{"vulnerability": "CVE-2026-8481", "sightings": [{"uuid": "b490da1c-a1c2-42b3-babf-dcf488076f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8481", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqulbowbpo2v", "content": "CVE-2026-8481 - langflow oss\nIBM Langflow's code validation API allows users to execute their own Python code, potentially running malicious system commands with the server's full privileges. This affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-17T20:22:04.661236Z"}, {"uuid": "d1a23fe9-9f49-44ee-91e2-ed4e2e3e66fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8481", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqut2zsykr24", "content": "CVE-2026-8481 - Remote Code Execution via Code Validation Endpoint\nCVE ID : CVE-2026-8481\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validati...", "creation_timestamp": "2026-07-17T22:41:31.189733Z"}, {"uuid": "48057bc2-9bc0-4f2f-988b-8263471c97c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8481", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwgiehyqc2m", "content": "\ud83d\udd34 CVE-2026-8481 - Critical (9.9)\n\nIBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8481/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T14:01:40.258151Z"}, {"uuid": "c9f41608-dc90-41a5-a135-af016ba46c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8481", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr4uyecsge2y", "content": "\ud83d\udccc CVE-2026-8481 - IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint.\u00a0The POST /api/v1/val... https://www.cyberhub.blog/cves/CVE-2026-8481", "creation_timestamp": "2026-07-21T03:37:07.174088Z"}, {"uuid": "648f5a47-c3aa-4bd8-b6fd-5b16f8d6fa05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8481", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-poc-pubblico-per-lo-sfruttamento-della-cve-2026-9198", "content": "", "creation_timestamp": "2026-07-22T16:45:04.957582Z"}, {"uuid": "07549c1b-7da0-47aa-a000-9e7736312def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84813", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mun26etchv2b", "content": "\ud83d\udea8 CVE-2026-84813 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84813\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-03T18:08:08.565795Z"}, {"uuid": "d36bbde9-339f-40d3-81af-bb508108ff5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84814", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mun26mokj52b", "content": "\ud83d\udea8 CVE-2026-84814 \u2014 CVSS 9.8 CRITICAL\n\nSubscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84814\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-03T18:08:16.185136Z"}, {"uuid": "a0b861d1-a183-41a2-a6ed-c13a0aca01b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84813", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mun53eq6pc2b", "content": "CVE-2026-84813 - geodirectory\nThe GeoDirectory add\u2011on for WordPress (versions up to 2.8.174) can be accessed by anyone on the internet to send specially crafted requests that execute commands on your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#geodirectory #paolo #CVE #infosec", "creation_timestamp": "2026-09-03T19:00:08.607143Z"}, {"uuid": "97f68b2f-16a9-4697-968c-98c2ddb02c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84814", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mun5n5r2cd2b", "content": "CVE-2026-84814 - bricksforge\nThe Bricksforge add\u2011on for WordPress, up through version 3.1.8.8, allows a user with the lowest permission level to elevate their rights to full administrator control. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bricksforge #CVE #infosec", "creation_timestamp": "2026-09-03T19:10:05.392833Z"}]}