EUVD-2026-77854

A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass network restrictions...

CVE-2026-84551

CVE-2026-84551 affects Apple's iOS 27 , iPadOS 27 , macOS Golden Gate 27 , visionOS 27 , and watchOS 27 . It stems from a logic issue addressed through improved validation, which may allow an app to bypass network restrictions . The NVD-assigned CVSS 3.1 score is 4.4 (Medium) with a local attack ...

CVE-2026-43787

A logic issue exists in macOS that can allow an attacker in a privileged network position to leak sensitive user information . This vulnerability was addressed with improved checks. The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No specific exploit detail...

CVE-2026-43787

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to leak sensitive user information...

CVE-2026-43787

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to leak sensitive user information...

EUVD-2026-78027

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to leak sensitive user information...

CVE-2026-84585

A permissions issue in macOS (specifically affecting Golden Gate 27 ) allows an application to access local network devices without user consent. This vulnerability stems from a flaw in state management . The issue has been addressed with improved state management and is fixed in macOS Golden Gat...

EUVD-2026-78008

A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent...

CVE-2026-84585

A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent...

CVE-2026-84585

A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent...

EUVD-2026-77967

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted SMB network share may lead to system termination...

CVE-2026-43719

A use-after-free issue exists in macOS due to insufficient memory management. An attacker can trigger this vulnerability by mounting a maliciously crafted SMB network share , which may result in system termination . The flaw is addressed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Ta...

CVE-2026-43719

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted SMB network share may lead to system termination...

CVE-2026-76442

creationtimestamp| type| source ---|---|--- 2026-09-14 20:45:13+00:00| seen| https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway 2026-09-15 12:05:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23...

CVE-2026-12765 Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-12765 Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-12765

IBM Langflow OSS versions 1.0.0 through 1.10.2 are vulnerable to server-side request forgery (SSRF) in several flow components, including LM Studio, Home Assistant, DeepSeek, xAI, Glean, HuggingFace Inference API, Ollama, LiteLLM, and Docling Serve. These components accept user-supplied URL value...

EUVD-2026-78086

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-12766 Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components

IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-12766

IBM Langflow OSS (versions 1.0.0–1.11.2) is vulnerable to Server-Side Request Forgery (SSRF) across multiple components. The root cause involves missing or bypassable URL validation: the LMStudio and embeddings components pass a user-controlled base_url to httpx.AsyncClient without invoking the S...