Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 397 total.
Code injection in IBM Langflow OSS ToolGuard component (CVE-2026-9135)
CVE-2026-9135 is a code injection vulnerability (CWE-94) in IBM Langflow OSS affecting the Policies component's ToolGuard integration. The validation mechanism enforcing the allow_custom_components=false security cont...
Fixed in 1.10.1
Improper authentication in IBM Langflow OSS (CVE-2026-9103)
CVE-2026-9103 is an improper authentication vulnerability in IBM Langflow OSS affecting the /api/v1/login/auto_login endpoint, which issues 365-day superuser bearer tokens without requiring credentials when the AUTO_L...
Fixed in 1.10.1
Brute-force vulnerability in Yamcs Mission Control Server (CVE-2026-44596)
The authentication endpoint `POST /auth/token` in `yamcs-core` (Maven package `org.yamcs:yamcs-core`) lacks rate limiting, account lockout, and failed attempt throttling, allowing an unauthenticated remote attacker to...
Fixed in 5.13.0; 5.12.7
Unauthenticated remote code execution in Langflow OSS (CVE-2026-9198)
CVE-2026-9198 is an unauthenticated remote code execution vulnerability in Langflow OSS affecting all default deployments. An unauthenticated attacker can obtain a superuser bearer token via the /api/v1/auto_login end...
Fixed in 1.10.1
Missing authentication for user registration in Langflow OSS (CVE-2026-9202)
CVE-2026-9202 is a missing authentication vulnerability (CWE-306) in Langflow OSS that allows unauthenticated attackers to create unlimited user accounts via the user registration API. When the NEW_USER_IS_ACTIVE=true...
Fixed in 1.10.1
Privilege escalation in Aimogen Pro WordPress plugin (CVE-2026-15982)
CVE-2026-15982 is a critical privilege escalation vulnerability (CVSS 9.8) in the Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress. The vulnerability stems from a m...
Fixed in 2.8.5
Privilege escalation via improper validation in Bricksforge for WordPress (CVE-2026-14956)
The Bricksforge plugin for WordPress contains an improper validation vulnerability in the fieldIds parameter of the Pro Forms registration action, which permits attacker-supplied field IDs to be inserted into the trus...
Fixed in 3.1.8.7
Two-factor authentication bypass in Grav CMS (CVE-2026-62232)
A two-factor authentication bypass vulnerability exists in Grav CMS where the `login.regenerate2FASecret` task checks only for user existence rather than authorization during the pending TOTP challenge window. An atta...
Fixed in 2.0.4
Hardcoded JWT secret and authentication bypass in clawvet API server (CVE-2026-62241)
The clawvet self-hosted API server (apps/api) hard-codes a fallback JWT signing secret ('clawvet-dev-secret-change-me') in source and ships the same value as the default in .env.example. The GET /api/v1/scans endpoint...
Fixed in 0.7.5
Server Side Template Injection (SSTI) in Jupyter Enterprise Gateway (CVE-2026-44181)
CVE-2026-44181 is a Server Side Template Injection (SSTI) vulnerability in Jupyter Enterprise Gateway affecting the rendering of Kubernetes manifest environment variables (`KERNEL_XXX`). An attacker can inject Jinja2 ...
Fixed in 3.3.0
YAML injection in jupyter-server/enterprise_gateway (CVE-2026-44182)
CVE-2026-44182 is a YAML injection vulnerability in jupyter-server/enterprise_gateway affecting Kubernetes manifest rendering via Jinja2 templates. The server interpolates untrusted `KERNEL_XXX` environment variables ...
Fixed in 3.3.0
Improper input validation in Zoom Desktop and VDI Client for Windows (CVE-2026-53412)
CVE-2026-53412 is a critical improper input validation vulnerability (CVSS 9.8) in Zoom Desktop Client for Windows and Zoom VDI Client for Windows. An unauthenticated attacker with network access may exploit this vuln...
Fixed in Zoom Workplace for Windows 7.0.0; Zoom Workplace VDI Client for Windows 7.0.10; 6.6.15; 6.5.18
Hardcoded credentials in Pheditor (CVE-2026-55579)
CVE-2026-55579 is a hardcoded credentials vulnerability (CWE-798) in Pheditor, where the application ships with a default password of "admin" stored as an unsalted SHA-512 hash in the PHP source file with no mechanism...
Fixed in 2.0.6
Path traversal in Envoy Gateway via double-slash bypass (CVE-2026-53713)
CVE-2026-53713 is a critical improper input validation vulnerability in Envoy Gateway's `to_absolute_normalized_path` function (security.lua:28-43) that fails to collapse redundant path separators (`//` to `/`). This ...
Fixed in 1.7.4; 1.8.1
SSRF in zrok Python SDK ProxyShare (CVE-2026-45568)
A Server-Side Request Forgery (SSRF) vulnerability exists in the zrok Python SDK's ProxyShare component. When a path containing an absolute URL is submitted to the Flask proxy handler, `urllib.parse.urljoin` resolves ...
Fixed in 2.0.3
Supply chain compromise in cap-js/cds-dbs npm packages (CVE-2026-46421)
CVE-2026-46421 is a supply chain compromise in which malicious versions of `@cap-js/sqlite`, `@cap-js/postgres`, and `@cap-js/db-service` were published on April 29, 2026. The malicious packages harvested credentials ...
Fixed in @cap-js/sqlite >= 2.4.0; @cap-js/postgres >= 2.3.0; @cap-js/db-service >= 2.11.0
Server-Side Request Forgery in SonicWall SMA1000 Appliance Work Place (CVE-2026-15409)
CVE-2026-15409 is a Server-Side Request Forgery (SSRF) vulnerability in the SonicWall SMA1000 Appliance Work Place interface (CWE-918). A remote unauthenticated attacker could exploit this vulnerability to cause the a...
Fixed in 12.4.3-03453 (platform-hotfix) and higher versions; 12.5.0-02835 (platform-hotfix) and higher versions