Daily briefing · July 11, 2026
Quiet Day Hides Real Teeth: Critical RCE in PraisonAI and Joomla Extensions Demand Attention
Automated Vexday summary · sources: NVD, CISA KEV, EPSS
Verdict of the day — calm
July 11, 2026 registers as a calm day by the numbers — no vulnerabilities weaponized, none under active exploitation, and no VulnCheck early-warning signals — but the disclosure list is far from trivial. Five critical flaws published today span AI agent frameworks and popular CMS extensions, with several carrying CVSS 10.0 scores and direct paths to remote code execution. Defenders should treat the absence of active exploitation as a shrinking window, not a green light to deprioritize patching.
Today’s brief
- PraisonAI hit with multiple critical flaws including a CVSS 10.0 RCE via unsandboxed LLM-generated code execution — patch to 1.6.78 or later immediately
- RSFiles for Joomla exposes an unauthenticated file upload leading to full server takeover — no credentials required
- WordPress ecosystem again under pressure: account takeover, auth bypass, and RCE bugs across four distinct plugins
- Brazil faces a heavy ransomware week with lockbit5, Deadlock, and qilin collectively claiming eight victims across public sector, manufacturing, and services
Critical highlights
1
PraisonAI before 1.6.78 executes LLM-generated Python code in CodeAgent with no AST validation, no import restrictions, and no sandbox — a successful prompt injection attack gives an adversary arbitrary code execution on the host and full access to environment secrets. CVSS 10.0 with a trivial attack surface through the chat interface makes this the top priority of the day.
2
CVE-2026-57827CVSS 10affects rsjoomla.com RSFiles extension for Joomla RSFiles, a Joomla extension by rsjoomla.com, allows unauthenticated upload of executable files, leading directly to full remote code execution. No authentication barrier means any internet-facing Joomla site running this extension is immediately at risk of complete server compromise.
3
A second critical PraisonAI flaw (CVSS 9.4) in the AICoder component allows attackers to inject malicious prompts via the chat interface, write files to arbitrary filesystem paths, and execute shell commands with root privileges — the combination of file write and command execution without path validation is a near-complete system takeover primitive.
4
PraisonAI before 4.6.78 passes an attacker-controlled integer dimension value directly into DDL queries for PGVector and Cassandra backends without runtime enforcement, enabling SQL injection into CREATE TABLE statements. While database-layer exploitation may require specific backend configurations, the attack surface is broad given PraisonAI's default deployment model.
5
CVE-2026-57828CVSS 9affects phoca.cz Phoca Download extension for Joomla Phoca Download for Joomla allows authenticated registered users — a very low bar — to upload executable files and achieve full remote code execution. Sites with open user registration are effectively exposed to unauthenticated RCE in practice.
6
CVE-2026-15155HIGH 8.8affects Essential Addons for Elementor – Popular Elementor Templates & Widgets Essential Addons for Elementor (up to 6.6.10) enables authenticated account takeover via email header injection in the Login/Register widget, where server-side validation of outgoing email headers is insufficient. An attacker with any authenticated foothold could escalate to administrator-level control of a WordPress site.
7
Swiss Toolkit For WP (up to 1.4.6) contains a file type validation bypass in upload_extension_files() that uses strpos() substring matching, allowing an attacker to upload executable files by embedding a permitted extension string anywhere in the filename. This class of bypass is well understood by attackers and typically straightforward to exploit.
8
CVE-2025-6784HIGH 8.8affects Code Engine – PHP Snippets, AI Functions & Automation for WordPress The Code Engine plugin for WordPress (up to 0.3.5) exposes server-side code execution to any Contributor-level user through an unrestricted shortcode, making it a reliable privilege escalation path on multi-author or open-registration WordPress sites.
9
CVE-2026-14262HIGH 8.8affects Simple JWT Login – Allows you to use JWT on REST endpoints. Simple JWT Login (up to 3.6.6) suffers an authentication bypass that allows attackers to inject arbitrary claims into JWT payloads not covered by the admin-configured key list, enabling privilege escalation to higher roles. Sites using JWT-based REST authentication should treat this as a critical configuration risk.
10
PraisonAI before 1.7.3 ships with an insecure default that binds the API to all network interfaces with no authentication and wildcard CORS, allowing unauthenticated actors to read agent instructions, system prompts, and invoke agents freely. Default-insecure configurations are particularly dangerous in cloud and container deployments where the service may be internet-reachable by accident.
