{"vulnerability": "cve-2026-1294", "sightings": [{"uuid": "bed18bd6-36df-4dfe-adf5-d8b4a557c262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mruz2zcjdt2z", "content": "CVE-2026-12940 - langflow oss\nIBM Langflow versions 1.0.0 to 1.10.1 are vulnerable to a serious security risk. An attacker can potentially execute code remotely on your system without needing a password. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-30T17:54:04.619861Z"}, {"uuid": "ef88fc9b-fe55-4fd4-b4e2-2fd79a0e2245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mruzhq4nk622", "content": "\ud83d\udd34 CVE-2026-12940 - Critical (9.8)\n\nIBM Langflow OSS 1.0.0 through 1.10.1\u00a0 are vulnerable to unauthenticated remote code execution v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12940/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T18:01:11.842315Z"}, {"uuid": "685c07a8-faf7-41d0-afdc-8c7edc9c6291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "seen", "source": "Telegram/j-DMWk1jylS6oTK3WkqNWOGjNQLp4_I9IFyoV0ikHsL-Sj8", "content": "", "creation_timestamp": "2026-08-03T10:01:39.974138Z"}, {"uuid": "36f3d51c-db5c-490f-9b79-48cff51cd00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/daufi6nf76bve", "content": "CVE-2026-12940 - Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints\nCVE ID : CVE-2026-12940\n \n Published : July 30, 2026, 5:16 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : IBM Langflow OSS 1.0.0 through 1...", "creation_timestamp": "2026-07-30T18:50:13.274589Z"}, {"uuid": "af211088-e35b-4aa6-b922-171ee8c111af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12943", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrv4ungbww2y", "content": "CVE-2026-12943 - hmc v10.3.1050.0\nIBM Power Hardware Management Console (HMC) versions 10.3 and 11.1 contain a vulnerability that allows unauthorized users to gain elevated system privileges. This could potentially allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-07-30T19:02:05.857635Z"}, {"uuid": "fdaa4f98-a6eb-40eb-8291-734c0398990a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12943", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2v4p3sclp4vad", "content": "CVE-2026-12943 - This Power Hardware Management Console update is being released to address\nCVE ID : CVE-2026-12943\n \n Published : July 30, 2026, 5:57 p.m. | 40\u00a0minutes ago\n \n Description : IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 M...", "creation_timestamp": "2026-07-30T19:02:13.129023Z"}, {"uuid": "74ed152c-0727-487d-9de2-e0aef9ea77a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12946", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrva7vsnl622", "content": "CVE-2026-12946 - langflow oss\nIBM Langflow OSS versions 1.0.0 to 1.10.0 have a security weakness. An attacker can potentially inject malicious code on your system, which could lead to unauthorized access or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-30T20:02:04.739433Z"}, {"uuid": "b117e1bd-7a91-42ce-a94c-2e4d59406978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "seen", "source": "https://t.me/GithubRedTeam/96371", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12940-Langflow-Unauth-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 03:15:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12940 \u2014 Langflow OSS <=1.10.1 unauthenticated RCE via MCP stdio environment-variable injection (SHELLOPTS/PS4). Author PoC + source analysis + lab.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T05:00:03.147207Z"}, {"uuid": "e3540fce-ad2e-47d1-a9a3-952e3a3bdf34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12942", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrxguvdzja2v", "content": "CVE-2026-12942 - Path Traversal in IBM Langflow OSS. Remote attackers can read arbitrary files via /../ sequences. CVSS 7.5. No patch yet - restrict access immediately. #CVE #Langflow #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-12942/", "creation_timestamp": "2026-07-31T17:06:30.988499Z"}, {"uuid": "fa569aa2-9d9f-4c3e-953e-0ec3682eea1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "seen", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-03T08:00:03.415011Z"}, {"uuid": "9f0b45aa-eff0-47a9-80bd-43af1f84cefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "published-proof-of-concept", "source": "Telegram/j-DMWk1jylS6oTK3WkqNWOGjNQLp4_I9IFyoV0ikHsL-Sj8", "content": "", "creation_timestamp": "2026-08-04T00:00:42.163129Z"}, {"uuid": "eb84bf56-b211-4c23-9bb4-dffdaaaff5f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "published-proof-of-concept", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-04T00:00:43.971301Z"}, {"uuid": "d7d7843d-d2df-4243-bb12-ae2b23b2020d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96371", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12940-Langflow-Unauth-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 