Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-7771 Vulnerability in dos (CVE-2026-7771)
vulnerability in dos (CVE-2026-7771). Risk of unauthorized operations or information disclosure.
CVE-2026-7755 IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to...
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to...
CVE-2026-7872 IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files...
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files...
CVE-2026-8056 IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters...
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters...
CVE-2026-8476 Unsafe Deserialization in langflow (CVE-2026-8476)
vulnerability in langflow (CVE-2026-8476). Successful exploitation can lead to full system takeover.
CVE-2026-8481 Code Injection in c (CVE-2026-8481)
code injection in c (CVE-2026-8481). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/validate/code`.
CVE-2026-7667 IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow...
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow...
CVE-2026-7754 IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery ...
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery ...
CVE-2026-7364 Open Redirect in ibm (CVE-2026-7364)
vulnerability in ibm (CVE-2026-7364). Risk of unauthorized operations or information disclosure.
CVE-2026-63030 KEV WordPress Core — WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
CVE-2026-60137 KEV [KEV] SQL Injection in Wordpress sqli (CVE-2026-60137)
SQL injection in Wordpress sqli (CVE-2026-60137). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-4938 Authorization Flaw in ibm (CVE-2026-4938)
vulnerability in ibm (CVE-2026-4938). Data can be tampered with by attackers.
CVE-2026-4942 Vulnerability in ibm (CVE-2026-4942)
vulnerability in ibm (CVE-2026-4942). Confidential information can be exposed externally.
CVE-2026-48373 Vulnerability in adobe (CVE-2026-48373)
vulnerability in adobe (CVE-2026-48373). Successful exploitation can lead to full system takeover.
CVE-2026-36669 Unrestricted File Upload in CVE-2026-36669 (CVE-2026-36669)
vulnerability in CVE-2026-36669 (CVE-2026-36669). Successful exploitation can lead to full system takeover.
CVE-2026-15995 Vulnerability in ibm (CVE-2026-15995)
vulnerability in ibm (CVE-2026-15995). Risk of unauthorized operations or information disclosure.
CVE-2026-14501 Vulnerability in ibm (CVE-2026-14501)
vulnerability in ibm (CVE-2026-14501). Risk of unauthorized operations or information disclosure.
CVE-2026-14971 Vulnerability in ibm (CVE-2026-14971)
vulnerability in ibm (CVE-2026-14971). Risk of unauthorized operations or information disclosure.
CVE-2026-14979 Vulnerability in dos (CVE-2026-14979)
vulnerability in dos (CVE-2026-14979). Risk of unauthorized operations or information disclosure.
CVE-2026-15069 OS Command Injection in ibm (CVE-2026-15069)
OS command injection in ibm (CVE-2026-15069). Risk of unauthorized operations or information disclosure.
CVE-2026-15091 Cross-Site Scripting (XSS) in ibm (CVE-2026-15091)
cross-site scripting in ibm (CVE-2026-15091). Confidential information can be exposed externally.
CVE-2026-15093 Open Redirect in ibm (CVE-2026-15093)
vulnerability in ibm (CVE-2026-15093). Risk of unauthorized operations or information disclosure.
CVE-2026-15322 Vulnerability in ibm (CVE-2026-15322)
vulnerability in ibm (CVE-2026-15322). Confidential information can be exposed externally.
CVE-2026-13448 Vulnerability in langflow (CVE-2026-13448)
vulnerability in langflow (CVE-2026-13448). Successful exploitation can lead to full system takeover.
CVE-2026-14499 OS Command Injection in langflow (CVE-2026-14499)
OS command injection in langflow (CVE-2026-14499). Successful exploitation can lead to full system takeover.
CVE-2026-13473 Vulnerability in ibm (CVE-2026-13473)
vulnerability in ibm (CVE-2026-13473). Successful exploitation can lead to full system takeover.
CVE-2026-9103 Vulnerability in langflow (CVE-2026-9103)
vulnerability in langflow (CVE-2026-9103). Successful exploitation can lead to full system takeover.
CVE-2026-9135 Code Injection in langflow (CVE-2026-9135)
code injection in langflow (CVE-2026-9135). Successful exploitation can lead to full system takeover.
CVE-2026-9171 Vulnerability in dos (CVE-2026-9171)
vulnerability in dos (CVE-2026-9171). Risk of unauthorized operations or information disclosure.
CVE-2026-9198 KEV [KEV] Code Injection in Ibm langflow (CVE-2026-9198)
code injection in Ibm langflow (CVE-2026-9198). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-9202 Vulnerability in langflow (CVE-2026-9202)
vulnerability in langflow (CVE-2026-9202). Successful exploitation can lead to full system takeover.
CVE-2026-9762 Code Injection in ibm (CVE-2026-9762)
code injection in ibm (CVE-2026-9762). Successful exploitation can lead to full system takeover.
CVE-2026-63308 Vulnerability in dos (CVE-2026-63308)
vulnerability in dos (CVE-2026-63308). Risk of unauthorized operations or information disclosure.
CVE-2026-63093 Vulnerability in anysphere (CVE-2026-63093)
vulnerability in anysphere (CVE-2026-63093). Successful exploitation can lead to full system takeover.
CVE-2026-16009 Vulnerability in sqli (CVE-2026-16009)
vulnerability in sqli (CVE-2026-16009). Risk of unauthorized operations or information disclosure.
CVE-2026-62764 Vulnerability in apache (CVE-2026-62764)
vulnerability in apache (CVE-2026-62764). Risk of unauthorized operations or information disclosure.
CVE-2026-9656 Information Disclosure in wordpress (CVE-2026-9656)
vulnerability in wordpress (CVE-2026-9656). Risk of unauthorized operations or information disclosure.
CVE-2026-12393 Vulnerability in wordpress (CVE-2026-12393)
vulnerability in wordpress (CVE-2026-12393). Risk of unauthorized operations or information disclosure.
CVE-2026-13402 Information Disclosure in wordpress (CVE-2026-13402)
vulnerability in wordpress (CVE-2026-13402). Risk of unauthorized operations or information disclosure.
CVE-2026-9810 Privilege Escalation in wordpress (CVE-2026-9810)
vulnerability in wordpress (CVE-2026-9810). Successful exploitation can lead to full system takeover.
CVE-2026-10525 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10525)
cross-site scripting in wordpress (CVE-2026-10525). Risk of unauthorized operations or information disclosure.
CVE-2026-11575 Vulnerability in wordpress (CVE-2026-11575)
vulnerability in wordpress (CVE-2026-11575). Data can be tampered with by attackers.
CVE-2026-11961 Privilege Escalation in wordpress (CVE-2026-11961)
vulnerability in wordpress (CVE-2026-11961). Successful exploitation can lead to full system takeover.
CVE-2026-11966 Vulnerability in wordpress (CVE-2026-11966)
vulnerability in wordpress (CVE-2026-11966). Risk of unauthorized operations or information disclosure.
CVE-2026-15982 Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
CVE-2026-15094 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15094)
cross-site scripting in wordpress (CVE-2026-15094). Risk of unauthorized operations or information disclosure.
CVE-2026-15161 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15161)
cross-site scripting in wordpress (CVE-2026-15161). Risk of unauthorized operations or information disclosure.
CVE-2026-15349 Vulnerability in wordpress (CVE-2026-15349)
vulnerability in wordpress (CVE-2026-15349). Risk of unauthorized operations or information disclosure.
CVE-2026-15457 Path Traversal in wordpress (CVE-2026-15457)
path traversal in wordpress (CVE-2026-15457). Confidential information can be exposed externally.
CVE-2026-15759 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15759)
cross-site scripting in wordpress (CVE-2026-15759). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →