https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T19:51:06.151013+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120314 CVE-2026-120314 — Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations 2026-11-06T19:51:06.165953+00:00

Affected: Jovancoding Network-AI

Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the A2AServer class that allows unauthenticated attackers to access task operations when no secret is configured. Attackers can send JSON-RPC requests to tasks/send, tasks/get, and tasks/cancel without a Bearer token to execute tasks, read results, and cancel tasks.