Ransomware today
Ransomware activity targeting Brazil has been intense in recent days. LockBit 5 claimed three Brazilian victims — saude.mt.gov.br (Mato Grosso state health sector), santoinacio-rio.com.br, and lbreng.com.br — while the Deadlock group hit Werken Química Brasil S.A., Bombas Ideal, and Direção Estacionamentos S.A. across manufacturing and consumer services. The qilin group added S.J. Louis to its list, and incransom claimed tecnocurva.com.br, painting a picture of sustained, multi-group pressure on Brazilian organizations of all sizes.
santoinacio-rio.com.br BRlockbit5 · Business Services
lbreng.com.br BRlockbit5 · Business Services
saude.mt.gov.br BRlockbit5 · Public Sector
Werken Química Brasil S.A. BRDeadlock · Manufacturing
Bombas Ideal BRDeadlock · Manufacturing
Direção Estacionamentos S.A. BRDeadlock · Consumer Services
S.J. Louis BRqilin
lockbit3 39ransomhub 35lockbit5 29thegentlemen 208base 20arcusmedia 19
Active groups & APTs
Several threat actor groups are being tracked as active or recently updated, including againstthewest, apt73, the Iran-linked blackshadow, dragonforce, fulcrumsec, and coinbasecartel. None of these groups have confirmed victims associated with today's disclosures, but their monitored status indicates elevated readiness — defenders in sectors historically targeted by Iranian and hacktivist actors should remain alert.
Brazil focus
Brazil stands out sharply in today's threat landscape, with eight organizations claimed by ransomware groups in the recent period spanning public administration, manufacturing, business services, consumer services, and technology. The targeting of saude.mt.gov.br — a state government health portal — is particularly concerning given the sensitivity of health data and the potential for operational disruption to public services. The breadth of sectors and the simultaneous activity of lockbit5, Deadlock, qilin, and incransom signal that Brazilian organizations across all verticals remain high-value targets.
saude.mt.gov.brlockbit5 · Public Sector
santoinacio-rio.com.brlockbit5 · Business Services
lbreng.com.brlockbit5 · Business Services
Direção Estacionamentos S.A.Deadlock · Consumer Services
Werken Química Brasil S.A.Deadlock · Manufacturing
Bombas IdealDeadlock · Manufacturing
S.J. Louisqilin
tecnocurva.com.brincransom · Technology
Today’s recommendation: Prioritize patching PraisonAI to version 1.7.3 or later across all three critical CVEs and immediately disable or update RSFiles and Phoca Download on any internet-facing Joomla installations. WordPress administrators should audit plugin versions for all four affected plugins and restrict contributor-level upload and code-execution capabilities as a compensating control.
With critical RCE paths disclosed in AI frameworks, CMS extensions, and widely deployed WordPress plugins, now is the moment to validate whether any of these components exist — patched or unpatched — across your own attack surface before opportunistic actors do it for you.Find out in minutes, with a free exposure assessment, where your organization is truly exposed.Meet the Autonomous AI Pentest Agent →Previous briefings
September 8, 2026 — Windows Under Active Exploit, ScreenConnect Zero-Day Detected Before CISA: September 8 Security BulletinSeptember 7, 2026 — 22 Critical CVEs Published on a Quiet Day, With Heavy Ransomware Pressure on BrazilSeptember 6, 2026 — Quiet Day Hides Real Risks: Tenda HG10, NEC UNIVERGE, and Brazilian Ransomware Surge Demand AttentionSeptember 5, 2026 — WordPress Plugin Wave and Tenda CP3 Flaws Lead a Calm But CVE-Heavy DaySeptember 4, 2026 — WordPress Plugins and FreeIPMI Lead a Calm but Patch-Heavy DaySeptember 3, 2026 — Four CVSS 10.0 Critical CVEs Headline a Calm But Dense Vulnerability DaySeptember 2, 2026 — WordPress Plugins Under Fire, Cisco IOS XR and NX-OS in the Crosshairs: ATTENTION Day With Active ExploitationSeptember 1, 2026 — Active Exploitation of Proxmox and SonicWall SMA1000 Leads a High-Alert DayAugust 31, 2026 — WordPress Plugins and Tenda Routers Dominate a High-Alert Day With 41 Critical CVEsAugust 30, 2026 — Calm Day Hides Sharp Edges: Critical Code Injection and Router Flaws Top August 30 BulletinAugust 29, 2026 — Ten Active-Exploitation CVEs Dominate as Ransomware Groups Hammer BrazilAugust 28, 2026 — 10 Actively Exploited CVEs Demand Immediate Action: Metabase, VMware, macOS, Cisco, and More Under FireAugust 27, 2026 — Router Firmware Under Active Exploitation and WordPress Wave Raises Alerts on August 27August 26, 2026 — Ubiquiti UniFi and Gitea Face Active Exploitation Alerts as 62 Critical CVEs Emergeview full archive →