{"vulnerability": "CVE-2026-1344", "sightings": [{"uuid": "bce85ec6-7c55-4ea9-8158-482f6183cb46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13449", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvef2zzl2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-13449 \u0432 IBM Business Automation Manager: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/BF3879FE-1B5B-4AB3-9BC6-3A83C0D71B2C", "creation_timestamp": "2026-07-02T01:36:03.281801Z"}, {"uuid": "0b40ec74-89b3-4529-b3b9-056785a98864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13443", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpscjxubzp2j", "content": "CVE-2026-13443 tutor (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-04T05:15:07.591925Z"}, {"uuid": "5a9046fc-7e59-4409-9c9f-de5a39a2b419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13446", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mquojgqxle2i", "content": "CVE-2026-13446 - langflow oss\nIBM Langflow's open-source version contains a serious security risk: its use of hard-coded passwords and keys. This means that anyone with access to the software can see these\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-17T21:20:05.646871Z"}, {"uuid": "3b94acf4-d619-43d4-9c30-d2b97af16be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquss3f7uk2a", "content": "CVE-2026-13448 - Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints\nCVE ID : CVE-2026-13448\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes a...", "creation_timestamp": "2026-07-17T22:36:30.940994Z"}, {"uuid": "ecfebdcc-e9cf-4d1d-b122-6a32aac22d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqvixu56322t", "content": "CVE-2026-13448 - Unauthenticated RCE in IBM Langflow OSS 1.0.0-1.10.1. Incomplete denylist allows code execution via build endpoint. CVSS 8.1. No patch available. Disable or restrict access immediately. #CVE #IBM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13448/", "creation_timestamp": "2026-07-18T05:13:26.838694Z"}, {"uuid": "ed07d2c3-d526-449d-8fe1-eac0879738a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116939267895244968", "content": "CVE-2026-13448 - Unauthenticated RCE in IBM Langflow OSS 1.0.0-1.10.1. Incomplete denylist allows code execution via build endpoint. CVSS 8.1. No patch available. Disable or restrict access immediately. #CVE #IBM #infosec\nhttps://www.valtersit.com/cve/CVE-2026-13448/", "creation_timestamp": "2026-07-18T05:13:42.994837Z"}, {"uuid": "ddebed2e-b9d5-44ae-9694-cd317808885f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-13446", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116940160122894516", "content": "CVE-2026-13446: IBM Langflow OSS 1.0.0 \u2013 1.10.1 contains hard-coded credentials (CRITICAL, CVSS 9.8). Total system compromise possible. No patch yet \u2014 restrict access, monitor activity. More: https://radar.offseq.com/threat/cve-2026-13446-cwe-798-use-of-hard-coded-credentia-e33f708cc1420dc3 #OffSeq #Vuln #Cybersecurity #IBM", "creation_timestamp": "2026-07-18T09:00:38.100254Z"}, {"uuid": "bdd14794-b204-4f28-aa16-bf6d4f762ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-13446", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqvvo465ey2n", "content": "CVE-2026-13446: IBM Langflow OSS v1.0.0 \u2013 1.10.1 faces a CRITICAL risk due to hard-coded credentials. Restrict access & monitor systems until a patch is released. https://radar.offseq.com/threat/cve-2026-13446-cwe-798-use-of-hard-coded-credentia-e33f708cc1420dc3 #OffSeq #Vulnerability #IBM", "creation_timestamp": "2026-07-18T09:00:38.829094Z"}, {"uuid": "bd2a9524-cc5d-478f-9c13-62ba26d2e260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13445", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvvokzq3x2c", "content": "\ud83d\udfe0 CVE-2026-13445 - High (8.1)\n\nIBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13445/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T09:00:54.261705Z"}, {"uuid": "dc4f070c-0a5a-44af-b5e9-a902a07832ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13446", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqw4exsrjd2c", "content": "\ud83d\udd34 CVE-2026-13446 - Critical (9.8)\n\nIBM Langflow OSS 1.0.0 through 1.10.1 contains\u00a0hard-coded credentials, such as a password or cry...