https://vulnerability.circl.lu/sightings/feed 2026-07-24T08:00:39.195164+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/219cea55-5593-43bd-8183-c8b0639dfbb3/export 2026-07-24T08:00:39.218342+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "219cea55-5593-43bd-8183-c8b0639dfbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr6flzrvck2v", "content": "\ud83d\udccc CVE-2026-13448 - IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( ... https://www.cyberhub.blog/cves/CVE-2026-13448", "creation_timestamp": "2026-07-21T18:07:06.790266Z"} 2026-07-21T18:07:06.790266+00:00 https://vulnerability.circl.lu/sighting/ab466ad6-4057-434d-8196-098ee2c312b7/export 2026-07-24T08:00:39.220869+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ab466ad6-4057-434d-8196-098ee2c312b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3x777nmh2v", "content": "CVE-2026-13448 - langflow oss\nLangflow's public API has unauthenticated endpoints that can be exploited for remote code execution and denial of service attacks. This means an attacker could potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-20T18:44:04.203781Z"} 2026-07-20T18:44:04.203781+00:00 https://vulnerability.circl.lu/sighting/3f549aad-9c9d-4d3f-a196-ac170d9d79bd/export 2026-07-24T08:00:39.221008+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3f549aad-9c9d-4d3f-a196-ac170d9d79bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtutqkpt22", "content": "\ud83d\udfe0 CVE-2026-13448 - High (8.1)\n\nIBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code executi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13448/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T18:01:17.270789Z"} 2026-07-18T18:01:17.270789+00:00 https://vulnerability.circl.lu/sighting/ed07d2c3-d526-449d-8fe1-eac0879738a8/export 2026-07-24T08:00:39.221113+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ed07d2c3-d526-449d-8fe1-eac0879738a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116939267895244968", "content": "CVE-2026-13448 - Unauthenticated RCE in IBM Langflow OSS 1.0.0-1.10.1. Incomplete denylist allows code execution via build endpoint. CVSS 8.1. No patch available. Disable or restrict access immediately. #CVE #IBM #infosec\nhttps://www.valtersit.com/cve/CVE-2026-13448/", "creation_timestamp": "2026-07-18T05:13:42.994837Z"} 2026-07-18T05:13:42.994837+00:00 https://vulnerability.circl.lu/sighting/ecfebdcc-e9cf-4d1d-b122-6a32aac22d99/export 2026-07-24T08:00:39.221207+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ecfebdcc-e9cf-4d1d-b122-6a32aac22d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqvixu56322t", "content": "CVE-2026-13448 - Unauthenticated RCE in IBM Langflow OSS 1.0.0-1.10.1. Incomplete denylist allows code execution via build endpoint. CVSS 8.1. No patch available. Disable or restrict access immediately. #CVE #IBM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13448/", "creation_timestamp": "2026-07-18T05:13:26.838694Z"} 2026-07-18T05:13:26.838694+00:00 https://vulnerability.circl.lu/sighting/3b94acf4-d619-43d4-9c30-d2b97af16be5/export 2026-07-24T08:00:39.221302+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3b94acf4-d619-43d4-9c30-d2b97af16be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquss3f7uk2a", "content": "CVE-2026-13448 - Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints\nCVE ID : CVE-2026-13448\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes a...", "creation_timestamp": "2026-07-17T22:36:30.940994Z"} 2026-07-17T22:36:30.940994+00:00