CVE-2026-50289 systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

EUVD-2026-45265

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

CVE-2026-12691

creationtimestamp| type| source ---|---|--- 2026-07-17 19:29:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mquidevwe72g 2026-07-19 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyg4jrq442l...

CVE-2026-63101

creationtimestamp| type| source ---|---|--- 2026-07-17 19:23:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhyemnbm2s 2026-07-19 07:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqy7ggzcb72m...

CVE-2026-7755

The IBM Security Bulletin confirms CVE-2026-7755 affects Langflow OSS versions 1.0.0–1.10.0, where the File Manager API may bypass MCP server configuration validation during file uploads. A maliciously crafted MCP configuration file (e.g., mcp_servers .json) could be uploaded via upload_user_file...

CVE-2026-56453

creationtimestamp| type| source ---|---|--- 2026-07-17 19:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquhpb2hr72j...

CVE-2026-8476

Langflow OSS versions 1.0.0–1.10.0 are impacted by a remote code execution vulnerability in the disk-based cache. The AsyncDiskCache deserializes cached items with unsafe pickle.loads() without validation, allowing arbitrary code execution when an attacker can influence cached data (e.g., through...

CVE-2026-8481 Remote Code Execution via Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-15343

creationtimestamp| type| source ---|---|--- 2026-07-17 19:08:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquh5izcym2b...

CVE-2026-57860

creationtimestamp| type| source ---|---|--- 2026-07-17 19:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqugukc3jo2o 2026-07-19 08:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqycskfyak2f...

CVE-2026-8859 Path Traversal in APIRequest Component via Content-Disposition Header

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal vulnerability exists when the "Save to File" feature is enabled, where filenames extracted from HT...

CVE-2026-8859 Path Traversal in APIRequest Component via Content-Disposition Header

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal vulnerability exists when the "Save to File" feature is enabled, where filenames extracted from HT...

CVE-2026-58148

creationtimestamp| type| source ---|---|--- 2026-07-17 18:55:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqugg2jabe2q...

CVE-2026-63094

creationtimestamp| type| source ---|---|--- 2026-07-17 18:44:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquftzdovb2a 2026-07-19 10:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyjjfhw2h2a...

CVE-2026-16016

creationtimestamp| type| source ---|---|--- 2026-07-17 18:34:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqufbrv4uc2x...

CVE-2026-51082

creationtimestamp| type| source ---|---|--- 2026-07-17 18:19:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquegvziv52i...

CVE-2026-51083

creationtimestamp| type| source ---|---|--- 2026-07-17 18:15:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mque7ahppv2e...

CVE-2024-23577

creationtimestamp| type| source ---|---|--- 2026-07-17 18:11:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqudyjko6x22...

CVE-2026-51081

creationtimestamp| type| source ---|---|--- 2026-07-17 18:08:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqudskgx3r24...

CVE-2026-9762

creationtimestamp| type| source ---|---|--- 2026-07-17 18:06:53+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116936645894974492 2026-07-19 07:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqy7g6dpjw2g...