Vulnerability (CVE)
VulnCheck found active exploitation of CVE-2026-5027, a path traversal flaw (CVSS 8.8) in Langflow's 'POST /api/v2/files' endpoint that fails to sanitize the 'filename' parameter, allowing file writes to arbitrary locations; Tenable, which discovered the...
Google released security updates addressing 74 vulnerabilities in Chrome, including CVE-2026-11645, a high-severity (CVSS 8.8) out-of-bounds memory access in the V8 JavaScript and WebAssembly engine that Google says has an exploit in the wild. Google has...
CISA added four flaws to its KEV catalog on Tuesday, citing active exploitation: CVE-2026-48282, which saw an exploitation attempt from an IP geolocated to India within hours of disclosure; CVE-2026-48908, exploited as a zero-day in SP Page Builder to...
VulnCheck recorded more than 50 detections of CVE-2026-66066 exploitation within a few hours on August 30, 2026, rising to 360 by Monday, with requests querying environment variables such as LANGFLOW_SUPERUSER and AWS_ACCESS*, reading...