CVE-2026-44338

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 14, 2026

Last Seen

May 15, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

PraisonAI Vulnerability Exploited Hours After Disclosure72.0

A critical authentication bypass vulnerability in PraisonAI, tracked as CVE-2026-44338, was publicly disclosed on May 8, 2026, and has already been exploited by threat actors within hours of its announcement. The flaw affects versions 2.5.6 to 4.6.33 of PraisonAI's legacy Flask-based API server, whi...

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages70.5

A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into legitimate packages, which execute during installation to steal sensitive credential...