{"vulnerability": "CVE-2026-8635", "sightings": [{"uuid": "caa0af14-6220-48c4-88d5-965be5796c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8635", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqulmgjig62e", "content": "CVE-2026-8635\nAuthenticated users on IBM Langflow OSS can gain superuser access and execute system commands, putting sensitive data at risk. This is a critical issue that requires immediate attention from administrators. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-17T20:28:04.827650Z"}, {"uuid": "a273f8c1-c171-4293-94bc-6f455f4c9aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8635", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqusa6knt62e", "content": "CVE-2026-8635 - Arbitrary Code Execution in Python Interpreter Component\nCVE ID : CVE-2026-8635\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by dir...", "creation_timestamp": "2026-07-17T22:26:30.430896Z"}, {"uuid": "50cdc1b0-d91f-4060-b826-fc8ba24154b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8635", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqw4feugqr2u", "content": "\ud83d\udd34 CVE-2026-8635 - Critical (9.9)\n\nIBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8635/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T11:01:02.184668Z"}, {"uuid": "01b9e07d-b68d-47ef-b828-c9508bd517de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8635", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr4pxg6ypw2s", "content": "\ud83d\udccc CVE-2026-8635 - IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute ar... https://www.cyberhub.blog/cves/CVE-2026-8635", "creation_timestamp": "2026-07-21T02:07:06.705113Z"}, {"uuid": "8897840b-4527-45a4-b5d4-6c9b4008ecc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cp2ong6rm2k2q", "content": "CVE-2026-86359 - Dell Repository Manager Incorrect Default Permissions Vulnerability\nCVE ID : CVE-2026-86359\n \n Published : Sept. 16, 2026, 4:27 p.m. | 19\u00a0minutes ago\n \n Description : Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions v...", "creation_timestamp": "2026-09-16T17:46:31.649138Z"}, {"uuid": "37063db9-7e85-4979-870e-30474bed1c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6sub3gjz2d", "content": "\ud83d\udd17 CVE : CVE-2026-34500, CVE-2026-41293, CVE-2026-73581, CVE-2026-75973, CVE-2026-76183, CVE-2026-77756, CVE-2026-77762, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-86248, CVE-2026-86350, CVE-2026-87022", "creation_timestamp": "2026-09-23T13:10:19.417668Z"}, {"uuid": "f2f106e7-d3ac-4f9c-9e2c-2631a350fd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7dhjmfrb2y", "content": "\ud83d\udea8 CVE-2026-86350 \u2014 CVSS 9.1 CRITICAL\n\nInconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in Apache ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86350\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T18:07:25.559981Z"}, {"uuid": "037b9b23-c0cd-42b1-883e-905fa7d6bfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7uwlhtus2k", "content": "CVE-2026-86350 - apache tomcat\nVersions of Apache Tomcat 9.0.118\u20119.0.121, 10.1.55\u201110.1.59, and 11.0.22\u201111.0.25 can misinterpret incoming HTTP/2 traffic, causing request headers to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachetomcat #apachefoundation #Debian13 #CVE #infosec", "creation_timestamp": "2026-09-23T23:20:04.917586Z"}, {"uuid": "2e2a1c00-96ab-435a-adc0-e3451e30ac70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mw7vkccudc2k", "content": "Tomcat\u306e\u8106\u5f31\u6027(Critical: CVE-2026-76183, CVE-2026-86248, CVE-2026-86350, High: CVE-2026-75973, CVE-2026-77762, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-87022, Medium: CVE-2026-73581, Low: CVE-2026-77756)\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-09-23T23:31:08.733520Z"}, {"uuid": "2f74bf8e-644a-4b3d-bfe8-b21838410e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103375", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-86350\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 21:59:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-86350 - Apache Tomcat - Critical 9.1 - Unauthenticated GET /header.jsp - HTTP/2 Request Header Mix-up (Request Smuggling)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-25T22:00:09.000000Z"}, {"uuid": "0cf107b8-7d4f-4d2f-9f2b-6330c3ca7704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "published-proof-of-concept", "source": "Telegram/VCxCWyiIftc3zqyXq_-idMYYXJu_pWk2hZoed5IyUk8wBzA", "content": "", "creation_timestamp": "2026-09-26T03:00:15.000000Z"}, {"uuid": "6dab9b76-3bae-4ccc-9750-8eb4f5588c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86350", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apache-tomcat-multiple-vulnerabilities_20260929", "content": "", "creation_timestamp": "2026-09-28T20:00:00.000000Z"}, {"uuid": "692c84b4-4813-4e0f-8877-662e528c7867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "seen", "source": "Telegram/TaPHlkMPkhehRqnHe38AJBjJTNdGvP62G-J1A_H_uWxnXm0", "content": "", "creation_timestamp": "2026-09-26T09:00:04.000000Z"}, {"uuid": "9efdc813-deb0-4cbf-861a-c136ce3b64a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "published-proof-of-concept", "source": "Telegram/TaPHlkMPkhehRqnHe38AJBjJTNdGvP62G-J1A_H_uWxnXm0", "content": "", "creation_timestamp": "2026-09-26T09:00:04.000000Z"}]}