EUVD-2026-113005

P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 whole module. The loop over the ports never advanced to the next port, so the request never completes and the device stops responding. A remote unauthenticated attacker can use th...

cve-2024-4577-lab

CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab / CTF A self-contained, from-scratch Docker lab that demonstrates the real argument-injection → Remote Code Execution primitive behind CVE-2024-4577. Exploit it over http://localhost:8080, pop a shell, and read the flag from inside the...

CVE-2026-42167

CVE-2026-42167: SQL Injection in ProFTPD modsql 📋 Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE. Attribute| Value ---|--- Type| SQL Injection CWE-89...

CVE-2026-61991

The AjaxLoadMore Cache WordPress plugin versions

CVE-2026-61991 WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in AjaxLoadMore Cache = 3.1.1 versions...

CVE-2026-18894 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are...

CVE-2026-18894

IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to a code injection flaw (CWE-94 ). A remote attacker can trigger pre-existing stored Python component code within a public workflow, executing it under the flow owner's runtime context. This bypasses the trust boundary intended to res...

EUVD-2026-113159

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are...

EUVD-2026-113157

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-77819

Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to a path traversal vulnerability (CWE-22 ). A remote authenticated attacker can exploit the improper limitation of a pathname to a restricted directory to overwrite arbitrary files . This flaw results in a medium severity impact (CVSS 6.5...

EUVD-2026-113155

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication...

CVE-2026-103092 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

CVE-2026-103092

IBM Langflow OSS versions 1.0.0 through 1.12.3 are affected by CVE-2026-103092 , which allows a remote authenticated attacker to execute arbitrary SQL commands due to improper access control (CWE-284). This vulnerability carries a CVSS base score of 8.5. To remediate this issue, IBM strongly reco...

EUVD-2026-113153

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

EUVD-2026-113152

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...

CVE-2026-101288 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...

CVE-2026-101288

IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to a Code Injection vulnerability (CVE-2026-101288 ). A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in code. This flaw has a CVSS base score of 8.8 , indicating h...

CVE-2026-104309 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-104309

IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to a Path Traversal vulnerability (CVE-2026-104309 ). This flaw occurs due to the improper limitation of a pathname to a restricted directory , which could allow a remote authenticated attacker to obtain sensitive information . The imp...

CVE-2026-104310

Langflow OSS versions 1.0.0 through 1.12.3 are affected by a Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-104310). This flaw could allow a remote authenticated attacker to obtain sensitive information by forcing the server to make unintended requests. IBM identifies this as a medium...