CVE-2026-58446

creationtimestamp| type| source ---|---|--- 2026-06-30 22:21:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk227pixu2k...

CVE-2026-9132

creationtimestamp| type| source ---|---|--- 2026-06-30 22:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjzthy3j42u...

CVE-2026-10129

creationtimestamp| type| source ---|---|--- 2026-06-30 22:16:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpjzqfenyu27 2026-07-14 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqlxjblot32f...

CVE-2026-10109

creationtimestamp| type| source ---|---|--- 2026-06-30 22:14:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpjzniyuv52w 2026-07-02 02:40:21+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpmyxdq5ub2v 2026-07-03 05:07:07+00:00| seen|...

CVE-2025-36319

creationtimestamp| type| source ---|---|--- 2026-06-30 22:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjznitshp23 2026-07-01 17:50:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm3dwjt4g2t...

CVE-2026-58450

creationtimestamp| type| source ---|---|--- 2026-06-30 22:11:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjzi4tmcx2b 2026-07-02 01:29:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmuyipomt2y...

CVE-2026-50254

creationtimestamp| type| source ---|---|--- 2026-06-30 22:09:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjzdacbg42k 2026-07-01 02:36:53+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01...

CVE-2026-56278

Flowise before 3.1.0 (affected: 3.0.13 and earlier) uses a weak hardcoded default session secret ('flowise') for express-session when EXPRESS_SESSION_SECRET is not set (packages/server/src/enterprise/middleware/passport/index.ts). Because the secret is publicly visible in the source, an attacker ...

CVE-2026-35505

creationtimestamp| type| source ---|---|--- 2026-06-30 22:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjz6qpaiy2z 2026-07-01 02:36:37+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01 2026-07-01 02:53:38+00:00| seen|...

CVE-2026-58447

creationtimestamp| type| source ---|---|--- 2026-06-30 22:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjz2m5zsw2s 2026-07-03 10:05:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcc3wwhe27 2026-07-19 19:53:57+00:00| seen|...

CVE-2026-11594

creationtimestamp| type| source ---|---|--- 2026-06-30 22:02:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjywr6fnl23 2026-07-02 01:37:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvgmmvyb2r 2026-07-03 10:04:47+00:00| seen|...

CVE-2025-36320

creationtimestamp| type| source ---|---|--- 2026-06-30 22:00:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjyt6bsws24 2026-07-01 18:12:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4kfefir2l...

CVE-2026-10562

creationtimestamp| type| source ---|---|--- 2026-06-30 21:56:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjymnc2dq25...

CVE-2026-9106

creationtimestamp| type| source ---|---|--- 2026-06-30 21:54:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjyjnm3on24...

CVE-2025-12530

creationtimestamp| type| source ---|---|--- 2026-06-30 21:53:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjygswnxx2k 2026-07-01 18:48:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm6lpl47j2r 2026-07-02 01:36:48+00:00| seen|...

Malicious code in @businessapp-microsites/apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70ab5da6865ec94b15097fa84836ab41f39b65a5277974b407c545d8d424c7f @businessapp-microsites/[email protected] is a dependency-confusion squat against the private scope @businessapp-microsites, published with an implausibl...

CVE-2026-7871

IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application privileges, compromising all secrets, data, and system integrity...

CVE-2026-10546

IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery SSRF vulnerability in the URL component src/lfx/src/lfx/components/datasource/url.py due to a Time-of-Check/Time-of-Use TOCTOU race condition that can be exploited via DNS rebinding...

CVE-2026-12073

creationtimestamp| type| source ---|---|--- 2026-06-30 20:17:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjt37jnli2e...

EUVD-2026-40401

IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/buildpublictmp/ endpoints that allows an unauthenticated attacker to read build event data or cancel jobs using a valid job identifier, resulting in information disclosure and denial of service...