CVE-2026-12944 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...

CVE-2026-12944

IBM Langflow OSS 1.0.0 through 1.10.0 contains a vulnerability in its code security scanner where the DANGEROUS_IMPORTS blocklist correctly blocked subprocess but omitted the socket and urllib standard library modules. This allowed authenticated users to submit components containing socket.connec...

V-CMS 1.0 SQL Injection

------------------------------------------------------------------------ Software................V-CMS 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://v-cms.org/ Discovery Date..........11/13/2011 Tested On...............Windows Vista ...