PT-2026-26781

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.7.1 Description Langflow is a tool for building and deploying AI-powered agents and workflows. In the download profile picture function of the /profile pictures/folder name/file name API endpoint, the folder name a...

CVE-2026-32764

creationtimestamp| type| source ---|---|--- 2026-03-19 23:16:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32764 2026-03-20 01:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhfoxt3su2e...

CVE-2026-0954

creationtimestamp| type| source ---|---|--- 2026-03-19 23:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhh45xuodo2x...

CVE-2026-32099

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, when a user has hideprofile enabled, their bio, location, and website were still exposed through the user onebox preview. An authenticated user could request a onebox for a hidden user's...

CVE-2026-33302

creationtimestamp| type| source ---|---|--- 2026-03-19 22:10:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgzfigezw2n...

CVE-2026-4395

creationtimestamp| type| source ---|---|--- 2026-03-19 22:07:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgza4gc6d2n...

EUVD-2026-13332

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, when a user has hideprofile enabled, their bio, location, and website were still exposed through the user onebox preview. An authenticated user could request a onebox for a hidden user's...

CVE-2026-32099 Discourse prevents hidden profile data leak via user onebox

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, when a user has hideprofile enabled, their bio, location, and website were still exposed through the user onebox preview. An authenticated user could request a onebox for a hidden user's...

CVE-2026-32099 Discourse prevents hidden profile data leak via user onebox

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, when a user has hideprofile enabled, their bio, location, and website were still exposed through the user onebox preview. An authenticated user could request a onebox for a hidden user's...

CVE-2026-32099

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, when a user has hideprofile enabled, their bio, location, and website were still exposed through the user onebox preview. An authenticated user could request a onebox for a hidden user's...

CVE-2026-32099 Discourse prevents hidden profile data leak via user onebox

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, when a user has hideprofile enabled, their bio, location, and website were still exposed through the user onebox preview. An authenticated user could request a onebox for a hidden user's...

CVE-2026-32099

Discourse (open-source platform) is vulnerable in versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 due to improper exposure of hidden profile fields (bio, location, website) in the user onebox preview. An authenticated user could request a onebox for a hidden profile URL and receive th...

CVE-2026-33299

creationtimestamp| type| source ---|---|--- 2026-03-19 21:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgyenligv2n...

CVE-2026-32191

creationtimestamp| type| source ---|---|--- 2026-03-19 21:23:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgwq6xs252h 2026-03-19 21:23:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgwrf3me42v 2026-03-19 21:23:44+00:00| seen|...

CVE-2026-32728

creationtimestamp| type| source ---|---|--- 2026-03-19 21:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgvj7xwc425 2026-03-19 21:13:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgw6rdod52h...

EUVD-2026-13124

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile. An authenticated attacker can inject parts of an XSS payload in their first and last name fields. The payload is executed when the user's full name is rendered. The...

CVE-2026-26931

creationtimestamp| type| source ---|---|--- 2026-03-19 18:04:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhglmdgtvr2n 2026-03-20 13:10:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilocfjpg2q...

CVE-2026-32866

OPEXUS eComplaint and eCASE prior to version 10.2.0.0 are affected by a stored XSS vulnerability in profile name handling. An authenticated user can inject parts of an XSS payload into their first and last name fields, and the payload is executed when the full name is rendered, allowing script ex...

CVE-2026-32866 OPEXUS eComplaint and eCase stored XSS via profile first and last name

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile. An authenticated attacker can inject parts of an XSS payload in their first and last name fields. The payload is executed when the user's full name is rendered. The...

CVE-2026-32866 OPEXUS eComplaint and eCase stored XSS via profile first and last name

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile. An authenticated attacker can inject parts of an XSS payload in their first and last name fields. The payload is executed when the user's full name is rendered. The...