{"vulnerability": "CVE-2026-8859", "sightings": [{"uuid": "1dd3f31c-b77a-42ac-a3aa-2bae0bb00460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8859", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqulmi3kxg2e", "content": "CVE-2026-8859\nIBM Langflow OSS versions 1.0.0 through 1.10.0 have a security issue that could allow an attacker to write files to unintended locations on your server. This could happen if an attacker controls an external\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-17T20:28:06.633304Z"}, {"uuid": "bdb61617-fbcf-4028-9676-22cb09adcc26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8859", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqusj4xzp62g", "content": "CVE-2026-8859 - Path Traversal in APIRequest Component via Content-Disposition Header\nCVE ID : CVE-2026-8859\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary file...", "creation_timestamp": "2026-07-17T22:31:30.576904Z"}, {"uuid": "6e722175-403d-453b-90e4-d1c795dee5b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8859", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqw7qhmwji2m", "content": "\ud83d\udd34 CVE-2026-8859 - Critical (9.9)\n\nIBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8859/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T12:00:55.248562Z"}, {"uuid": "c97c5543-348f-46dd-b51d-682745702ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8859", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr4rn2m4ds2y", "content": "\ud83d\udccc CVE-2026-8859 - IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validati... https://www.cyberhub.blog/cves/CVE-2026-8859", "creation_timestamp": "2026-07-21T02:37:06.482280Z"}, {"uuid": "841116c4-55ac-4457-be57-7a2accd71ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88592", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqin3grh325", "content": "CVE-2026-88592\nVersions of kkFileView 4.2.0 and later let an attacker supply a hidden URL that the server will fetch and return. Because the filter checks a different parameter than the one used to retrieve the file, a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-17T20:30:04.845311Z"}]}