<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: coral server</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-30970: Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments</title><link>https://patchthecve.com/cve/CVE-2026-30970.html</link><guid>https://patchthecve.com/cve/CVE-2026-30970.html</guid><pubDate>Wed, 17 Jun 2026 10:33:14 +0000</pubDate><description>CRITICAL 9.1: Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server allowed the creation of agent sessions through the /api/v1/sessions endpoint without strong authentication. This endpoint performs r</description></item><item><title>CVE-2026-30969: Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments</title><link>https://patchthecve.com/cve/CVE-2026-30969.html</link><guid>https://patchthecve.com/cve/CVE-2026-30969.html</guid><pubDate>Wed, 17 Jun 2026 10:33:14 +0000</pubDate><description>CRITICAL 9.1: Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server did not enforce strong authentication between agents and the server within an active session. This could allow an attacker who obtai</description></item><item><title>CVE-2026-30968: Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments</title><link>https://patchthecve.com/cve/CVE-2026-30968.html</link><guid>https://patchthecve.com/cve/CVE-2026-30968.html</guid><pubDate>Wed, 17 Jun 2026 10:33:14 +0000</pubDate><description>CRITICAL 9.8: Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint (/sse/v1/...) in Coral Server did not strongly validate that a connecting agent was a legitimate participant in the session. Thi</description></item></channel></rss>