Explore CVE records

MedPublished 01 May 2026, 04:16 WIB

CVE-2026-6542

Monitor API allows cross-user read of transaction logs and deletion of build data via flow_id

IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted vertex build data for another user's flow.

Excerpt language: en.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 22:00 WIB

Official record

MedPublished 01 May 2026, 04:15 WIB

CVE-2026-7502

LinkStackOrg LinkStack Management Endpoint UserController.php saveLink authorization

A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6. The affected element is the function saveLink of the file app/Http/Controllers/UserController.php of the component Management Endpoint. The manipulation leads to authorization bypass. The attack can be initiated remotely. The exploit has …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

MedPublished 01 May 2026, 04:12 WIB

CVE-2025-36335

Vulnerabilities found

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.

Excerpt language: en.

CVSS6.2v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 21:23 WIB

Official record

HighPublished 01 May 2026, 04:11 WIB

CVE-2026-6543

Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.

Excerpt language: en.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated02 May 2026, 10:55 WIB

Official record

MedPublished 01 May 2026, 04:11 WIB

CVE-2026-3345

Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint

IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Excerpt language: en.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 19:23 WIB

Official record

MedPublished 01 May 2026, 04:06 WIB

CVE-2026-3346

Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRaw

IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Excerpt language: en.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 23:38 WIB

Official record

MedPublished 01 May 2026, 04:04 WIB

CVE-2026-3340

Server-Side Request Forgery (SSRF) in Langflow URL Component

IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Excerpt language: en.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 23:38 WIB

Official record

MedPublished 01 May 2026, 03:57 WIB

CVE-2026-4502

Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API

IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.

Excerpt language: en.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated13 Jun 2026, 03:28 WIB

Official record

HighPublished 01 May 2026, 03:48 WIB

CVE-2026-4503

Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.

Excerpt language: en.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated13 Jun 2026, 01:09 WIB

Official record

MedPublished 01 May 2026, 03:45 WIB

CVE-2026-7501

LinkStackOrg LinkStack UserController.php editPage cross site scripting

A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a manipulation of the argument pageDescription can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated02 May 2026, 02:30 WIB

Official record

MedPublished 01 May 2026, 03:39 WIB

CVE-2026-41263

Traefik: BasicAuth middleware: timing side-channel vulnerability

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a timing side-channel vulnerability in Traefik's BasicAuth middleware that allows an attacker to enumerate valid usernames through response-time differences. The variable intended to hold a constant-time fall…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 21:22 WIB

Official record

HighPublished 01 May 2026, 03:38 WIB

CVE-2026-40912

Traefik: StripPrefixRegex auth bypass via Path/RawPath desync

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass vulnerability in Traefik's StripPrefixRegex middleware when used in combination with ForwardAuth, BasicAuth, or DigestAuth. The middleware matches the regex against the d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.8v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:00 WIB

Official record

MedPublished 01 May 2026, 03:31 WIB

CVE-2026-6539

Notepad++ 8.9.3 Format String Injection via nativeLang.xml

Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information disclosure by crafting a malicious nativeLang.xml language pack file. Attackers can distribute a poisoned language pack through community channels that trig…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS4.6v4.0KEVNot listedEPSSPresentUpdated28 Jul 2026, 08:50 WIB

Official record

HighPublished 01 May 2026, 03:26 WIB

CVE-2026-39858

Traefik: Forwarded alias spoofing top pre-auth decision bypass

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass vulnerability in Traefik's ForwardAuth and snippet-based authentication middleware. Traefik's forwarded-header sanitization logic targets only canonical header names (e.g…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.8v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:01 WIB

Official record

HighPublished 01 May 2026, 03:26 WIB

CVE-2026-35051

Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traefik's ForwardAuth middleware when trustForwardHeader=false is configured and Traefik is deployed behind a trusted upstream proxy. This issue has been patched in v…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.8v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:03 WIB

Official record

MedPublished 01 May 2026, 03:22 WIB

CVE-2026-40951

Memory corruption in Secure Access Windows clients prior to 14.50

CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and trigger a denial of service.

Excerpt language: en.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 21:29 WIB

Official record

MedPublished 01 May 2026, 03:20 WIB

CVE-2026-41174

Traefik Kubernetes CRD allows unauthorized cross-namespace middleware binding

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a potential vulnerability in Traefik's Kubernetes CRD provider cross-namespace isolation enforcement. When providers.kubernetesCRD.allowCrossNamespace=false, Traefik correctly rejects direct cross-namespace m…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated04 May 2026, 20:26 WIB

Official record

HighPublished 01 May 2026, 03:19 WIB

CVE-2026-40950

Buffer overflow in the Secure Access server prior to 14.50

CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially crafted message to the server and cause a denial of service

Excerpt language: en.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 21:31 WIB

Official record

MedPublished 01 May 2026, 03:17 WIB

CVE-2026-28532

FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions

FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator variable truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS6v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:19 WIB

Official record

MedPublished 01 May 2026, 03:16 WIB

CVE-2026-40949

Buffer overflow in Windows clients prior to 14.50

CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to trigger a denial of service.

Excerpt language: en.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 21:32 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage