CVE ID :CVE-2026-107366 Published : Oct. 19, 2026, 11:49 p.m. | 15 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-107366 - Langflow OSS Authorization Bypass Through User-Controlled Key

VERWANDTEARTIKEL

CVE-2026-105453 - IBM Sterling Connect:Direct for Unix Improper Privilege Management

CVE-2026-107400 - Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication

CVE-2026-109126 - IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials

CVE-2026-112371 - H3C Magic NX15 RPC esps write code injection

CVE-2026-112370 - H3C Magic NX15 usrlist sub_416874 os command injection

CVE-2026-112900 - Pillow: Argument Injection in Ghostscript call, potentially leading into RCE