CVE-2026-101329

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control...

CVE-2026-101329

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control...

EUVD-2026-94105

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control...

CVE-2026-104335

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control...

CVE-2026-104335

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control...

CVE-2026-93449 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-93445

IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to arbitrary code execution. A remote authenticated attacker can exploit the software due to improper control of generation of code (CWE-94). The vulnerability carries a CVSS 3.1 base score of 8.1 (High) , with impacts on confidentiali...

CVE-2026-93445 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

PT-2026-107602

Name of the Vulnerable Software and Affected Versions Cisco Meraki affected versions not specified Description Improper access control issues were identified during an internal security review. These issues are categorized under CWE-284, which refers to improper access control, where a software...

CVE-2026-104678: Improper Access Control

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2026-76498: Improper Access Control

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller APIC engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internall...

PT-2026-107563

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...

CVE-2026-107205: Missing Authentication for Critical Function

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...

CVE-2026-76282: Improper Control of a Resource Through its Lifetime

Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures...

CVE-2026-101329: Improper Access Control

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control...

PT-2026-107607

Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description Insufficient control flow management issues were identified during an internal security review. These issues are categorized under CWE-691, which refers to a failure to...

PT-2026-107617

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC affected versions not specified Description Insufficient access control to file system resources within the export policies functionality allows an authenticated remote attacker with...

CVE-2026-76455: Improper Access Control

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

PT-2026-107650

Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2...

CVE-2026-93445: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...