CVE-2026-7657

IBM Langflow OSS versions 1.0.0–1.10.3 are affected by server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement. The CVSS vector indicates network access with low attack complexity, requiring low privileges and no user interaction, with a high confidentiali...

GHSA-V93F-FGJR-HJRJ

creationtimestamp| type| source ---|---|--- 2026-08-05 17:33:01+00:00| seen| https://gist.github.com/alon710/9a7a5a858022e3c656feab4ec8f0d30d...

CVE-2026-70607

creationtimestamp| type| source ---|---|--- 2026-08-05 17:33:01+00:00| seen| https://gist.github.com/alon710/9a7a5a858022e3c656feab4ec8f0d30d...

CVE-2026-20268

creationtimestamp| type| source ---|---|--- 2026-08-05 17:29:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117044082167274064 2026-08-06 05:17:07+00:00| seen| https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities20260806 2026-08-06 13:10:12+00:00| seen|...

CVE-2026-20310

creationtimestamp| type| source ---|---|--- 2026-08-05 17:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse26wvyiq2o 2026-08-05 18:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/czdl4fbd4szpo 2026-08-06 08:01:07+00:00| seen|...

CVE-2026-9195

creationtimestamp| type| source ---|---|--- 2026-08-05 17:20:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzxqhflx2b 2026-08-06 16:15:56+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2026-9193

creationtimestamp| type| source ---|---|--- 2026-08-05 17:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzu72j3b23 2026-08-06 16:15:53+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781 2026-09-05 03:16:47+00:00| seen|...

EUVD-2026-53520

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element...

CVE-2026-17630

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters...

CVE-2026-9190

creationtimestamp| type| source ---|---|--- 2026-08-05 17:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzqmqsvx2l 2026-08-06 16:15:49+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2026-7557

creationtimestamp| type| source ---|---|--- 2026-08-05 17:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzn25ytt2h 2026-08-06 16:15:44+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2026-15587

creationtimestamp| type| source ---|---|--- 2026-08-05 17:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzjgf4672b...

CVE-2026-20200

creationtimestamp| type| source ---|---|--- 2026-08-05 17:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96776 2026-08-06 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96776 2026-08-06 10:50:29+00:00| seen|...

CVE-2026-15573

creationtimestamp| type| source ---|---|--- 2026-08-05 16:59:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdytdptqw22 2026-08-05 23:02:49+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117045393405816451 2026-08-05 23:02:49+00:00| seen|...

CVE-2026-12410

creationtimestamp| type| source ---|---|--- 2026-08-05 16:57:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdypuyg4422...

EUVD-2026-53477

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters...

CVE-2026-71201

creationtimestamp| type| source ---|---|--- 2026-08-05 16:32:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3r2rzs5rcn4ns...

CVE-2026-70604

creationtimestamp| type| source ---|---|--- 2026-08-05 16:31:30+00:00| seen| https://gist.github.com/alon710/833f29b9d380bcf059ea629581974a6e...

EUVD-2026-53465

IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol MCP composer endpoint when mcpcomposerenabled=true default and projects are configured with authtype=oauth...

EUVD-2026-53441

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity XXE injection vulnerability. The vulnerability resides in the parseXmlPayload function within the event processing pipeline q1labscore.jar . When at least one log source type is configured...