{"vulnerability": "CVE-2026-10129", "sightings": [{"uuid": "54aebf19-5fa2-4814-a8eb-a026ee18701b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10129", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mpjzqfenyu27", "content": "IBM Langflow OSS 1.0.0\uff5e1.9.3\u306bSSRF\u4fdd\u8b77\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u4f4e\u6a29\u9650\u653b\u6483\u8005\u306f\u5185\u90e8\u30b5\u30fc\u30d3\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u3067\u3001\u6a5f\u5bc6\u60c5\u5831\u9732\u5448\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-10129 CVSS 8.5 | HIGH", "creation_timestamp": "2026-06-30T22:16:21.540831Z"}, {"uuid": "ff03624a-d652-4d12-aeec-1bda9578324b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10129", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqlxjblot32f", "content": "\ud83d\udccc CVE-2026-10129 - IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API Request component. An au... https://www.cyberhub.blog/cves/CVE-2026-10129", "creation_timestamp": "2026-07-14T10:07:06.216343Z"}, {"uuid": "b7fdc4ed-5048-43c1-97c8-c10ec5051503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101294", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117439610289604863", "content": "CVE-2026-101294 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature.\nhttps://www.cve.org/CVERecord?id=CVE-2026-101294https://www.ibm.com/support/pages/node/7292235#ibm #IBM #WebSphereApplicationServer-Liberty #WebSphereApplicationServer#CVE_2026_101294#bot", "creation_timestamp": "2026-10-14T13:57:21.472369Z"}]}