CVE Watch
Every new High and Critical vulnerability, updated automatically from NVD, FIRST EPSS and CISA’s Known Exploited Vulnerabilities list, with whether public exploit code exists. Critical CVEs and exploited Highs are also posted to Bluesky as they appear.
All High & Critical Critical High Exploited (KEV) Public exploit
-
CVE-2026-110244: IBM Langflow OSS (High, CVSS 8.8)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
-
CVE-2026-110245: IBM Langflow OSS (High, CVSS 7.5)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication.
-
CVE-2026-110186: IBM Langflow OSS (Critical, CVSS 9.8)
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
-
CVE-2026-107326: IBM Langflow OSS (High, CVSS 8.8)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
-
CVE-2026-107327: IBM Langflow OSS (High, CVSS 8.8)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.
-
CVE-2026-107328: IBM Langflow OSS (High, CVSS 8.8)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec.
-
CVE-2026-107329: IBM Langflow OSS (High, CVSS 8.8)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.
-
CVE-2026-104324: IBM Langflow OSS (High, CVSS 8.8)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deserialization of untrusted data.
-
CVE-2026-104328: IBM Langflow OSS (High, CVSS 8.8)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
-
CVE-2026-104339: IBM Langflow OSS (Critical, CVSS 9.8)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
-
CVE-2026-104317: IBM Langflow OSS (Critical, CVSS 9.8)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
-
CVE-2026-103092: IBM Langflow OSS (High, CVSS 8.8)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control.
-
CVE-2026-102590: IBM Langflow OSS (High, CVSS 7.7)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery vulnerability.
-
CVE-2026-101288: IBM Langflow OSS (High, CVSS 8.8)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code.
-
CVE-2026-119052: ggml-org llama.cpp (High, CVSS 8.7)
llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers…
-
CVE-2026-119049: idinging FreeMail (High, CVSS 7.2)
FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners…
-
CVE-2026-119050: agno-agi agno (Critical, CVSS 9.2)
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr(). Attackers can use prompt injection to make…
-
CVE-2019-25781: Python-Markdown Markdown (High, CVSS 8.7)
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated [ or…
-
CVE-2026-49142: openemr (High, CVSS 8.7)
OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that allows users with Clinician-level privileges to read and modify arbitrary database contents by submitting crafted values in…
-
CVE-2026-96767: webaways NEX-Forms – Ultimate Forms Plugin for WordPress (High, CVSS 7.2)
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in all versions up to, and including, 9.3.2 due to insufficient…
-
CVE-2026-119025: sindresorhus open (High, CVSS 7.7)
open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs,…
-
CVE-2026-119027: oapi-codegen (High, CVSS 7.7)
oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying a crafted servers[].x-go-name value emitted unescaped by the server-urls template. Attackers who control an…
-
CVE-2026-119028: oapi-codegen (High, CVSS 8.7)
oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document…
-
CVE-2026-115821: NewsmanApp (High, CVSS 7.2)
The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_first_name, billing_last_name' parameter in all versions up to, and including, 3.7.29 due to insufficient input sanitization and output escaping.…
-
CVE-2026-110184: blazethemes Newsmatic (High, CVSS 7.5)
The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter…
-
CVE-2026-114488: Red Hat JBoss Enterprise Application Platform 8 (High, CVSS 7.4)
A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level…
-
CVE-2026-42922: Frangoteam (Critical, CVSS 9.8)
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP…
-
CVE-2026-118579: D-Link DIR-505 (High, CVSS 8.9)
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds…
-
CVE-2026-118803: Bricks Theme (High, CVSS 7.5)
Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous attackers to control the urlParams object in the query_result REST endpoint, causing the submitted value to be…
-
CVE-2026-118804: Bricks Builder (High, CVSS 7.5)
Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to access restricted post content by submitting crafted post_status and post_type values in the originalQueryVars parameter to…
-
CVE-2026-118755: Volmarg personal-management-system (High, CVSS 8.6)
Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticated users to execute shell commands via unescaped folder paths in the storage module's tree command. Attackers can…
-
CVE-2026-118690: signalk-server (Critical, CVSS 9.3)
Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log archives via the /skServer/ziplogs endpoint. Attackers can extract the JWT secretKey from security.json in…
-
CVE-2026-118694: trentm python-markdown2 (High, CVSS 8.7)
python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by submitting Markdown with unclosed inline link destinations. Attackers can submit repeated '[a](' or '
KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing attackers to intercept HTTPS traffic by presenting any certificate. Attackers operating the user's proxy node can serve…
-
CVE-2026-118689: OvenMediaLabs OvenMediaEngine (High, CVSS 8.7)
OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() that allows unauthenticated attackers to stall connections by sending payload_length values above 32750. Attackers can send crafted OVT packets to the…
-
CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (High, CVSS 8.6)
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker…
-
CVE-2026-13451: Red Hat OpenShift AI (RHOAI) (High, CVSS 7.7)
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious `storageUri`. This Server-Side Request Forgery (SSRF) vulnerability allows…
-
CVE-2026-117574: Red Hat OpenShift AI (RHOAI) (Critical, CVSS 9.1)
A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service…
-
CVE-2026-109411: Samba (High, CVSS 8.1)
An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with…
-
CVE-2026-118683: Project-MONAI MONAI (High, CVSS 8.6)
MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields. Attackers can publish a malicious…