Every newly published security vulnerability (CVE), continuously from the NVD, with the actively exploited ones from CISA, the probability of exploitation (EPSS) and public exploits – each one researched individually: what is affected, what helps, what to do.
Per day (UTC); hover over a bar for the figures.
| Day | Critical | High | Medium | Low | Not rated | Total |
|---|---|---|---|---|---|---|
| Sun, 1 Nov 2026 | 8 | 11 | 14 | 9 | 29 | 71 |
| Sat, 31 Oct 2026 | 11 | 41 | 44 | 0 | 16 | 112 |
| Fri, 30 Oct 2026 | 44 | 216 | 259 | 30 | 120 | 669 |
| Thu, 29 Oct 2026 | 66 | 191 | 218 | 22 | 40 | 537 |
| Wed, 28 Oct 2026 | 35 | 215 | 209 | 31 | 136 | 626 |
| Tue, 27 Oct 2026 | 69 | 188 | 177 | 33 | 181 | 648 |
| Mon, 26 Oct 2026 | 21 | 130 | 245 | 55 | 287 | 738 |
| Sun, 25 Oct 2026 | 3 | 31 | 66 | 26 | 5 | 131 |
| Sat, 24 Oct 2026 | 12 | 19 | 35 | 6 | 1 | 73 |
| Fri, 23 Oct 2026 | 40 | 169 | 90 | 27 | 166 | 492 |
| Thu, 22 Oct 2026 | 69 | 160 | 206 | 55 | 2 | 492 |
| Wed, 21 Oct 2026 | 50 | 218 | 225 | 47 | 2 | 542 |
| Tue, 20 Oct 2026 | 169 | 813 | 812 | 127 | 2 | 1,923 |
| Mon, 19 Oct 2026 | 29 | 128 | 204 | 66 | 10 | 437 |
| Sun, 18 Oct 2026 | 10 | 55 | 65 | 19 | 400 | 549 |
| Sat, 17 Oct 2026 | 4 | 42 | 50 | 4 | 0 | 100 |
| Fri, 16 Oct 2026 | 53 | 179 | 219 | 14 | 0 | 465 |
| Thu, 15 Oct 2026 | 51 | 232 | 244 | 19 | 0 | 546 |
| Wed, 14 Oct 2026 | 92 | 374 | 285 | 30 | 43 | 824 |
| Tue, 13 Oct 2026 | 170 | 1,361 | 729 | 43 | 0 | 2,303 |
| Mon, 12 Oct 2026 | 48 | 264 | 282 | 80 | 0 | 674 |
| Sun, 11 Oct 2026 | 16 | 73 | 101 | 39 | 0 | 229 |
| Sat, 10 Oct 2026 | 78 | 143 | 178 | 13 | 0 | 412 |
| Fri, 9 Oct 2026 | 42 | 152 | 105 | 11 | 5 | 315 |
| Thu, 8 Oct 2026 | 62 | 194 | 220 | 21 | 0 | 497 |
| Wed, 7 Oct 2026 | 53 | 131 | 145 | 9 | 2 | 340 |
| Tue, 6 Oct 2026 | 105 | 371 | 345 | 38 | 155 | 1,014 |
| Mon, 5 Oct 2026 | 31 | 119 | 210 | 45 | 0 | 405 |
| Sun, 4 Oct 2026 | 13 | 16 | 28 | 11 | 0 | 68 |
| Sat, 3 Oct 2026 | 5 | 45 | 57 | 8 | 0 | 115 |
196 vulnerabilities · Vendor: IBM
IBM Langflow OSS 1.0.0 through 1.12.8, an open-source tool for building AI agents and workflows, contains an improper authentication flaw (CWE-287). According to IBM, a remote attacker without credentials can bypass security restrictions. IBM groups this issue with other Langflow vulnerabilities, including remote code execution, and a public Metasploit module is reported.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection flaw (CWE-94). A remote attacker can trigger Python component code already stored in a public workflow. The code then runs under the flow owner's runtime context inside the Langflow server process, bypassing the rule that public execution paths may only run server-trusted components. The CVE data provided lists CVSS 9.8, while IBM's bulletin rates the issue 6.5 with a different vector, and the authentication requirement is not confirmed, so check the final score in NVD.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection flaw (CWE-94) that allows arbitrary command execution on the server. An attacker needs a valid user account on the Langflow instance, and the IBM bulletin describes the flaw as exploitable with low privileges. Successful exploitation would give the attacker the privileges of the Langflow process; the CVSS score is 8.8 (High).
