Threats Tagged 'cve-2026-10564'
View all threats tagged with 'cve-2026-10564'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-10564'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-10564: CWE-918 Server-Side Request Forgery (SSRF) in IBM Langflow OSSCVE-2026-10564 0 IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker can exploit this to access internal resources including cloud metadata services (AWS/Azure/GCP IMDS), potentially exfiltrating IAM credentials and enumerating internal networks. The vulnerability can also be triggered through prompt injection in agentic workflows due to tool_mode=True exposure. Join the discussion | CVE Database V5 | 06/30/2026, 19:51:55 UTC Added: 06/30/2026, 20:21:53 UTC |
Showing 1 to 1 of 1 result