CVE-2026-17506

creationtimestamp| type| source ---|---|--- 2026-08-05 20:15:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msedquario2n...

CVE-2026-67979

creationtimestamp| type| source ---|---|--- 2026-08-05 20:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedovzhwu2f...

CVE-2026-8182

creationtimestamp| type| source ---|---|--- 2026-08-05 20:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msecyfwj5x2x...

CVE-2026-8478

creationtimestamp| type| source ---|---|--- 2026-08-05 20:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msecx66hyc2t...

CVE-2026-9201

creationtimestamp| type| source ---|---|--- 2026-08-05 20:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msecwxolne2e...

CVE-2026-17623

creationtimestamp| type| source ---|---|--- 2026-08-05 19:54:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msecmaqf5a23...

CVE-2026-17617

creationtimestamp| type| source ---|---|--- 2026-08-05 19:53:09+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msecjiasie22 2026-08-11 04:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrs4xvgke2t...

CVE-2026-8182

IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests...

CVE-2026-17633

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection...

CVE-2026-17632

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...

CVE-2026-17624

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports...

CVE-2026-98198

creationtimestamp| type| source ---|---|--- 2026-08-05 19:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96789 2026-08-06 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96789 2026-08-07 10:17:15+00:00| seen|...

CVE-2026-70611

creationtimestamp| type| source ---|---|--- 2026-08-05 18:48:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7av7rzxcbqvro 2026-08-05 19:31:21+00:00| seen| https://gist.github.com/alon710/186d223acc1b5d890a485795705464f7...

CVE-2026-10128

creationtimestamp| type| source ---|---|--- 2026-08-05 18:46:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cvh7ufxaqy3uh...

CVE-2026-17624 Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports...

CVE-2026-70448

creationtimestamp| type| source ---|---|--- 2026-08-05 18:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3uu2plyyoihiq...

GHSA-P2RR-RVMM-C5FP

creationtimestamp| type| source ---|---|--- 2026-08-05 18:31:28+00:00| seen| https://gist.github.com/alon710/665009967811310873cc6bc149b1a673...

CVE-2026-70447

creationtimestamp| type| source ---|---|--- 2026-08-05 18:28:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dwirplyq3m6dz...

CVE-2026-9196

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python code in the backend during validation prior to user...

CVE-2026-9201

IBM Langflow OSS 1.0.0–1.10.3 is affected by an authenticated arbitrary code execution vulnerability in the custom component validation mechanism. The hardening mode that restricts execution to trusted templates validates component code using a truncated SHA-256 digest, causing only a portion of ...