CVE-2026-42167

CVE-2026-42167: SQL Injection in ProFTPD modsql 📋 Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE. Attribute| Value ---|--- Type| SQL Injection CWE-89...

CVE-2026-61991

The AjaxLoadMore Cache WordPress plugin versions

CVE-2026-61991 WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in AjaxLoadMore Cache = 3.1.1 versions...

CVE-2026-18894

IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to a code injection flaw (CWE-94 ). A remote attacker can trigger pre-existing stored Python component code within a public workflow, executing it under the flow owner's runtime context. This bypasses the trust boundary intended to res...

CVE-2026-18894 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are...

EUVD-2026-113144

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-104317 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-104317

IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to a Remote Code Execution (RCE) flaw. A remote attacker who can reach the message broker can execute arbitrary code on the system by exploiting the deserialization of untrusted data . No specific remediation steps or exploit links are...

CVE-2026-104339 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-104339

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

EUVD-2026-113139

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-104339

Langflow OSS versions 1.0.0 through 1.12.3 are affected by a critical code injection vulnerability (CVE-2026-104339). The flaw stems from the improper neutralization of special elements used in an OS command, which could allow a remote attacker to execute arbitrary code . The impact is significan...

CVE-2026-107329 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

EUVD-2026-113134

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-110186 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-110186

IBM Langflow OSS versions 1.0.0 through 1.12.8 are vulnerable to remote code execution due to improper control of code generation (CWE-94). This flaw allows a remote attacker to execute arbitrary code on the server. To remediate this vulnerability, users should upgrade to Langflow OSS 1.13.0 or l...

CVE-2026-96198

A heap-based buffer overflow exists in Microsoft Edge (Chromium-based) , potentially allowing an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. Versions prior to 155.0.4283.62 are identified as affected. A fix is available in version 155.0.4283.62 or later. While the...

EUVD-2026-113125

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

EUVD-2026-113123

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-85897

A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. The vulnerability has been observed in the wild, as noted in security bulletins. Versions prior to 155.0.4283.62 are identified as affected; remediation is available via...