CVE-2026-84295 Improper Authentication in Progress WS_FTP Server

Improper authentication in Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials...

CVE-2026-93680 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication...

CVE-2026-93680

Langflow OSS versions 1.0.0 through 1.12.8 are vulnerable to an authentication bypass (CWE-287) that allows a remote attacker to bypass security restrictions. Specifically, versions 1.5.0 through 1.11.4 allow unauthenticated connections to the MCP SSE endpoint , enabling attackers to initialize M...

CVE-2026-93680 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication...

EUVD-2026-113155

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication...

CVE-2026-110245 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication...

EUVD-2026-113127

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication...

CVE-2026-110245

Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to improper authentication (CWE-287 ). This flaw could allow a remote attacker to obtain sensitive information. To remediate this vulnerability, IBM strongly recommends upgrading to version 1.12.5 . For users on affected versions, it is ad...

CVE-2026-110245

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication...

SUSE-SU-2026:4927-1 Security update for libapr1, libtcnative-1-0, tomcat

This update for libapr1, libtcnative-1-0, tomcat fixes the following issues: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. - CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure bsc1286502. - CVE-2026-7404...

CVE-2026-90862: Progress Software WS_FTP Server: Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and…

Improper authentication in the Web Transfer Module of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...

Microsoft Entra Application Proxy Service Applicability Detector

Microsoft Entra application proxy contains an improper authentication vulnerability. This offline tool identifies explicitly named service records in local CSV or JSON inventories for applicability review; it does not determine current vulnerability status or remediation...

Progress Software WS_FTP Server authorization issue vulnerability

Security vulnerabilities exist in Progress Software WSFTP Server versions prior to 2024.0.6 and prior to 2025.0.3. These vulnerabilities stem from improper authentication and may allow unauthenticated remote attackers to access sensitive information, including administrator credentials...

Progress Software WS_FTP Server authorization issue vulnerability

Versions prior to Progress Software WSFTP Server 2024.0.7 and 2025.0.4 contain an authorization issue vulnerability stemming from improper authentication in the Web Transfer Module. This vulnerability may allow attackers possessing the user’s password to access certain files associated with that...

PT-2026-132237

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication...

CVE-2026-110245: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper…

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication...

PT-2026-132330

Improper authentication in the Web Transfer Module of Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...

CVE-2026-84295: Progress Software WS_FTP Server: Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could…

Improper authentication in Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials...

PT-2026-132327

Name of the Vulnerable Software and Affected Versions Progress Software WS FTP Server versions prior to 2024.0.6 Progress Software WS FTP Server versions prior to 2025.0.3 Description Improper authentication on Windows allows an unauthenticated remote attacker to access sensitive information,...

CVE-2026-103779

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. A low privilege...