Threat database

CVE-2026-93449 is a high-severity vulnerability in IBM Langflow OSS versions 1.0.0 through 1.12.2. It allows a remote authenticated attacker to execute arbitrary code due to improper control of code generation, classified as CWE-94 (Code Injection). The vulnerability has a CVSS 3.1 score of 8.5, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation information is provided in the available data.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability (CWE-94) that allows a remote authenticated attacker to execute arbitrary code due to improper control of code generation. This vulnerability has a high severity with a CVSS score of 8.1. No patch or remediation details are provided in the available data.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a deserialization vulnerability (CWE-502) that could allow an attacker with access to the server secret and Redis write permissions to submit malicious serialized cache values. When these values are deserialized, attacker-controlled code could execute with the privileges of the service process. This vulnerability has a high severity rating with a CVSS score of 7.5.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability classified as CWE-440 (Expected Behavior Violation) that could allow a remote attacker to execute arbitrary code via dependency confusion. This vulnerability has a high severity with a CVSS score of 8.8. No patch or remediation details are provided in the available data.

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to exposure of sensitive information to an unauthorized actor.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain an authorization bypass vulnerability (CWE-639) that could allow a remote authenticated attacker to access sensitive information. The flaw arises from improper authorization checks related to user-controlled keys. This vulnerability has a high severity rating with a CVSS score of 7.6.

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption during ZIP file extraction.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a critical vulnerability (CWE-94) that allows remote attackers to execute arbitrary code. This is due to improper neutralization of special elements in OS commands, enabling code injection without requiring user interaction or privileges.

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability classified as CWE-693 (Protection Mechanism Failure) that allows a remote authenticated attacker to execute arbitrary code due to improper input validation. This vulnerability has a high severity with a CVSS score of 8.8. No patch or remediation information is provided in the available data.

CVE-2025-70521 is a critical vulnerability in the Fanvil x7a firmware version 2.6.0.1182 management portal's diagnostic ping tool. It improperly handles user-supplied input, allowing unauthenticated attackers to inject commands and execute arbitrary code on the underlying Android operating system. This flaw leads to high impact on confidentiality, integrity, and availability.

CVE-2025-70520 is a critical vulnerability in the websocket handler of Fanvil x7a firmware version 2.6.0.1182. It allows unauthenticated users to bypass authentication restrictions, granting access to device resources such as operational logs and diagnostic functions.

CVE-2025-70519 is a cross-site scripting (XSS) vulnerability in the device log component of Fanvil x7a firmware version 2.6.0.1182. The vulnerability arises from improper sanitization or encoding of reflected user-supplied data, allowing injection of malicious HTML and JavaScript code. This can lead to execution of arbitrary scripts in the context of the target browser rendering the device log component. The CVSS score is 6.1, indicating a medium severity level.

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system.

A vulnerability in Fanvil x7a firmware version 2.6.0.1182 allows cross-origin resource protection to be bypassed for state-changing requests. This enables Cross-Site Request Forgery (CSRF) attacks against any endpoint due to the lack of enforcement of cross-origin protections.

CVE-2025-70516 is a critical vulnerability in the websocket handler of Fanvil x7a firmware version 2.6.0.1182. It allows unauthenticated users to bypass authentication restrictions, enabling them to view device resources such as operational logs and perform diagnostic requests without any privileges.

A cross-site scripting (XSS) vulnerability exists in the device log component of Fanvil x7a firmware version 2.6.0.1182 due to improper sanitization of reflected user-supplied data. This flaw allows injection of malicious HTML and JavaScript code that executes in the context of the target browser rendering the log component.

Fanvil x7a firmware version 2.6.0.1182 lacks enforcement of cross-origin resource protection for state-changing requests, enabling attackers to bypass cross-origin boundaries. This vulnerability allows Cross-Site Request Forgery (CSRF) attacks against any endpoint on the device.

A heap buffer overflow vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_index_walk_down() function. This flaw allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image and triggering the overflow via specially crafted file metadata. The vulnerability has a high severity with a CVSS score of 8.1.

An out-of-bounds read vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_fix_file_name() function. This flaw can be triggered by performing a readlink operation on a specially crafted corrupted NTFS file, potentially allowing an attacker with local privileges to read sensitive information from the process memory of ntfs-3g. The vulnerability has a medium severity rating with a CVSS score of 5.5.