CVE-2026-66803 - Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
Published: July 30, 2026; 5:18:12 PM -0400

CVE-2026-15969 - SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.
Published: July 30, 2026; 3:17:08 PM -0400

CVE-2026-15971 - SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPER_SERVER_PORT is set, enabling code execution on inference requests.
Published: July 30, 2026; 3:17:08 PM -0400

CVE-2026-15974 - SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowing access to internal metadata, secrets, and services.
Published: July 30, 2026; 3:17:08 PM -0400

CVE-2026-15976 - SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., weights_only=False) fallback enables pickle deserialization of .bin f... read CVE-2026-15976
Published: July 30, 2026; 3:17:08 PM -0400

CVE-2026-15977 - SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured.
Published: July 30, 2026; 3:17:08 PM -0400

CVE-2026-15978 - SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, at... read CVE-2026-15978
Published: July 30, 2026; 3:17:08 PM -0400

CVE-2026-60580 - Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Easily exploitable vulnerability allows unauthenticated attacker with access to ... read CVE-2026-60580
Published: July 21, 2026; 6:17:58 PM -0400

CVE-2026-60581 - Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Difficult to exploit vulnerability allows unauthenticated attacker with access t... read CVE-2026-60581
Published: July 21, 2026; 6:17:58 PM -0400

CVE-2026-60582 - Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network acc... read CVE-2026-60582
Published: July 21, 2026; 6:17:58 PM -0400

CVE-2026-12940 - IBM Langflow OSS 1.0.0 through 1.10.1  are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Protocol) stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py wher... read CVE-2026-12940
Published: July 30, 2026; 1:16:28 PM -0400

CVE-2026-12945 - IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints.
Published: July 30, 2026; 1:16:28 PM -0400

CVE-2026-10700 - IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API that allow unauthorized access to user files.The /api/v1/files/images/{flow_id}/{file_name} endpoint does not enforce authenticat... read CVE-2026-10700
Published: July 30, 2026; 3:17:02 PM -0400

CVE-2026-12942 - IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.
Published: July 30, 2026; 3:17:05 PM -0400

V3.1: 7.5 HIGH

CVE-2026-13435 - IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.
Published: July 30, 2026; 3:17:06 PM -0400

CVE-2026-13444 - IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creating their own flow with matching Chroma persist_directory and collection_name values. The attacker receives exact victim content ... read CVE-2026-13444
Published: July 30, 2026; 3:17:06 PM -0400

CVE-2026-12946 - IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.
Published: July 30, 2026; 4:16:52 PM -0400

CVE-2026-13442 - IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact t... read CVE-2026-13442
Published: July 28, 2026; 5:17:25 PM -0400

CVE-2026-34486 - Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to... read CVE-2026-34486
Published: April 09, 2026; 4:16:25 PM -0400

CVE-2026-9198 - IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow de... read CVE-2026-9198
Published: July 17, 2026; 2:17:17 PM -0400