Aail project

Products

Exploited and recent CVEs

• CVE-2026-100190 Medium 6.3 Stored Cross-Site Scripting (XSS) via Crawler Capture Import in AIL Framework showDomain Page 0.3%
• CVE-2026-100187 Medium 6.9 AIL Framework Onion Module: Non-Onion URL Accepted as Crawler Task Due to Bypassed Domain Validation 0.4%
• CVE-2026-100177 Medium 6.3 Ail Framework Crawler: Missing Cookiejar Authorization Check Allows Cross-Organization Cookiejar Attachment 0.3%
• CVE-2026-100176 High 8.5 Stored Cross-Site Scripting (XSS) in AIL Framework Username Timeline Tooltip 0.4%
• CVE-2026-100174 Medium 5.1 Stored Cross-Site Scripting (XSS) in AIL Framework Tag Selector via Unescaped Tag Names 0.4%
• CVE-2026-100172 High 8.5 Stored XSS in AIL Framework extracted-match popovers via unescaped dynamic values in HTML-enabled data-content attributes 0.3%
• CVE-2026-76164 High 7.1 Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources 0.4%
• CVE-2026-71447 Medium 6.9 Stored Cross-Site Scripting in Chat and Forum Translation Controls in ail-framework 0.4%
• CVE-2026-71446 Medium 6.9 Stored Cross-Site Scripting in AIL Framework Domain Screenshot View 0.4%
• CVE-2026-71445 High 8.2 Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-framework 0.4%
• CVE-2026-59510 High 7.1 Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File Read 0.5%
• CVE-2026-56450 Medium 5.1 AIL Framework - Missing Rate Limiting Enables Brute-Force Attacks Against Two-Factor Authentication Codes 0.6%
• CVE-2026-56448 High 8.3 Authenticated Path Traversal in AIL Framework Investigation Downloads Allows Arbitrary File Read 0.4%
• CVE-2026-56138 Medium 5.3 Authenticated Path Traversal in AIL framework /objects/item/diff Allows Reading Gzip-Compressed Files 0.5%
• CVE-2026-39416 High 8.5 Stored XSS in modal item preview for long item content in AIL Framework 0.2%