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13446/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T11:00:48.391452Z"}, {"uuid": "3f549aad-9c9d-4d3f-a196-ac170d9d79bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtutqkpt22", "content": "\ud83d\udfe0 CVE-2026-13448 - High (8.1)\n\nIBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code executi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13448/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T18:01:17.270789Z"}, {"uuid": "e0c30b8d-6f9b-4650-984a-872ce3ed2a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13446", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqygul7pic27", "content": "CVE-2026-13446 - Critical hardcoded credentials in IBM Langflow OSS 1.0.0-1.10.1. CVSS 9.8. Risk of unauthorized access & data compromise. No patch available. Isolate affected systems immediately. #CVE #IBM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13446/", "creation_timestamp": "2026-07-19T09:13:48.998885Z"}, {"uuid": "a51663ed-e056-4e80-b1d1-fd3d18f19041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13446", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116945875278314849", "content": "CVE-2026-13446 - Critical hardcoded credentials in IBM Langflow OSS 1.0.0-1.10.1. CVSS 9.8. Risk of unauthorized access & data compromise. No patch available. Isolate affected systems immediately. #CVE #IBM #infosec\nhttps://www.valtersit.com/cve/CVE-2026-13446/", "creation_timestamp": "2026-07-19T09:14:04.008608Z"}, {"uuid": "ab466ad6-4057-434d-8196-098ee2c312b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3x777nmh2v", "content": "CVE-2026-13448 - langflow oss\nLangflow's public API has unauthenticated endpoints that can be exploited for remote code execution and denial of service attacks. This means an attacker could potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-20T18:44:04.203781Z"}, {"uuid": "18dd1523-6ab6-47e2-9525-f0fa90d74984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13446", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr4zzbqvvc2i", "content": "\ud83d\udccc CVE-2026-13446 - IBM Langflow OSS 1.0.0 through 1.10.1 contains\u00a0hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound auth... https://www.cyberhub.blog/cves/CVE-2026-13446", "creation_timestamp": "2026-07-21T05:07:06.415837Z"}, {"uuid": "da6ab35d-f61f-4dfb-90fa-1b228e5ce851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13445", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr6dwfosuq2y", "content": "\ud83d\udccc CVE-2026-13445 - IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's upload... https://www.cyberhub.blog/cves/CVE-2026-13445", "creation_timestamp": "2026-07-21T17:37:07.110257Z"}, {"uuid": "219cea55-5593-43bd-8183-c8b0639dfbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr6flzrvck2v", "content": "\ud83d\udccc CVE-2026-13448 - IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( ... https://www.cyberhub.blog/cves/CVE-2026-13448", "creation_timestamp": "2026-07-21T18:07:06.790266Z"}, {"uuid": "33417d9c-6866-4238-a4af-0c85b85608d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13440", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrpngwmbxe23", "content": "WordPress\u7528StoreGrowth\u30d7\u30e9\u30b0\u30a4\u30f32.1.0\u4ee5\u4e0b\u306bStored XSS\u306e\u8106\u5f31\u6027\u3002\u5165\u529b\u691c\u8a3c\u4e0d\u8db3\u306e\u305f\u3081\u3001\u975e\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u57cb\u3081\u8fbc\u307f\u3001\u30da\u30fc\u30b8\u95b2\u89a7\u30e6\u30fc\u30b6\u30fc\u306b\u5b9f\u884c\u3055\u305b\u308b\u53ef\u80fd\u6027\u2026\nCVE-2026-13440 CVSS 7.2 | HIGH", "creation_timestamp": "2026-07-28T14:42:41.152798Z"}, {"uuid": "832ea322-c735-4738-bf4d-73ad180f5a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13440", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrpvv2eqdh23", "content": "CVE-2026-13440 - Stored XSS in StoreGrowth WooCommerce. Unauthenticated inject scripts via message_popup. CVSS 7.2. No patch. Remove plugin until update. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13440/", "creation_timestamp": "2026-07-28T17:13:44.566342Z"}]}