Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-86889 medium 4.8 No A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoi... 2026-09-16
CVE-2026-86895 high 7.5 No An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS... 2026-09-16
CVE-2026-86905 medium 5.5 No This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An... 2026-09-16
CVE-2026-86904 high 7.5 No A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS... 2026-09-16
CVE-2026-86903 medium 5.5 No An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS... 2026-09-16
CVE-2026-81941 high 8.8 No IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on t... 2026-09-16
CVE-2026-81940 high 8.8 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization o... 2026-09-16
CVE-2026-81268 high 8.1 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to i... 2026-09-16
CVE-2026-81265 high 7.5 No IBM Langflow OSS 1.0.0 through 1.11.5. 2026-09-16
CVE-2026-81213 high 8.6 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to i... 2026-09-16
CVE-2026-81211 high 8.8 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authoriza... 2026-09-16
CVE-2026-81204 critical 9.8 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph constructio... 2026-09-16
CVE-2026-79742 high 8.8 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment... 2026-09-16
CVE-2026-79725 medium 6.5 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control. 2026-09-16
CVE-2026-79724 critical 9.8 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of speci... 2026-09-16
CVE-2026-79723 medium 5.0 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to improper validation... 2026-09-16
CVE-2026-78575 high 8.8 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation o... 2026-09-16
CVE-2026-78573 critical 9.8 No IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default crede... 2026-09-16
CVE-2026-78571 high 8.8 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval() call... 2026-09-16
CVE-2026-78569 high 8.8 No IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the s... 2026-09-16