{"vulnerability": "cve-2026-4851", "sightings": [{"uuid": "dadf1fae-89cc-498a-85e4-4f2cc8e49b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4851", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhydyx4lem27", "content": "", "creation_timestamp": "2026-03-26T19:35:49.494150Z"}, {"uuid": "8445699f-5e6b-4502-a10b-8e1832f1b501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4851", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116309873682821772", "content": "", "creation_timestamp": "2026-03-29T01:30:30.401361Z"}, {"uuid": "58c2cc36-3628-4cc9-a426-3b3d0b19394c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4851", "type": "published-proof-of-concept", "source": "Telegram/fvcDlylB6Q78KniI1pBDCXqCziRIFy6eVM6L3PvvuY9d-E4", "content": "", "creation_timestamp": "2026-03-31T21:19:21.000000Z"}, {"uuid": "75bc7ca7-0a99-4063-a545-e38b8d565554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-poc-pubblico-per-lo-sfruttamento-della-cve-2026-48519", "content": "", "creation_timestamp": "2026-06-05T00:32:37.000000Z"}, {"uuid": "91f1fe1b-ed0d-4772-81d5-1ea210ffd3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48519", "type": "published-proof-of-concept", "source": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26f", "content": "", "creation_timestamp": "2026-05-27T15:10:13.000000Z"}, {"uuid": "bdfaf13e-1a3a-4d17-bbea-0e3e5496371a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow4treusj2o", "content": "CVE-2026-48510 - MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths\nCVE ID : CVE-2026-48510\n \n Published : June 22, 2026, 9:16 p.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : MessagePack for C# is a MessagePack serializer for C#. Prior to 2....", "creation_timestamp": "2026-06-23T00:18:41.080114Z"}, {"uuid": "ee3ec044-64a2-4e8c-b8b8-f78fd64eed68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpatu5nmht2n", "content": "\ud83d\udccc CVE-2026-48519 - Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the \"Shareable Playground\" (or \"Public Flows\" in code) ... https://www.cyberhub.blog/cves/CVE-2026-48519", "creation_timestamp": "2026-06-27T06:37:08.460345Z"}, {"uuid": "7be8aec0-a66c-4b2f-88af-4b264c62497f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpatu6qvlb2j", "content": "\ud83d\udccc CVE-2026-48519 - Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the \"Shareable Playground\" (or \"Public Flows\" in code) ... https://www.potatohub.blog/cves/CVE-2026-48519", "creation_timestamp": "2026-06-27T06:37:09.026280Z"}, {"uuid": "85d487ab-f0f7-4af1-b5a6-e64b5bf95bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjoyzdfek2o", "content": "\u300cLangflow\u300d\u306bRCE\u8106\u5f31\u6027 - \u30d5\u30ed\u30fc\u5171\u6709\u74b0\u5883\u306b\u5f71\u97ff\n\n\u300cLangflow\u300d\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30d5\u30ed\u30fc\u3092\u5171\u6709\u3057\u3066\u3044\u308b\u74b0\u5883\u306b\u304a\u3044\u3066\u6df1\u523b\u306a\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3057\u3066\u3044\u308b\u3002\n\n\u30d5\u30ed\u30fc\u3092\u5171\u6709\u3059\u308b\u300cShareable Playground\u300d\u300cPublic Flows\u300d\u306a\u3069\u306e\u6a5f\u80fd\u306b\u8106\u5f31\u6027\u300cCVE-2026-48519\u300d\u304c\u5224\u660e\u3057\u305f\u3082\u306e\u3002\n\n\u540c\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u3001\u30ea\u30f3\u30af\u3092\u4ecb\u3057\u3066\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3002\u7d30\u5de5\u3057\u305f\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u884c\u3046\u3053\u3068\u3067\u3001\u30b5\u30fc\u30d0\u306b\u304a\u3044\u3066\u4efb\u610f\u306ePython\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u3068\u3044\u3046\u3002", "creation_timestamp": "2026-07-13T12:29:32.098516Z"}]}