{"uuid": "ef7c3dd6-0aeb-4300-b8b8-91e9494df74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://gist.github.com/ichintu/bb350504840f7717d8931db615795f78", "content": "Today\u2019s threat intelligence highlights three key vulnerabilities:\n\n\u2022 **CVE-2026-12944 (Critical, 9.6):** IBM Langflow OSS 1.0.0\u20131.10.0 contains a scanner defect that falsely validates components with `socket`/`urllib` imports, enabling root code execution, AWS credential theft via IMDSv1 SSRF, and lateral movement.  \n\u2022 **3BB Compromise:** Thai broadband provider 3BB was breached via a MeshCentral backdoor (CVE-2024-21762), granting attackers persistent root access to target and exfiltrate subscriber credentials.  \n\u2022 **CVE-2026-16335 (High, 8.1):** IBM DataStage on Cloud Pak for Data 5.4.0.0 suffers from a path traversal flaw allowing authenticated attackers to read, write, or delete arbitrary files.", "creation_timestamp": "2026-09-15T00:04:06.349522Z"}