VulnCheck KEV: CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

Microsoft Edge (Chromium) < 151.0.4129.59 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.59. It is, therefore, affected by multiple vulnerabilities as referenced in the July 31, 2026 advisory. - Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute...

CVE-2026-59231

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

CVE-2026-59231

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Security Bulletin: Unauthenticated Session History Access via Public Flow Execution

Summary A session ID namespace bypass vulnerability existed in Langflow OSS' POST /api/v1/buildpublictmp/flowid/flow endpoint that allowed unauthenticated attackers to access chat history from other users' sessions. The endpoint accepted an inputs.session parameter that could override the session...

DEBIAN-CVE-2026-18358

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication...

SUSE CVE-2026-17776

Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-51359

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE EtherType 0x88B8 Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing,...

CVE-2026-18019

A side-channel information leakage flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=525691898...

CVE-2026-17970

An insufficient validation of untrusted input flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518814464...

CVE-2026-18015

An inappropriate implementation flaw was found in the Tint component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523698428...

CVE-2026-17981

An inappropriate implementation flaw was found in the Blink component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519719512...

CVE-2026-17961

An inappropriate implementation flaw was found in the Session component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517700791...

CVE-2026-18008

An inappropriate implementation flaw was found in the Settings component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522412676...

CVE-2026-17994

An inappropriate implementation flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520663771...

CVE-2026-17984

An inappropriate implementation flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519978460...

CVE-2026-17987

An insufficient validation of untrusted input flaw was found in the Notifications component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519988071...

CVE-2026-17996

An inappropriate implementation flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521473427...

CVE-2026-17990

An insufficient validation of untrusted input flaw was found in the WebAuthn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520018012...