CVE-2026-55524

creationtimestamp| type| source ---|---|--- 2026-08-06 02:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msex2ucu7l2g...

CVE-2026-67869

creationtimestamp| type| source ---|---|--- 2026-08-06 00:59:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msetnyu4se2t 2026-08-06 01:56:31+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3msewt7h35e2l...

CVE-2026-71316

creationtimestamp| type| source ---|---|--- 2026-08-06 00:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mseqdchgvo2t 2026-08-06 04:31:21+00:00| seen| https://gist.github.com/alon710/a33e8f1d3990c5613ef07342bcfbda1b...

GHSA-QQ9Q-X9W4-CHHJ

creationtimestamp| type| source ---|---|--- 2026-08-05 23:31:11+00:00| seen| https://gist.github.com/alon710/55629b813908ae24f1e292f2b3f6a8d5 2026-08-06 00:00:17+00:00| seen| https://gist.github.com/alon710/55629b813908ae24f1e292f2b3f6a8d5...

CVE-2026-18953

creationtimestamp| type| source ---|---|--- 2026-08-05 22:20:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msekrhixql2b 2026-08-06 02:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msex32tqsv2n 2026-08-06 03:26:49+00:00| seen|...

CVE-2026-71318

creationtimestamp| type| source ---|---|--- 2026-08-05 22:20:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dvfbxx3u4bdfr 2026-08-06 03:31:34+00:00| seen| https://gist.github.com/alon710/3d7b500e615305ceff4644e15070fc7a...

CVE-2026-71314

creationtimestamp| type| source ---|---|--- 2026-08-05 21:31:30+00:00| seen| https://gist.github.com/alon710/ea06609eb056fc8864effae3b0dc1b95 2026-08-05 22:00:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msejmrvz752z...

CVE-2026-68004

creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:03+00:00| seen| Telegram/lFoBJsBJrsgLmESCPhvSqV0oex82MROWaDEk0EpTuUjmgWw 2026-08-06 00:00:09+00:00| published-proof-of-concept| Telegram/lFoBJsBJrsgLmESCPhvSqV0oex82MROWaDEk0EpTuUjmgWw...

EUVD-2026-53643

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...

CVE-2026-68746

creationtimestamp| type| source ---|---|--- 2026-08-05 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedzmklik2b...

CVE-2026-70426

creationtimestamp| type| source ---|---|--- 2026-08-05 20:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedsipw252f 2026-08-06 01:05:57+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msetysiuoq2u 2026-08-06 03:20:51+00:00| seen|...

CVE-2026-17624

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports...

CVE-2026-98198

creationtimestamp| type| source ---|---|--- 2026-08-05 19:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96789 2026-08-06 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96789...

CVE-2026-10128

creationtimestamp| type| source ---|---|--- 2026-08-05 18:46:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cvh7ufxaqy3uh...

CVE-2026-17624 Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports...

CVE-2026-9196

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python code in the backend during validation prior to user...

CVE-2026-9201

IBM Langflow OSS 1.0.0–1.10.3 is affected by an authenticated arbitrary code execution vulnerability in the custom component validation mechanism. The hardening mode that restricts execution to trusted templates validates component code using a truncated SHA-256 digest, causing only a portion of ...

CVE-2026-8183

Langflow OSS is affected (versions 1.0.0–1.10.3) by a vulnerability described as remote directory traversal via crafted URLs containing dot-dot sequences ( /.. / ), enabling access to arbitrary files on the system. The Connected CVE entry corroborates the affected versions and the traversal vecto...

CVE-2026-8183

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot "...

CVE-2026-9130

CVE-2026-9130 affects IBM Langflow OSS versions 1.0.0–1.10.3. The root cause is an authorization bypass in the MemoryComponent where session_id is used to filter messages without validating flow_id or user_id ownership, enabling cross‑user information disclosure. This impacts multi‑user deploymen...