https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 15 Sep 2026 23:54:50 +0000 https://vulnerability.circl.lu/sighting/1bb90844-bcec-44e7-a44c-c14ba8804cde/export {"uuid": "1bb90844-bcec-44e7-a44c-c14ba8804cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://t.me/GithubRedTeam/102420", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12944\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cflowsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 17:30:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLangflow 1.10.0 urllib SSRF POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T19:00:05.306319Z"} {"uuid": "1bb90844-bcec-44e7-a44c-c14ba8804cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://t.me/GithubRedTeam/102420", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12944\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cflowsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 17:30:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLangflow 1.10.0 urllib SSRF POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T19:00:05.306319Z"} https://vulnerability.circl.lu/sighting/1bb90844-bcec-44e7-a44c-c14ba8804cde/export Tue, 15 Sep 2026 19:00:05 +0000 https://vulnerability.circl.lu/sighting/c4363867-2b84-4921-8dd1-c8e9c33e8fb4/export {"uuid": "c4363867-2b84-4921-8dd1-c8e9c33e8fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvjdgi5r522t", "content": "\ud83d\udea8 CVE-2026-12944 \u2014 CVSS 9.6 CRITICAL\n\nIBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privil...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12944\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T00:08:16.523704Z"} {"uuid": "c4363867-2b84-4921-8dd1-c8e9c33e8fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvjdgi5r522t", "content": "\ud83d\udea8 CVE-2026-12944 \u2014 CVSS 9.6 CRITICAL\n\nIBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privil...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12944\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T00:08:16.523704Z"} https://vulnerability.circl.lu/sighting/c4363867-2b84-4921-8dd1-c8e9c33e8fb4/export Tue, 15 Sep 2026 00:08:16 +0000 https://vulnerability.circl.lu/sighting/ef7c3dd6-0aeb-4300-b8b8-91e9494df74c/export {"uuid": "ef7c3dd6-0aeb-4300-b8b8-91e9494df74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://gist.github.com/ichintu/bb350504840f7717d8931db615795f78", "content": "Today\u2019s threat intelligence highlights three key vulnerabilities:\n\n\u2022 **CVE-2026-12944 (Critical, 9.6):** IBM Langflow OSS 1.0.0\u20131.10.0 contains a scanner defect that falsely validates components with `socket`/`urllib` imports, enabling root code execution, AWS credential theft via IMDSv1 SSRF, and lateral movement. \n\u2022 **3BB Compromise:** Thai broadband provider 3BB was breached via a MeshCentral backdoor (CVE-2024-21762), granting attackers persistent root access to target and exfiltrate subscriber credentials. \n\u2022 **CVE-2026-16335 (High, 8.1):** IBM DataStage on Cloud Pak for Data 5.4.0.0 suffers from a path traversal flaw allowing authenticated attackers to read, write, or delete arbitrary files.", "creation_timestamp": "2026-09-15T00:04:06.349522Z"} {"uuid": "ef7c3dd6-0aeb-4300-b8b8-91e9494df74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://gist.github.com/ichintu/bb350504840f7717d8931db615795f78", "content": "Today\u2019s threat intelligence highlights three key vulnerabilities:\n\n\u2022 **CVE-2026-12944 (Critical, 9.6):** IBM Langflow OSS 1.0.0\u20131.10.0 contains a scanner defect that falsely validates components with `socket`/`urllib` imports, enabling root code execution, AWS credential theft via IMDSv1 SSRF, and lateral movement. \n\u2022 **3BB Compromise:** Thai broadband provider 3BB was breached via a MeshCentral backdoor (CVE-2024-21762), granting attackers persistent root access to target and exfiltrate subscriber credentials. \n\u2022 **CVE-2026-16335 (High, 8.1):** IBM DataStage on Cloud Pak for Data 5.4.0.0 suffers from a path traversal flaw allowing authenticated attackers to read, write, or delete arbitrary files.", "creation_timestamp": "2026-09-15T00:04:06.349522Z"} https://vulnerability.circl.lu/sighting/ef7c3dd6-0aeb-4300-b8b8-91e9494df74c/export Tue, 15 Sep 2026 00:04:06 +0000 https://vulnerability.circl.lu/sighting/fef1016b-de7e-4c2f-b8cd-4b3b037f345c/export {"uuid": "fef1016b-de7e-4c2f-b8cd-4b3b037f345c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12944", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjcytzazf24", "content": "IBM Langflow OSS 1.0.0 \u2013 1.10.0: CRITICAL SSRF (CVE-2026-12944) enables root-level Python code execution, AWS credential theft, and lateral moves. Patch immediately. https://radar.offseq.com/threat/cve-2026-12944-cwe-918-server-side-request-forgery-ssrf-in-ibm-langflow-oss-98110564771040c9 #OffSe...", "creation_timestamp": "2026-09-15T00:00:40.502284Z"} {"uuid": "fef1016b-de7e-4c2f-b8cd-4b3b037f345c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12944", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjcytzazf24", "content": "IBM Langflow OSS 1.0.0 \u2013 1.10.0: CRITICAL SSRF (CVE-2026-12944) enables root-level Python code execution, AWS credential theft, and lateral moves. Patch immediately. https://radar.offseq.com/threat/cve-2026-12944-cwe-918-server-side-request-forgery-ssrf-in-ibm-langflow-oss-98110564771040c9 #OffSe...", "creation_timestamp": "2026-09-15T00:00:40.502284Z"} https://vulnerability.circl.lu/sighting/fef1016b-de7e-4c2f-b8cd-4b3b037f345c/export Tue, 15 Sep 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/f03f93e2-268b-453c-afa8-210dc2e0782c/export {"uuid": "f03f93e2-268b-453c-afa8-210dc2e0782c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12944", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117272113113132424", "content": "CVE-2026-12944 (CRITICAL, CVSS 9.6) affects IBM Langflow OSS 1.0.0 \u2013 1.10.0. Attackers can execute arbitrary Python as root via SSRF, steal AWS creds, and move laterally. Patch is available \u2014 validate remediation. https://radar.offseq.com/threat/cve-2026-12944-cwe-918-server-side-request-forgery-ssrf-in-ibm-langflow-oss-98110564771040c9 #OffSeq #SSRF #IBM #CloudSecurity", "creation_timestamp": "2026-09-15T00:00:37.675691Z"} {"uuid": "f03f93e2-268b-453c-afa8-210dc2e0782c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12944", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117272113113132424", "content": "CVE-2026-12944 (CRITICAL, CVSS 9.6) affects IBM Langflow OSS 1.0.0 \u2013 1.10.0. Attackers can execute arbitrary Python as root via SSRF, steal AWS creds, and move laterally. Patch is available \u2014 validate remediation. https://radar.offseq.com/threat/cve-2026-12944-cwe-918-server-side-request-forgery-ssrf-in-ibm-langflow-oss-98110564771040c9 #OffSeq #SSRF #IBM #CloudSecurity", "creation_timestamp": "2026-09-15T00:00:37.675691Z"} https://vulnerability.circl.lu/sighting/f03f93e2-268b-453c-afa8-210dc2e0782c/export Tue, 15 Sep 2026 00:00:37 +0000 https://vulnerability.circl.lu/sighting/132d98ce-e915-400a-a7a2-3969fe8bab8e/export {"uuid": "132d98ce-e915-400a-a7a2-3969fe8bab8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvj7oyuoun2k", "content": "\ud83d\udd34 CVE-2026-12944 - Critical (9.6)\n\nIBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12944/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-14T23:01:30.169897Z"} {"uuid": "132d98ce-e915-400a-a7a2-3969fe8bab8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvj7oyuoun2k", "content": "\ud83d\udd34 CVE-2026-12944 - Critical (9.6)\n\nIBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12944/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-14T23:01:30.169897Z"} https://vulnerability.circl.lu/sighting/132d98ce-e915-400a-a7a2-3969fe8bab8e/export Mon, 14 Sep 2026 23:01:30 +0000 https://vulnerability.circl.lu/sighting/549637d9-3a25-4a85-9077-8ead80196f86/export {"uuid": "549637d9-3a25-4a85-9077-8ead80196f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj6iribv32r", "content": "CVE-2026-12944 - langflow oss\nVersions 1.0.0 through 1.10.0 of IBM Langflow OSS can run any Python code that an attacker supplies, giving them full system privileges. This can be used to steal cloud\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-09-14T22:40:04.693467Z"} {"uuid": "549637d9-3a25-4a85-9077-8ead80196f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj6iribv32r", "content": "CVE-2026-12944 - langflow oss\nVersions 1.0.0 through 1.10.0 of IBM Langflow OSS can run any Python code that an attacker supplies, giving them full system privileges. This can be used to steal cloud\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-09-14T22:40:04.693467Z"} https://vulnerability.circl.lu/sighting/549637d9-3a25-4a85-9077-8ead80196f86/export Mon, 14 Sep 2026 22:40:04 +0000