03:15:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12940 \u2014 Langflow OSS <=1.10.1 unauthenticated RCE via MCP stdio environment-variable injection (SHELLOPTS/PS4). Author PoC + source analysis + lab.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:48.550871Z"}, {"uuid": "0ce8d571-c4d6-4086-8208-c2c0eedad1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mszi63vvkp2y", "content": "CVE-2026-12949 - wishlist member\nA security flaw in Wishlist Member plugin for WordPress versions up to 3.34.1 allows attackers to take over any WordPress account, including administrator accounts, by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wishlistmember #CVE #infosec", "creation_timestamp": "2026-08-14T06:00:04.973946Z"}, {"uuid": "7a51a549-0dd5-47ed-bb8d-c55ea66a025c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12946", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mscly6623h2c", "content": "\ud83d\udccc CVE-2026-12946 - IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input ... https://www.cyberhub.blog/cves/CVE-2026-12946", "creation_timestamp": "2026-08-05T03:37:06.864880Z"}, {"uuid": "bc081f84-cfb2-4e6c-b9da-f3286740eb39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mscpdgst3z2n", "content": "\ud83d\udccc CVE-2026-12940 - IBM Langflow OSS 1.0.0 through 1.10.1\u00a0 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Co... https://www.cyberhub.blog/cves/CVE-2026-12940", "creation_timestamp": "2026-08-05T04:37:06.620340Z"}, {"uuid": "1c39bf2d-ac4d-4ce8-9df5-9b4fe570be6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mszyz3h5fs24", "content": "\ud83d\udd34 CVE-2026-12949 - Critical (9.8)\n\nThe Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verif...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12949/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T11:01:30.647128Z"}, {"uuid": "74313d29-f5fd-4d92-b1bb-b50b9a35f764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt24fs2nxu2p", "content": "CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-12949/", "creation_timestamp": "2026-08-14T12:02:19.079619Z"}, {"uuid": "977e3afa-2ab2-451b-ab2d-a283ce233324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117093756935891127", "content": "CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-12949/", "creation_timestamp": "2026-08-14T12:03:25.062651Z"}, {"uuid": "bfe3c885-26e8-45b1-b171-c02530a3e4bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12943", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msdo2rx4ya2r", "content": "IBM critical vulnerabilities hit App Connect, Power HMC, and webMethods. CVE-2026-12943 lets attackers execute arbitrary commands at CVSS 9.8.\n\n#IBM #CVE202612943 #RCE #InfoSec #VulnerabilityManagement", "creation_timestamp": "2026-08-05T13:47:03.484877Z"}, {"uuid": "fbbfdc33-e043-4d23-9477-da8cf1635905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12943", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msfaf427pp2s", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 37 interactions\nCVE-2026-66066: 36 interactions\nCVE-2026-58048: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18577: 5 interactions\nCVE-2026-54876: 4 interactions\nCVE-2026-12943: 3 interactions\n", "creation_timestamp": "2026-08-06T04:47:35.376299Z"}, {"uuid": "2f15b4c6-5c84-4c2d-b332-cc6ba7533ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt3w6fnmex24", "content": "CVE-2026-12949 wishlist-member-x (CVSS Score 9.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-15T05:16:07.270769Z"}, {"uuid": "b1c9b5c4-43a6-4d9f-b70d-f903401f8743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-poc-pubblico-per-lo-sfruttamento-della-cve-2026-12940", "content": "Disponibile un Proof of Concept (PoC) per la vulnerabilit\u00e0 identificata tramite la CVE-2026-12940 presente in LangFlow, piattaforma open source che fornisce un'interfaccia visuale per la costruzione ed esecuzione di workflow basati su agenti di intelligenza artificiale. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe permettere a un attaccante remoto non autenticato di iniettare comandi di sistema ed eseguire codice arbitrario sul sistema interessato.", "creation_timestamp": "2026-08-06T16:00:37.390467Z"}, {"uuid": "3113ed98-e5c2-4ba1-93e4-7dd19f12c8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12943", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq26ttl6ou2f", "content": "A critical IBM Power HMC vulnerability (CVE-2026-12943) allows unauthenticated attackers to execute commands. Patch your systems immediately.\n\n#IBMPowerHMC #Vulnerability #CyberSecurity #CVE202612943 #Infosec", "creation_timestamp": "2026-07-07T08:30:22.565908Z"}, {"uuid": "42de965e-4bdd-4728-b111-ae84a76b05d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12948", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2yzanqva24", "content": "CVE-2026-12948 - Stored Cross-Site Scripting (XSS)\nCVE ID : CVE-2026-12948\n \n Published : July 7, 2026, 3:16 p.m. | 31\u00a0minutes ago\n \n Description : A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi On...", "creation_timestamp": "2026-07-07T16:18:40.636778Z"}, {"uuid": "4ef41f0f-3c9a-438d-88e4-4b636206b2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12940", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-poc-pubblico-per-lo-sfruttamento-della-cve-2026-12940", "content": "Disponibile un Proof of Concept (PoC) per la vulnerabilit\u00e0 identificata tramite la CVE-2026-12940 presente in LangFlow, piattaforma open source che fornisce un'interfaccia visuale per la costruzione ed esecuzione di workflow basati su agenti di intelligenza artificiale. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe permettere a un attaccante remoto non autenticato di iniettare comandi di sistema ed eseguire codice arbitrario sul sistema interessato.", "creation_timestamp": "2026-08-07T01:01:06.529159Z"}, {"uuid": "dbfd9e4d-492e-4822-9815-5047a938f147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12941", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqehp3ecv2m", "content": "CVE-2026-12941 - MultiVendorX\nCVE ID : CVE-2026-12941\n \n Published : July 16, 2026, 2:30 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : The MultiVendorX \u2013 WooCommerce Multivendor Marketplace AI Powered Solutions plugin for WordPress is vulnerable to generic SQL Injection via th...", "creation_timestamp": "2026-07-16T04:09:30.988787Z"}, {"uuid": "549637d9-3a25-4a85-9077-8ead80196f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj6iribv32r", "content": "CVE-2026-12944 - langflow oss\nVersions 1.0.0 through 1.10.0 of IBM Langflow OSS can run any Python code that an attacker supplies, giving them full system privileges. This can be used to steal cloud\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-09-14T22:40:04.693467Z"}, {"uuid": "132d98ce-e915-400a-a7a2-3969fe8bab8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvj7oyuoun2k", "content": "\ud83d\udd34 CVE-2026-12944 - Critical (9.6)\n\nIBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12944/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-14T23:01:30.169897Z"}, {"uuid": "f03f93e2-268b-453c-afa8-210dc2e0782c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12944", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117272113113132424", "content": "CVE-2026-12944 (CRITICAL, CVSS 9.6) affects IBM Langflow OSS 1.0.0 \u2013 1.10.0. Attackers can execute arbitrary Python as root via SSRF, steal AWS creds, and move laterally. Patch is available \u2014 validate remediation. https://radar.offseq.com/threat/cve-2026-12944-cwe-918-server-side-request-forgery-ssrf-in-ibm-langflow-oss-98110564771040c9 #OffSeq #SSRF #IBM #CloudSecurity", "creation_timestamp": "2026-09-15T00:00:37.675691Z"}, {"uuid": "fef1016b-de7e-4c2f-b8cd-4b3b037f345c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12944", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjcytzazf24", "content": "IBM Langflow OSS 1.0.0 \u2013 1.10.0: CRITICAL SSRF (CVE-2026-12944) enables root-level Python code execution, AWS credential theft, and lateral moves. Patch immediately. https://radar.offseq.com/threat/cve-2026-12944-cwe-918-server-side-request-forgery-ssrf-in-ibm-langflow-oss-98110564771040c9 #OffSe...", "creation_timestamp": "2026-09-15T00:00:40.502284Z"}, {"uuid": "ef7c3dd6-0aeb-4300-b8b8-91e9494df74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://gist.github.com/ichintu/bb350504840f7717d8931db615795f78", "content": "Today\u2019s threat intelligence highlights three key vulnerabilities:\n\n\u2022 **CVE-2026-12944 (Critical, 9.6):** IBM Langflow OSS 1.0.0\u20131.10.0 contains a scanner defect that falsely validates components with `socket`/`urllib` imports, enabling root code execution, AWS credential theft via IMDSv1 SSRF, and lateral movement.  \n\u2022 **3BB Compromise:** Thai broadband provider 3BB was breached via a MeshCentral backdoor (CVE-2024-21762), granting attackers persistent root access to target and exfiltrate subscriber credentials.  \n\u2022 **CVE-2026-16335 (High, 8.1):** IBM DataStage on Cloud Pak for Data 5.4.0.0 suffers from a path traversal flaw allowing authenticated attackers to read, write, or delete arbitrary files.", "creation_timestamp": "2026-09-15T00:04:06.349522Z"}, {"uuid": "c4363867-2b84-4921-8dd1-c8e9c33e8fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvjdgi5r522t", "content": "\ud83d\udea8 CVE-2026-12944 \u2014 CVSS 9.6 CRITICAL\n\nIBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privil...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12944\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T00:08:16.523704Z"}, {"uuid": "1bb90844-bcec-44e7-a44c-c14ba8804cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://t.me/GithubRedTeam/102420", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12944\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cflowsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 17:30:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLangflow 1.10.0 urllib SSRF POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T19:00:05.306319Z"}, {"uuid": "569c22a0-86ea-4843-ac50-e78fc41463b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102420", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12944\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cflowsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 17:30:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLangflow 1.10.0 urllib SSRF POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T00:00:12.830579Z"}, {"uuid": "9ff22935-85ea-410a-99db-d7bd70f569a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvlwx2zgbb24", "content": "A critical Langflow SSRF flaw (CVE-2026-12944) exposes cloud credentials and internal networks. Patch your Langflow OSS servers immediately.\n\n#Langflow #SSRF #CVE202612944 #CVE202617628 #Cybersecurity", "creation_timestamp": "2026-09-16T01:02:54.151775Z"}, {"uuid": "589f0978-9b92-4a74-9afc-70401da33c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvoflwhwwm2r", "content": "CVE-2026-12944 (CVSS 9.6): Langflow SSRF Flaw Disclosed\uff08CVE-2026-12944\uff1aLangflow\u306bSSRF\u304b\u3089root\u6a29\u9650\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff09 #SecurityOnline (Sep 16)\n\nsecurityonline.info/langflow-ssr...", "creation_timestamp": "2026-09-17T00:30:25.436987Z"}, {"uuid": "c8e17570-521e-408d-896f-24707d02353a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102520", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12944\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ShadowForge-Cyber\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 21:48:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLangflow 1.10.0 urllib SSRF \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-17T01:00:03.124103Z"}, {"uuid": "7fb278e2-80ce-4da2-b719-c19dbcccc2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "Telegram/UVRhJ-dfvv69hp5StkOgcAC9P7rtS8qZd-pCJe4m6gUHuNs", "content": "", "creation_timestamp": "2026-09-18T04:00:07.277701Z"}, {"uuid": "0934c615-c5ff-4ee3-a10e-bdfdfc3d61f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102520", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12944\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ShadowForge-Cyber\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 21:48:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLangflow 1.10.0 urllib SSRF \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T00:00:10.068173Z"}, {"uuid": "c425c8a1-6f3a-4271-b661-239f180d895e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-18T04:00:12.206963Z"}, {"uuid": "e4975e40-1b66-4808-a64b-9bbabbd46698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12944", "type": "seen", "source": "Telegram/ihh6lu2JwVHbxCCtzMwz7J2so3OYSU8lmtMIGGUfSqoltoc", "content": "", "creation_timestamp": "2026-09-18T04:00:13.348458Z"}]}