CVE-2026-110196 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs...

CVE-2026-110196

IBM Langflow OSS versions 1.0.0 through 1.12.4 are affected by a vulnerability where a remote attacker with a low-privileged authenticated account can bypass administrator-only restrictions. By providing attacker-supplied inputs to a built-in code-execution component, the attacker can execute arb...

CVE-2026-96198

A heap-based buffer overflow exists in Microsoft Edge (Chromium-based) , potentially allowing an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. Versions prior to 155.0.4283.62 are identified as affected. A fix is available in version 155.0.4283.62 or later. While the...

EUVD-2026-113124

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

EUVD-2026-113125

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-96199

A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is present in versions prior to 155.0.4283.62 , as indicated by associated security scanning data. While specific exploitation d...

EUVD-2026-113123

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-85897

A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. The vulnerability has been observed in the wild, as noted in security bulletins. Versions prior to 155.0.4283.62 are identified as affected; remediation is available via...

EUVD-2026-113122

Double free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-85890

A double free vulnerability exists in Microsoft Edge (Chromium-based) , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is present in versions prior to 155.0.4283.62 . While specific technical root causes or internal components are not...

OPENSUSE-SU-2026:22183-1 Security update for python-Brotli

This update for python-Brotli fixes the following issues: - CVE-2025-6176: denial of service DoS due to a flaw in its brotli decompression bsc1252945. - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution bsc1287779. Update to 1.2.1: - decoder / encoder: added static...

Security Bulletin: IBM QRadar SIEM contains PHP components with known vulnerabilities

Summary IBM QRadar SIEM contains versions of PHP vulnerable to PHP2Shell vulnerabilities. This bulletin contains mitigations for QRadar SIEM systems. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handli...

CVE-2026-116723

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...

brotli: Out-of-Bounds Write in Google Brotli Decoder

A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or...

Advisory ROSA-SA-2026-3326

Software: ruby4.0 OS: ROSA-CHROME Affected versions: = ruby4.0-4.0.9-2 Unaffected versions: ruby4.0-4.0.9-2 CVE-ID: CVE-2026-110264, CVE-2026-93577, CVE-2026-97229 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Allows an unauthenticated user to execute arbitrary code on the server CVE-STATUS: Vulnerabili...

Advisory ROSA-SA-2026-3325

Software: Ruby OS: ROSA-CHROME Affected versions: = ruby-3.2.10-17 Affected versions: ruby-3.2.10-17 CVE-ID: CVE-2026-110264, CVE-2026-93577, CVE-2026-97229 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Allows an unauthenticated user to execute arbitrary code on the server CVE-STATUS: Vulnerability has...

Exploit for CVE-2026-98432

cve-2026-98432-audit !CVEhttps://img.shields.io/badge/CVE-...

Advisory ROSA-SA-2026-3324

Software: ruby3.2 OS: ROSA-CHROME Affected versions: = ruby3.2-3.2.10-3 Unaffected versions: ruby3.2-3.2.10-3 CVE-ID: CVE-2026-110264, CVE-2026-93577, CVE-2026-97229 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Allows an unauthenticated user to execute arbitrary code on the server CVE-STATUS:...

openjdk: Enhance Kerberos validation (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Generic Security Services JGSS component. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code within a sandboxed Java environment. Successful exploitation results in unauthorized information disclosure...

openjdk: Enhance Kerberos validation (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Generic Security Services JGSS component. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code within a sandboxed Java environment. Successful exploitation results in unauthorized information disclosure...