https://vulnerability.circl.lu/sightings/feed 2026-08-06T18:22:56.669064+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/832ea322-c735-4738-bf4d-73ad180f5a05/export 2026-08-06T18:22:56.696616+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "832ea322-c735-4738-bf4d-73ad180f5a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13440", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrpvv2eqdh23", "content": "CVE-2026-13440 - Stored XSS in StoreGrowth WooCommerce. Unauthenticated inject scripts via message_popup. CVSS 7.2. No patch. Remove plugin until update. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13440/", "creation_timestamp": "2026-07-28T17:13:44.566342Z"} 2026-07-28T17:13:44.566342+00:00 https://vulnerability.circl.lu/sighting/33417d9c-6866-4238-a4af-0c85b85608d5/export 2026-08-06T18:22:56.699400+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "33417d9c-6866-4238-a4af-0c85b85608d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13440", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrpngwmbxe23", "content": "WordPress\u7528StoreGrowth\u30d7\u30e9\u30b0\u30a4\u30f32.1.0\u4ee5\u4e0b\u306bStored XSS\u306e\u8106\u5f31\u6027\u3002\u5165\u529b\u691c\u8a3c\u4e0d\u8db3\u306e\u305f\u3081\u3001\u975e\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u57cb\u3081\u8fbc\u307f\u3001\u30da\u30fc\u30b8\u95b2\u89a7\u30e6\u30fc\u30b6\u30fc\u306b\u5b9f\u884c\u3055\u305b\u308b\u53ef\u80fd\u6027\u2026\nCVE-2026-13440 CVSS 7.2 | HIGH", "creation_timestamp": "2026-07-28T14:42:41.152798Z"} 2026-07-28T14:42:41.152798+00:00 https://vulnerability.circl.lu/sighting/219cea55-5593-43bd-8183-c8b0639dfbb3/export 2026-08-06T18:22:56.699583+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "219cea55-5593-43bd-8183-c8b0639dfbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr6flzrvck2v", "content": "\ud83d\udccc CVE-2026-13448 - IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( ... https://www.cyberhub.blog/cves/CVE-2026-13448", "creation_timestamp": "2026-07-21T18:07:06.790266Z"} 2026-07-21T18:07:06.790266+00:00 https://vulnerability.circl.lu/sighting/da6ab35d-f61f-4dfb-90fa-1b228e5ce851/export 2026-08-06T18:22:56.699707+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "da6ab35d-f61f-4dfb-90fa-1b228e5ce851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13445", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr6dwfosuq2y", "content": "\ud83d\udccc CVE-2026-13445 - IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's upload... https://www.cyberhub.blog/cves/CVE-2026-13445", "creation_timestamp": "2026-07-21T17:37:07.110257Z"} 2026-07-21T17:37:07.110257+00:00 https://vulnerability.circl.lu/sighting/18dd1523-6ab6-47e2-9525-f0fa90d74984/export 2026-08-06T18:22:56.699838+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "18dd1523-6ab6-47e2-9525-f0fa90d74984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13446", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr4zzbqvvc2i", "content": "\ud83d\udccc CVE-2026-13446 - IBM Langflow OSS 1.0.0 through 1.10.1 contains\u00a0hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound auth... https://www.cyberhub.blog/cves/CVE-2026-13446", "creation_timestamp": "2026-07-21T05:07:06.415837Z"} 2026-07-21T05:07:06.415837+00:00 https://vulnerability.circl.lu/sighting/ab466ad6-4057-434d-8196-098ee2c312b7/export 2026-08-06T18:22:56.699963+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ab466ad6-4057-434d-8196-098ee2c312b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3x777nmh2v", "content": "CVE-2026-13448 - langflow oss\nLangflow's public API has unauthenticated endpoints that can be exploited for remote code execution and denial of service attacks. This means an attacker could potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-20T18:44:04.203781Z"} 2026-07-20T18:44:04.203781+00:00 https://vulnerability.circl.lu/sighting/a51663ed-e056-4e80-b1d1-fd3d18f19041/export 2026-08-06T18:22:56.700082+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a51663ed-e056-4e80-b1d1-fd3d18f19041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13446", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116945875278314849", "content": "CVE-2026-13446 - Critical hardcoded credentials in IBM Langflow OSS 1.0.0-1.10.1. CVSS 9.8. Risk of unauthorized access & data compromise. No patch available. Isolate affected systems immediately. #CVE #IBM #infosec\nhttps://www.valtersit.com/cve/CVE-2026-13446/", "creation_timestamp": "2026-07-19T09:14:04.008608Z"} 2026-07-19T09:14:04.008608+00:00 https://vulnerability.circl.lu/sighting/e0c30b8d-6f9b-4650-984a-872ce3ed2a35/export 2026-08-06T18:22:56.700205+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e0c30b8d-6f9b-4650-984a-872ce3ed2a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13446", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqygul7pic27", "content": "CVE-2026-13446 - Critical hardcoded credentials in IBM Langflow OSS 1.0.0-1.10.1. CVSS 9.8. Risk of unauthorized access & data compromise. No patch available. Isolate affected systems immediately. #CVE #IBM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13446/", "creation_timestamp": "2026-07-19T09:13:48.998885Z"} 2026-07-19T09:13:48.998885+00:00 https://vulnerability.circl.lu/sighting/3f549aad-9c9d-4d3f-a196-ac170d9d79bd/export 2026-08-06T18:22:56.700315+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3f549aad-9c9d-4d3f-a196-ac170d9d79bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13448", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtutqkpt22", "content": "\ud83d\udfe0 CVE-2026-13448 - High (8.1)\n\nIBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code executi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13448/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T18:01:17.270789Z"} 2026-07-18T18:01:17.270789+00:00 https://vulnerability.circl.lu/sighting/dc4f070c-0a5a-44af-b5e9-a902a07832ca/export 2026-08-06T18:22:56.700440+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dc4f070c-0a5a-44af-b5e9-a902a07832ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13446", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqw4exsrjd2c", "content": "\ud83d\udd34 CVE-2026-13446 - Critical (9.8)\n\nIBM Langflow OSS 1.0.0 through 1.10.1 contains\u00a0hard-coded credentials, such as a password or cry...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13446/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T11:00:48.391452Z"} 2026-07-18T11:00:48.391452+00:00