CVE-2026-42867 Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without...

CVE-2026-44961

The XML‑RPC API addUser method has a validation bypass introduced in the fix for CVE‑2025‑55129. As a result, API users could create usernames that enabled impersonation or stored XSS attacks. Proper validation has been added where it was missing...

CVE-2026-50023

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...

CVE-2026-8172

creationtimestamp| type| source ---|---|--- 2026-06-23 08:26:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowy4lqfd72a...

CVE-2026-8379

creationtimestamp| type| source ---|---|--- 2026-06-23 08:21:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowxtmrwaw2c...

CVE-2026-44171

A flaw was found in MariaDB's mbstream utility. This vulnerability allows a highly privileged local attacker, who can provide a specially crafted archive, to create files outside of the intended target directory. This is due to mbstream not properly validating paths containing directory traversal...

CVE-2026-7842

creationtimestamp| type| source ---|---|--- 2026-06-23 07:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moww3fmi5f2f...

Blinko <= 1.8.3 - User Information Leak

Blinko = 1.8.4 contains an information disclosure caused by a publicly accessible endpoint exposing user information including usernames, roles, and account creation dates, letting remote attackers access sensitive user data, exploit requires no special privileges. id: CVE-2026-23486 info: name:...

Moodle - Cross-Site Scripting/Remote Code Execution

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. Moodle versions 4.1.x before 4.1.3 and 4.2.x before...

Telesquare TLR-2855KS6 - Arbitrary File Creation

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts. id: CVE-2021-46418 info: name: Telesquare TLR-2855KS6 - Arbitrary File Creation author: DhiyaneshDK severity: high description: | An unauthorized file creation vulnerability in...

WSO2 User Registration - Arbitrary Account Creation

The SOAP admin service in WSO2 products has a security vulnerability that allows the creation of new user accounts regardless of the self-registration configuration settings. id: CVE-2024-7097 info: name: WSO2 User Registration - Arbitrary Account Creation author: iamnoooob,rootxharsh,pdresearch...

CVE-2026-44089

creationtimestamp| type| source ---|---|--- 2026-06-23 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-44089 2026-06-23 14:47:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxneoahvj2r 2026-06-23 16:13:07+00:00| seen|...

CVE-2026-41523

creationtimestamp| type| source ---|---|--- 2026-06-23 02:37:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3moweld2smf2l 2026-06-23 05:13:50+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mowndjk4ct2x...

CVE-2026-54232

creationtimestamp| type| source ---|---|--- 2026-06-23 01:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow7gveg3u2j...

CVE-2026-48505

creationtimestamp| type| source ---|---|--- 2026-06-23 00:50:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow6lzrmz42a...

CVE-2026-48509

creationtimestamp| type| source ---|---|--- 2026-06-23 00:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow65lsemi23...

CVE-2026-48109

creationtimestamp| type| source ---|---|--- 2026-06-23 00:26:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5avfblh2o...

CVE-2026-53923

creationtimestamp| type| source ---|---|--- 2026-06-23 00:15:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow4o6qwhh26...

CVE-2026-50556

creationtimestamp| type| source ---|---|--- 2026-06-22 23:25:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzuf2ets2s...

CVE-2026-50170

creationtimestamp| type| source ---|---|--- 2026-06-22 23:21:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzngi3qy2j...