Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-7771 |
|
Vulnerability in dos (CVE-2026-7771)
vulnerability in dos (CVE-2026-7771). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7755 |
|
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to...
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to...
|
| CVE-2026-7872 |
|
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files...
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files...
|
| CVE-2026-8056 |
|
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters...
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters...
|
| CVE-2026-8476 |
|
Unsafe Deserialization in langflow (CVE-2026-8476)
vulnerability in langflow (CVE-2026-8476). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8481 |
|
Code Injection in c (CVE-2026-8481)
code injection in c (CVE-2026-8481). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/validate/code`.
|
| CVE-2026-7667 |
|
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow...
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow...
|
| CVE-2026-7754 |
|
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery ...
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery ...
|
| CVE-2026-7364 |
|
Open Redirect in ibm (CVE-2026-7364)
vulnerability in ibm (CVE-2026-7364). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63030 KEV |
|
WordPress Core — WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
|
| CVE-2026-60137 KEV |
|
[KEV] SQL Injection in Wordpress sqli (CVE-2026-60137)
SQL injection in Wordpress sqli (CVE-2026-60137). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2026-4938 |
|
Authorization Flaw in ibm (CVE-2026-4938)
vulnerability in ibm (CVE-2026-4938). Data can be tampered with by attackers.
|
| CVE-2026-4942 |
|
Vulnerability in ibm (CVE-2026-4942)
vulnerability in ibm (CVE-2026-4942). Confidential information can be exposed externally.
|
| CVE-2026-48373 |
|
Vulnerability in adobe (CVE-2026-48373)
vulnerability in adobe (CVE-2026-48373). Successful exploitation can lead to full system takeover.
|
| CVE-2026-36669 |
|
Unrestricted File Upload in CVE-2026-36669 (CVE-2026-36669)
vulnerability in CVE-2026-36669 (CVE-2026-36669). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15995 |
|
Vulnerability in ibm (CVE-2026-15995)
vulnerability in ibm (CVE-2026-15995). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14501 |
|
Vulnerability in ibm (CVE-2026-14501)
vulnerability in ibm (CVE-2026-14501). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14971 |
|
Vulnerability in ibm (CVE-2026-14971)
vulnerability in ibm (CVE-2026-14971). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14979 |
|
Vulnerability in dos (CVE-2026-14979)
vulnerability in dos (CVE-2026-14979). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15069 |
|
OS Command Injection in ibm (CVE-2026-15069)
OS command injection in ibm (CVE-2026-15069). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15091 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-15091)
cross-site scripting in ibm (CVE-2026-15091). Confidential information can be exposed externally.
|
| CVE-2026-15093 |
|
Open Redirect in ibm (CVE-2026-15093)
vulnerability in ibm (CVE-2026-15093). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15322 |
|
Vulnerability in ibm (CVE-2026-15322)
vulnerability in ibm (CVE-2026-15322). Confidential information can be exposed externally.
|
| CVE-2026-13448 |
|
Vulnerability in langflow (CVE-2026-13448)
vulnerability in langflow (CVE-2026-13448). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14499 |
|
OS Command Injection in langflow (CVE-2026-14499)
OS command injection in langflow (CVE-2026-14499). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13473 |
|
Vulnerability in ibm (CVE-2026-13473)
vulnerability in ibm (CVE-2026-13473). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9103 |
|
Vulnerability in langflow (CVE-2026-9103)
vulnerability in langflow (CVE-2026-9103). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9135 |
|
Code Injection in langflow (CVE-2026-9135)
code injection in langflow (CVE-2026-9135). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9171 |
|
Vulnerability in dos (CVE-2026-9171)
vulnerability in dos (CVE-2026-9171). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9198 KEV |
|
[KEV] Code Injection in Ibm langflow (CVE-2026-9198)
code injection in Ibm langflow (CVE-2026-9198). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-9202 |
|
Vulnerability in langflow (CVE-2026-9202)
vulnerability in langflow (CVE-2026-9202). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9762 |
|
Code Injection in ibm (CVE-2026-9762)
code injection in ibm (CVE-2026-9762). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63308 |
|
Vulnerability in dos (CVE-2026-63308)
vulnerability in dos (CVE-2026-63308). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63093 |
|
Vulnerability in anysphere (CVE-2026-63093)
vulnerability in anysphere (CVE-2026-63093). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16009 |
|
Vulnerability in sqli (CVE-2026-16009)
vulnerability in sqli (CVE-2026-16009). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62764 |
|
Vulnerability in apache (CVE-2026-62764)
vulnerability in apache (CVE-2026-62764). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9656 |
|
Information Disclosure in wordpress (CVE-2026-9656)
vulnerability in wordpress (CVE-2026-9656). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12393 |
|
Vulnerability in wordpress (CVE-2026-12393)
vulnerability in wordpress (CVE-2026-12393). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13402 |
|
Information Disclosure in wordpress (CVE-2026-13402)
vulnerability in wordpress (CVE-2026-13402). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9810 |
|
Privilege Escalation in wordpress (CVE-2026-9810)
vulnerability in wordpress (CVE-2026-9810). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10525 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10525)
cross-site scripting in wordpress (CVE-2026-10525). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11575 |
|
Vulnerability in wordpress (CVE-2026-11575)
vulnerability in wordpress (CVE-2026-11575). Data can be tampered with by attackers.
|
| CVE-2026-11961 |
|
Privilege Escalation in wordpress (CVE-2026-11961)
vulnerability in wordpress (CVE-2026-11961). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11966 |
|
Vulnerability in wordpress (CVE-2026-11966)
vulnerability in wordpress (CVE-2026-11966). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15982 |
|
Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15094 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15094)
cross-site scripting in wordpress (CVE-2026-15094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15161 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15161)
cross-site scripting in wordpress (CVE-2026-15161). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15349 |
|
Vulnerability in wordpress (CVE-2026-15349)
vulnerability in wordpress (CVE-2026-15349). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15457 |
|
Path Traversal in wordpress (CVE-2026-15457)
path traversal in wordpress (CVE-2026-15457). Confidential information can be exposed externally.
|
| CVE-2026-15759 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15759)
cross-site scripting in wordpress (CVE-2026-15759). Risk of unauthorized operations or information disclosure.
|