IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/{flow_id} endpoint, the application allows component inputs to reference storage paths using arbitrary user or flow identifiers without verifying ownership. An attacker with low‑privileged authenticated access can supply a crafted file path pointing to another user’s storage namespace, causing the backend to read and return the contents of files uploaded by other users. This vulnerability bypasses intended authorization checks enforced by the file management API and may result in unauthorized disclosure of sensitive user data.

CVE Database V5

Detailed information about CVE-2026-9225: CWE-639 Authorization Bypass Through User-Controlled Key in IBM Langflow OSS affecting IBM Langflow OSS. Get real-time

CVE-2026-9225: CWE-639 Authorization Bypass Through User-Controlled Key in IBM Langflow OSS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-9225: CWE-639 Authorization Bypass Through User-Controlled Key in IBM Langflow OSS

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escalate privileges and gain unauthorized access to protected resources.

Detailed information about CVE-2026-9176: CWE-94 Improper Control of Generation of Code ('Code Injection') in IBM WebSphere Application Server affecting IBM Web

CVE-2026-9176: CWE-94 Improper Control of Generation of Code ('Code Injection') in IBM WebSphere Application Server - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-9176: CWE-94 Improper Control of Generation of Code ('Code Injection') in IBM WebSphere Application Server

Meridian

Horizon

CVE-2026-89089 is a SQL injection vulnerability in the JasperReports-based reporting feature of OpenNMS Meridian and Horizon. A low-privileged authenticated user can exploit this by supplying a crafted DATE_FORMAT parameter to certain default-enabled reports via the REST API, allowing arbitrary SQL execution. This can lead to unauthorized reading of sensitive database information such as provisioning credentials and SNMP community strings. The vulnerability affects specific versions of Meridian and Horizon and has a CVSS score of 6.5 (medium severity).

This vulnerability exists because the JasperReports templates for the reports "Maintenance contracts expired" and "Maintenance contracts strategy" substitute the DATE_FORMAT parameter directly into SQL queries without proper escaping. An attacker with ROLE_USER privileges can send a POST request to the reporting REST API with a malicious DATE_FORMAT value, resulting in SQL injection. This allows reading of arbitrary data from the OpenNMS database, including sensitive secrets. The issue affects Meridian versions >=2024.1.0 and <2024.3.13, >=2025.0.0 and <2025.0.10, and Horizon versions >=36.0.0 and <36.0.4. The vendor recommends upgrading to Meridian 2024.3.13, 2025.0.10, or Horizon 36.0.4 or newer. The products are intended for private network deployment and not direct Internet exposure.

Detailed information about CVE-2026-89089: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in The OpenNMS Group Meri

CVE-2026-89089: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in The OpenNMS Group Meridian - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-89089: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in The OpenNMS Group Meridian

libxls

An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls version prior to 1.6.3. This vulnerability is caused by insufficient validation of file-controlled OLE summary offsets, which may lead to reading memory outside the intended bounds.

CVE-2026-79592 describes an out-of-bounds read vulnerability in libxls 1.6.3 and earlier versions. The issue arises in the xls_dumpSummary() function due to inadequate validation of OLE summary offsets controlled by the input file. This can cause the function to read memory beyond the allocated buffer, potentially leading to application crashes or information disclosure. No CVSS score or detailed impact metrics are provided in the source data.

Detailed information about CVE-2026-79592: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-79592: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-79592: n/a

suricata

Suricata versions from 8.0.0 up to but not including 8.0.5 contain a use-after-free vulnerability in the decompress transform pipeline when certain detection transforms are chained. This flaw can cause Suricata to crash during network traffic processing if a malicious rule chains 'gunzip' or 'zlib_deflate' with a max-size greater than 4096 after another transform. Version 8.0.5 includes a fix for this issue. A temporary workaround is to avoid such rule chains until the update is applied.

CVE-2026-45752 is a use-after-free vulnerability (CWE-416) in the Suricata network security engine affecting versions >=8.0.0 and <8.0.5. The issue occurs in the decompress transform pipeline when detection transforms such as 'gunzip' or 'zlib_deflate' are chained with a max-size parameter exceeding 4096 after another transform. This leads to reading from an inspection buffer after it has been freed and reallocated, causing a crash during network traffic processing. Exploitation requires a malicious rule, not just malicious traffic. The vulnerability is fixed in Suricata version 8.0.5.

Detailed information about CVE-2026-45752: CWE-416: Use After Free in OISF suricata affecting OISF suricata. Get real-time updates, technical details, and mitig

CVE-2026-45752: CWE-416: Use After Free in OISF suricata - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-45752: CWE-416: Use After Free in OISF suricata

This CVE identifier was reserved but subsequently rejected, indicating that the reported vulnerability was not accepted or validated by the assigning authority. No technical details, impact, or patch information are available.

Detailed information about CVE-2026-70613. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-70613 has been rejected

Official rejection reason