Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-104339 | critical | 9.8 | No | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elem... | 2026-10-30 |
| CVE-2026-107328 | high | 8.8 | No | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization o... | 2026-10-30 |
| CVE-2026-110190 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attacker could send a spec... | 2026-10-30 |
| CVE-2026-110193 | high | 8.8 | No | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assista... | 2026-10-30 |
| CVE-2026-110244 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation... | 2026-10-30 |
| CVE-2026-107682 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-10-30 |
| CVE-2026-110309 | high | 8.8 | No | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper control of c... | 2026-10-30 |
| CVE-2026-18894 | critical | 9.8 | No | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflo... | 2026-10-30 |
| CVE-2026-99214 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime Audio can be trigg... | 2026-10-30 |
| CVE-2026-99211 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: netlink: reset skb headers before unicast and multicast filtering Sock... | 2026-10-30 |
| CVE-2026-99206 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate confi... | 2026-10-30 |
| CVE-2026-99204 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery par... | 2026-10-30 |
| CVE-2026-99202 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix SMP IO deadlock during HA resume smp_execute_task_sg... | 2026-10-30 |
| CVE-2026-99201 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace pointer The netlink rhash... | 2026-10-30 |
| CVE-2026-99192 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: unshare the skb before writing the control block bcmgen... | 2026-10-30 |
| CVE-2026-99191 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() calipso_... | 2026-10-30 |
| CVE-2026-99190 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiod_set_array_value_complex() on error pa... | 2026-10-30 |
| CVE-2026-99187 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: perf: Fix perf_pmu_migrate_context() leaving events behind __perf_pmu_... | 2026-10-30 |
| CVE-2026-99182 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH ca... | 2026-10-30 |
| CVE-2026-99181 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: autofs: ignore notification errors from a replaced pipe autofs_notify_... | 2026-10-30 |