Security Operations
Threat Intelligence
❓
INFORMATIONAL
CVE-2026-106036 - Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS c
NEAR-REAL-TIME
CVE-2026-106036 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
CRITICAL
CVE-2026-104339 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutraliza
NEAR-REAL-TIME
CVE-2026-104339 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104331 - IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat
NEAR-REAL-TIME
CVE-2026-104331 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
HIGH
CVE-2026-104328 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to impro
NEAR-REAL-TIME
CVE-2026-104328 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
HIGH
CVE-2026-104324 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deser
NEAR-REAL-TIME
CVE-2026-104324 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
HIGH
CVE-2026-104317 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitr
NEAR-REAL-TIME
CVE-2026-104317 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104316 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background wo
NEAR-REAL-TIME
CVE-2026-104316 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104315 - IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat
NEAR-REAL-TIME
CVE-2026-104315 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104314 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow
NEAR-REAL-TIME
CVE-2026-104314 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
LOW
CVE-2026-104312 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive co
NEAR-REAL-TIME
CVE-2026-104312 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104310 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to
NEAR-REAL-TIME
CVE-2026-104310 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104309 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to
NEAR-REAL-TIME
CVE-2026-104309 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-104308 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to im
NEAR-REAL-TIME
CVE-2026-104308 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
HIGH
CVE-2026-103092 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due
NEAR-REAL-TIME
CVE-2026-103092 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-102590 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to
NEAR-REAL-TIME
CVE-2026-102590 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
HIGH
CVE-2026-101288 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to impro
NEAR-REAL-TIME
CVE-2026-101288 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2025-13050 - Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user
NEAR-REAL-TIME
CVE-2025-13050 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
Source ↗
MEDIUM
CVE-2026-119142 - wasmtime: Wasmtime: Denial of Service via canceled asynchronous function calls
NEAR-REAL-TIME
CVE-2026-119142 · Red Hat - CVE Feed · published 2026-10-29T15:58 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-119143 - wasmtime: Wasmtime: Denial of Service via unvalidated zero-length stream operations
NEAR-REAL-TIME
CVE-2026-119143 · Red Hat - CVE Feed · published 2026-10-29T15:58 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-119141 - wasmtime: Wasmtime: Denial of Service via host panic during memory reallocation
NEAR-REAL-TIME
CVE-2026-119141 · Red Hat - CVE Feed · published 2026-10-29T15:58 · correlated from 2 sources
Red Hat
Source ↗