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a missing authorization flaw (CWE-862). An authenticated user with a low-privilege account can bypass the administrator-only restriction on built-in code-execution components. By configuring such a component with crafted inputs, the attacker can execute arbitrary code on the server. The CVSS base score is 8.8 (high), with high impact on confidentiality, integrity and availability. Risk is highest where Langflow is internet-facing or where accounts are shared or self-registered.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a code injection flaw in the Agentic Assistant, which generates and validates component code for flows. A remote attacker with any low-privileged authenticated account can cause the assistant to generate or submit component code using unblocked patterns. Successful exploitation results in arbitrary operating system command execution on the server, exposing stored API keys, data and connected systems. No public proof of concept or exploitation in the wild has been found so far.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a code injection flaw (CWE-94) in how code is generated. A remote attacker can use it to execute arbitrary code on the server, with a CVSS 3.1 base score of 9.8 from IBM. The official record does not state that authentication is required, but a secondary source describes it as reachable without login, so treat every instance as exposed until verified. VulDB scores the issue lower (7.3), and the CVE record was published only recently.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection flaw (CWE-94) that lets a remote attacker with a valid low-privilege account execute arbitrary code on the server. No user interaction is required. Code runs inside the Langflow process, which can expose workflow data, credentials and connected model, database or tool services. Sources list CVSS 8.8 or 9.9 depending on the scope assessment.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection flaw (CWE-94) in the eval/exec code path. An authenticated remote attacker with low privileges can inject code that is executed on the server, which is rated with high impact on confidentiality, integrity and availability. No user interaction is required, but the attacker needs a valid account on the Langflow instance.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a missing authorization flaw (CWE-862). A remote attacker with a valid, low-privileged account can execute arbitrary code on the server. The IBM record does not name the vulnerable feature. Code execution would run with the privileges of the Langflow process, which typically holds LLM API keys and flow data.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain an OS command injection flaw (CWE-78). An authenticated remote attacker can inject operating system commands and execute arbitrary code on the server, with full impact on confidentiality, integrity and availability. Exploitation requires a valid user account on the Langflow instance.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain an OS command injection flaw (CWE-94 per NVD, description matches CWE-78) that allows remote code execution on the server. According to the CVE record, an attacker needs no privileges and no user interaction, so the flaw is reachable over the network. The CVSS base score is 9.8 (critical), and the CVE was published on 29 October 2026.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.3 do not properly neutralize special elements used in an OS command. A remote attacker with a valid, low-privileged account can execute arbitrary code on the server without user interaction, which may expose stored credentials such as API keys. Langflow listens on localhost by default, so the risk depends on how it is deployed and who can reach it.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.3 deserialize untrusted data unsafely. A remote attacker with any valid Langflow account can execute arbitrary code on the server, with the privileges of the Langflow service. The vendor rates the issue CVSS 8.8 and no user interaction is required.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.3 deserialize untrusted data from the message broker. A remote attacker who can reach the message broker can execute arbitrary code on the system. The NVD record rates the issue CVSS 9.8 (critical), but other sources rate it lower, so the score should be verified. No exploitation is known.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain an improper access control flaw that allows a remote attacker with a valid user account to execute arbitrary SQL commands. Successful exploitation could allow an attacker to read, modify or delete data in the underlying database. NVD lists a CVSS score of 8.8, while IBM lists 8.5 with a scope change for this CVE.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a code injection flaw (CWE-94) caused by improper neutralization of special elements. A remote attacker with a valid low-privilege account can execute arbitrary code on the server, with high impact to confidentiality, integrity and availability (CVSS 8.8). The exact vulnerable component and trigger are not publicly described.
IBM · Langflow OSS
IBM QRadar SIEM versions 7.6.0.0 through 7.6.0.4 and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 contain an out-of-bounds read (CWE-125). A remote attacker can cause a denial of service or obtain sensitive information. According to the CVE record, no authentication or user interaction is required, and the CVSS score is 8.2 (High). The specific vulnerable component is not disclosed in the available sources.
IBM · QRadar SIEM
IBM QRadar SIEM with the HTTP Receiver protocol can be caused to stop responding by a remote attacker due to uncontrolled resource consumption (CWE-400). The attacker needs no authentication or user interaction and can send crafted traffic over the network. The impact is limited to availability; IBM reports no confidentiality or integrity impact, but an outage would stop log ingestion and create blind spots in monitoring.
IBM · QRadar SIEM
IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 bind to an unrestricted IP address. A remote attacker can obtain sensitive information, such as credentials, without authentication, according to IBM's CVSS base score of 9.8. The bulletin does not specify which listener or port is affected or which default configuration is involved.
IBM · App Connect Enterprise
IBM Guardium Data Protection versions 12.1 and 12.2 use a hard-coded cryptographic key. A remote attacker without credentials could potentially obtain sensitive information. The CNA rates the issue CVSS 8.1 (High), but the attack complexity is high and the technical details are not publicly described.
IBM · Guardium Data Protection
IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an improper authorization flaw. An unauthenticated remote attacker can write arbitrary data into the shared Redis store under any tenant's key. This can undermine the platform's credential-encryption boundary and allow poisoning of cached flow parameters for any tenant.
IBM · DataStage on Cloud Pak for Data
IBM Planning Analytics 2.0 and 2.1 contain a stack-based buffer overflow caused by improper bounds checking. An attacker who can reach the affected service over the network could overflow the buffer and execute arbitrary code on the system. The CVSS vector indicates low attack complexity and low privileges required, with no user interaction.
IBM · Planning Analytics
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance contain hard-coded credentials (CWE-798). An attacker with physical or adjacent access can use them to gain elevated privileges. Because these identity and access management appliances control authentication for connected systems, a successful attack could affect confidentiality, integrity and availability across the environment. Exploitation requires no user interaction and only low complexity, but the attack vector is inconsistently described in the sources.
IBM · Verify Identity Access / Security Verify Access
IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 contain an improper authentication flaw (CWE-287, GWT Mock Authentication). A remote attacker with a valid low-privilege account can execute arbitrary code on the server, with high impact on confidentiality, integrity and availability. The CVSS 3.1 base score assigned by IBM is 8.8.
IBM · TRIRIGA Application Platform
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain three message endpoints that do not verify ownership. Any authenticated user can bulk-delete other users' messages, overwrite message content with malicious prompts, or take over a conversation session by reassigning its session ID. Exploitation requires only a valid Langflow account over the network; the CVSS base score of 8.3 is provided by IBM as CNA.
IBM · Langflow OSS
The tracker combines official, freely usable data sources – updated continuously:
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.
