SecurityNewCritical Auth Bypass Found in IBM Langflow OSS
A critical authentication flaw in IBM Langflow OSS allows unauthenticated remote attackers to execute arbitrary flows, potentially leading to RCE.
> Search
30 results for “critical”
SecurityNew
SecurityCritical IBM Langflow Auth Flaw Allows RCE
A critical authentication bypass in IBM Langflow OSS allows unauthenticated remote attackers to execute arbitrary flows and potentially achieve RCE.
SecurityCritical VMware Avi Load Balancer Flaw Found
A critical authentication bypass vulnerability in VMware Avi Load Balancer allows unauthorized network access to the control plane, requiring immediate action.
SecurityCritical Session Hijacking Flaw in Urwid
A critical vulnerability in the Urwid web display backend allows attackers to predict session IDs and gain unauthorized access to terminal sessions.
SecurityCritical Auth Bypass Hits VMware Avi Load Balancer
A critical authentication bypass in VMware Avi Load Balancer allows unauthorized access to the control plane, necessitating immediate patching.
SecurityCritical Format String Flaw Found in SurrealDB
A critical vulnerability in SurrealDB allows attackers with scripting privileges to execute arbitrary code or read memory, necessitating an immediate update.
SecurityCritical Format String Flaw in SurrealDB
A critical format string vulnerability in SurrealDB allows attackers with scripting privileges to execute arbitrary code or read sensitive memory.
SecurityCritical SurrealDB Injection Flaw Discovered
A critical injection vulnerability in SurrealDB allows authenticated users to achieve privilege escalation and full system takeover via malicious database exports.
SecurityCritical Urwid Session Hijacking Flaw (CVE-2026-9323)
A critical vulnerability in the Urwid web display backend allows attackers to predict session IDs or access FIFO files, leading to full remote code execution.
SecurityCritical Authentication Bypass Flaw Discovered in VMware Avi Load Balancer
A critical authentication bypass vulnerability in VMware Avi Load Balancer allows unauthorized access to the control plane, necessitating immediate patching.
SecurityCritical IBM Langflow OSS Vulnerability Allows Unauthenticated Execution
A critical authentication bypass in IBM Langflow OSS versions 1.0.0 through 1.10.0 enables remote attackers to execute flows without valid credentials.
SecurityCritical Path Traversal Flaw Found in IBM Langflow OSS
A critical vulnerability in IBM Langflow OSS allows for arbitrary file writes, posing a severe risk to systems utilizing the APIRequest component.
SecurityVMware Avi Load Balancer Authentication Bypass Vulnerability (CVE-2026-47865)
A critical authentication bypass in VMware Avi Load Balancer allows unauthorized access to the control plane, necessitating immediate patching.
SecurityGemini Lock Screen Flaw Risks Privacy
A critical authentication bypass in Android allows unauthorized users to send messages via Gemini without requiring a device PIN.
SecurityCritical Zoom Desktop Client Vulnerability Allows Account Takeover
A critical improper input validation flaw in Zoom for Windows enables unauthenticated remote account takeover via network access.
SecurityCritical Business Logic Flaw Discovered in HCL Aftermarket EPC
A critical business logic vulnerability in HCL Aftermarket EPC allows unauthorized users to intercept and redirect password recovery emails.
SecurityCritical Out-of-Bounds Read Flaw Found in YAML::Syck for Perl
A critical vulnerability in YAML::Syck allows attackers to trigger out-of-bounds memory reads via specially crafted !!binary YAML nodes.
SecurityCritical Vulnerability in AI Copilot WordPress Plugin Allows Takeover
A critical authentication flaw in the AI Copilot WordPress plugin exposes sites to full administrative takeover by unauthenticated attackers.
Cyber CrimeGovernment Ransomware Hits New Daily Low
New research confirms that public sector organizations now face a daily ransomware attack, highlighting a critical infrastructure crisis.
SecurityCritical Privilege Escalation Flaw Discovered in Bricksforge Plugin
A critical vulnerability in Bricksforge allows unauthenticated attackers to create administrator accounts via public registration forms.
SecurityGrav CMS 2FA Bypass Vulnerability Discovered in Login Plugin
A critical flaw in Grav CMS before version 2.0.4 allows attackers to bypass two-factor authentication, potentially leading to unauthorized account access.
SecurityCISA Flags Actively Exploited Microsoft SharePoint Vulnerability
A critical deserialization vulnerability in Microsoft SharePoint is currently under active exploitation, requiring urgent remediation by federal agencies.
SecurityCritical Hard-Coded Secret Flaw Found in clawvet API Server
A hard-coded JWT secret in clawvet API versions before 0.7.5 allows unauthenticated remote attackers to forge session cookies and steal sensitive user data.
SecurityClawvet API Hard-Coded JWT Secret Exposes User Data
A critical vulnerability in the Clawvet self-hosted API server allows unauthenticated attackers to forge session cookies and hijack user accounts.
SecurityCISA Flags Actively Exploited Fortinet FortiSandbox Injection Flaw
CISA has added a critical OS command injection vulnerability in Fortinet FortiSandbox to its KEV catalog following reports of active, real-world exploitation.
SecurityCritical Privilege Escalation Flaw Found in Aimogen Pro WordPress Plugin
A missing capability check in Aimogen Pro versions 2.8.4 and earlier allows unauthenticated attackers to execute arbitrary PHP and gain administrative access.
SecurityCritical Privilege Escalation Flaw Found in Bricksforge WordPress Plugin
A critical vulnerability in the Bricksforge WordPress plugin allows unauthenticated attackers to create unauthorized administrator accounts.
SecurityGrav Login Plugin Vulnerability Allows Two-Factor Authentication Bypass
A critical flaw in Grav versions before 2.0.4 permits attackers to bypass two-factor authentication by overwriting existing security secrets.
SecurityClawvet API Server Vulnerability Exposes User Data via Hard-Coded Secret
A critical vulnerability in clawvet API versions before 0.7.5 allows unauthenticated attackers to forge session cookies and access sensitive user information.
SecurityCritical Heap Corruption Flaw Discovered in illumos SCTP Stack
A critical vulnerability in the illumos SCTP inbound path allows unauthenticated remote attackers to trigger kernel heap corruption and potential code execution.