 GMTCVECVE-2026-54630: Part-DB: Authenticated RCE via .phar attachment upload served from public/mediahttps://agentprime.io/advisories/CVE-2026-54630/https://agentprime.io/advisories/CVE-2026-54630/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 03:48:59 GMTCVEcriticalCVE-2026-54615: Part-DB: Stored XSS / HTML injection in activity-log Extra column via unsanitized CollectionElementDeleted element name (sibling-sanitizer gap)https://agentprime.io/advisories/CVE-2026-54615/https://agentprime.io/advisories/CVE-2026-54615/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 03:45:02 GMTCVECVE-2025-55194: Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Uploadhttps://agentprime.io/advisories/CVE-2025-55194/https://agentprime.io/advisories/CVE-2025-55194/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Aug 2025 22:46:30 GMTCVECVE-2023-26042: HTML/XSS injection possibilities in Part-DBhttps://agentprime.io/advisories/CVE-2023-26042/https://agentprime.io/advisories/CVE-2023-26042/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Feb 2023 14:41:24 GMTCVE