https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 24 Jul 2026 08:00:39 +0000 https://vulnerability.circl.lu/sighting/219cea55-5593-43bd-8183-c8b0639dfbb3/export {"uuid": "219cea55-5593-43bd-8183-c8b0639dfbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr6flzrvck2v", "content": "\ud83d\udccc CVE-2026-13448 - IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( ... https://www.cyberhub.blog/cves/CVE-2026-13448", "creation_timestamp": "2026-07-21T18:07:06.790266Z"} {"uuid": "219cea55-5593-43bd-8183-c8b0639dfbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr6flzrvck2v", "content": "\ud83d\udccc CVE-2026-13448 - IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( ... https://www.cyberhub.blog/cves/CVE-2026-13448", "creation_timestamp": "2026-07-21T18:07:06.790266Z"} https://vulnerability.circl.lu/sighting/219cea55-5593-43bd-8183-c8b0639dfbb3/export Tue, 21 Jul 2026 18:07:06 +0000 https://vulnerability.circl.lu/sighting/ab466ad6-4057-434d-8196-098ee2c312b7/export {"uuid": "ab466ad6-4057-434d-8196-098ee2c312b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3x777nmh2v", "content": "CVE-2026-13448 - langflow oss\nLangflow's public API has unauthenticated endpoints that can be exploited for remote code execution and denial of service attacks. This means an attacker could potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-20T18:44:04.203781Z"} {"uuid": "ab466ad6-4057-434d-8196-098ee2c312b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3x777nmh2v", "content": "CVE-2026-13448 - langflow oss\nLangflow's public API has unauthenticated endpoints that can be exploited for remote code execution and denial of service attacks. This means an attacker could potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-20T18:44:04.203781Z"} https://vulnerability.circl.lu/sighting/ab466ad6-4057-434d-8196-098ee2c312b7/export Mon, 20 Jul 2026 18:44:04 +0000 https://vulnerability.circl.lu/sighting/3f549aad-9c9d-4d3f-a196-ac170d9d79bd/export {"uuid": "3f549aad-9c9d-4d3f-a196-ac170d9d79bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtutqkpt22", "content": "\ud83d\udfe0 CVE-2026-13448 - High (8.1)\n\nIBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code executi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13448/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T18:01:17.270789Z"} {"uuid": "3f549aad-9c9d-4d3f-a196-ac170d9d79bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtutqkpt22", "content": "\ud83d\udfe0 CVE-2026-13448 - High (8.1)\n\nIBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code executi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13448/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T18:01:17.270789Z"} https://vulnerability.circl.lu/sighting/3f549aad-9c9d-4d3f-a196-ac170d9d79bd/export Sat, 18 Jul 2026 18:01:17 +0000 https://vulnerability.circl.lu/sighting/ed07d2c3-d526-449d-8fe1-eac0879738a8/export {"uuid": "ed07d2c3-d526-449d-8fe1-eac0879738a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116939267895244968", "content": "CVE-2026-13448 - Unauthenticated RCE in IBM Langflow OSS 1.0.0-1.10.1. Incomplete denylist allows code execution via build endpoint. CVSS 8.1. No patch available. Disable or restrict access immediately. #CVE #IBM #infosec\nhttps://www.valtersit.com/cve/CVE-2026-13448/", "creation_timestamp": "2026-07-18T05:13:42.994837Z"} {"uuid": "ed07d2c3-d526-449d-8fe1-eac0879738a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116939267895244968", "content": "CVE-2026-13448 - Unauthenticated RCE in IBM Langflow OSS 1.0.0-1.10.1. Incomplete denylist allows code execution via build endpoint. CVSS 8.1. No patch available. Disable or restrict access immediately. #CVE #IBM #infosec\nhttps://www.valtersit.com/cve/CVE-2026-13448/", "creation_timestamp": "2026-07-18T05:13:42.994837Z"} https://vulnerability.circl.lu/sighting/ed07d2c3-d526-449d-8fe1-eac0879738a8/export Sat, 18 Jul 2026 05:13:42 +0000 https://vulnerability.circl.lu/sighting/ecfebdcc-e9cf-4d1d-b122-6a32aac22d99/export {"uuid": "ecfebdcc-e9cf-4d1d-b122-6a32aac22d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqvixu56322t", "content": "CVE-2026-13448 - Unauthenticated RCE in IBM Langflow OSS 1.0.0-1.10.1. Incomplete denylist allows code execution via build endpoint. CVSS 8.1. No patch available. Disable or restrict access immediately. #CVE #IBM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13448/", "creation_timestamp": "2026-07-18T05:13:26.838694Z"} {"uuid": "ecfebdcc-e9cf-4d1d-b122-6a32aac22d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqvixu56322t", "content": "CVE-2026-13448 - Unauthenticated RCE in IBM Langflow OSS 1.0.0-1.10.1. Incomplete denylist allows code execution via build endpoint. CVSS 8.1. No patch available. Disable or restrict access immediately. #CVE #IBM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13448/", "creation_timestamp": "2026-07-18T05:13:26.838694Z"} https://vulnerability.circl.lu/sighting/ecfebdcc-e9cf-4d1d-b122-6a32aac22d99/export Sat, 18 Jul 2026 05:13:26 +0000 https://vulnerability.circl.lu/sighting/3b94acf4-d619-43d4-9c30-d2b97af16be5/export {"uuid": "3b94acf4-d619-43d4-9c30-d2b97af16be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquss3f7uk2a", "content": "CVE-2026-13448 - Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints\nCVE ID : CVE-2026-13448\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes a...", "creation_timestamp": "2026-07-17T22:36:30.940994Z"} {"uuid": "3b94acf4-d619-43d4-9c30-d2b97af16be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquss3f7uk2a", "content": "CVE-2026-13448 - Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints\nCVE ID : CVE-2026-13448\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes a...", "creation_timestamp": "2026-07-17T22:36:30.940994Z"} https://vulnerability.circl.lu/sighting/3b94acf4-d619-43d4-9c30-d2b97af16be5/export Fri, 17 Jul 2026 22:36:30 +0000