CVE-2026-49835

creationtimestamp| type| source ---|---|--- 2026-07-17 19:55:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujrdmq7p2i...

CVE-2026-49834

creationtimestamp| type| source ---|---|--- 2026-07-17 19:53:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujodq3y72b...

CVE-2026-7667

creationtimestamp| type| source ---|---|--- 2026-07-17 19:51:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujlirgex2i 2026-07-18 15:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjtcd3jt2f 2026-07-21 10:07:06+00:00| seen|...

CVE-2026-49284

creationtimestamp| type| source ---|---|--- 2026-07-17 19:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujisgyt52s...

CVE-2026-50289 systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

EUVD-2026-45265

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

CVE-2026-50289

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

CVE-2026-50289 systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

CVE-2026-12691

creationtimestamp| type| source ---|---|--- 2026-07-17 19:29:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mquidevwe72g 2026-07-19 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyg4jrq442l...

CVE-2026-63101

creationtimestamp| type| source ---|---|--- 2026-07-17 19:23:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhyemnbm2s 2026-07-19 07:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqy7ggzcb72m...

CVE-2026-7755

The IBM Security Bulletin confirms CVE-2026-7755 affects Langflow OSS versions 1.0.0–1.10.0, where the File Manager API may bypass MCP server configuration validation during file uploads. A maliciously crafted MCP configuration file (e.g., mcp_servers .json) could be uploaded via upload_user_file...

CVE-2026-56453

creationtimestamp| type| source ---|---|--- 2026-07-17 19:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquhpb2hr72j...

CVE-2026-8476

Langflow OSS versions 1.0.0–1.10.0 are impacted by a remote code execution vulnerability in the disk-based cache. The AsyncDiskCache deserializes cached items with unsafe pickle.loads() without validation, allowing arbitrary code execution when an attacker can influence cached data (e.g., through...

CVE-2026-8481 Remote Code Execution via Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-15343

creationtimestamp| type| source ---|---|--- 2026-07-17 19:08:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquh5izcym2b...

CVE-2026-57860

creationtimestamp| type| source ---|---|--- 2026-07-17 19:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqugukc3jo2o 2026-07-19 08:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqycskfyak2f...

CVE-2026-8859 Path Traversal in APIRequest Component via Content-Disposition Header

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal vulnerability exists when the "Save to File" feature is enabled, where filenames extracted from HT...

CVE-2026-8859 Path Traversal in APIRequest Component via Content-Disposition Header

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal vulnerability exists when the "Save to File" feature is enabled, where filenames extracted from HT...

CVE-2026-58148

creationtimestamp| type| source ---|---|--- 2026-07-17 18:55:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqugg2jabe2q...

CVE-2026-63094

creationtimestamp| type| source ---|---|--- 2026-07-17 18:44:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquftzdovb2a 2026-07-19 10:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyjjfhw2h2a...