Automated cyber signal feeds.
CVE ID :CVE-2026-9198 Published : July 17, 2026, 6:17 p.m. | 57 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec())…
CVE ID :CVE-2026-9202 Published : July 17, 2026, 6:17 p.m. | 57 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEW_USER_IS_ACTIVE=true (documented deployment option), newly created accounts…
CVE ID :CVE-2026-46686 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :Emlog is an open source website building system. In 2.6.13 and earlier, the admin backend user search module’s keyword parameter from admin is processed with addslashes…
CVE ID :CVE-2026-45336 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :HireFlow is a web-based interview management system for managing candidates, scheduling interviews, and tracking hiring progress. In 1.2 and earlier, app.py assigns a hard-coded Flask secret_key…
CVE ID :CVE-2021-27137 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :An issue was discovered in router in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a…
CVE ID :CVE-2026-63087 Published : July 16, 2026, 5:16 p.m. | 1 hour, 52 minutes ago Description :Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the…
CVE ID :CVE-2026-63088 Published : July 16, 2026, 5:16 p.m. | 1 hour, 52 minutes ago Description :stoatchat before 0.14.0 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated network-accessible attackers to bypass the DNS-based IP blocklist by exploiting incomplete address…
Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) botnet framework dubbed TuxBot v3 Evolution that shows signs of being developed with assistance from a large language model (LLM), albeit with not so successful results. “While the AI…
CVE ID :CVE-2026-62948 Published : July 15, 2026, 6:16 p.m. | 47 minutes ago Description :OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into through src statefiles_write_state6()…
CVE ID :CVE-2026-62389 Published : July 15, 2026, 6:16 p.m. | 47 minutes ago Description :ws before 8.21.1 contains a memory exhaustion vulnerability in lib where the fragment guard only triggers when fragment count reaches maxFragments, allowing attackers to exhaust memory…