Skip to content

cveboard RSS feed

IBM

IBM has 8 entries in CISA's Known Exploited Vulnerabilities catalog; the latest was added on Aug 4, 2026.

Tuesday, October 6
- GitHub CVE-2026-10561
  Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation
  - IBM Langflow OSS
  - Critical
  - CVSS 9.9
  - EPSS 0.82%
  - Fixed version listed
  13:38 UTC
Monday, October 5
- GitHub CVE-2026-8505
  Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass
  - IBM Langflow OSS
  - Critical
  - CVSS 9.8
  - EPSS 0.72%
  - Fixed version listed
  22:31 UTC
- GitHub CVE-2026-9205
  Langflow: Weak Fernet Key via random.seed()
  - IBM Langflow OSS
  - Critical
  - CVSS 9.1
  - EPSS 0.3%
  - Fixed version listed
  22:31 UTC