{"vulnerability": "cve-2026-9198", "sightings": [{"uuid": "0c7bb0f4-3826-423d-8993-9bc2591ee47d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3msbjeotkgx2n", "content": "\ud83d\uded1 CVE-2026-9198\nIBM Langflow\nCVSS 9.8 / EPSS 2% / KEV \u2705\nTL;DR: IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login\u2026\nhttps://cvesentinel.com/report/CVE-2026-9198?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-04T17:17:46.716727Z"}, {"uuid": "61bab228-c91b-4187-9c33-6985f0944e5d", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e2b79e9e-4751-479e-a927-81545fcc8314", "content": "", "creation_timestamp": "2026-08-04T18:00:01.856788Z"}, {"uuid": "ca50af20-4415-473d-8158-cecb1a481d51", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/29f8096f-284c-410c-80f0-587d602e903c", "content": "", "creation_timestamp": "2026-08-04T18:00:26.336123Z"}, {"uuid": "6f9d2859-6180-4c3d-bbca-be1e28a24e62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msbmylvl7s27", "content": "CVE-2026-9198 \u00b7 trending #8\n\nCurrently trending CVE - Hype Score: 3 - IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (exec... https://cvemon.intruder.io/cves/CVE-2026-9198", "creation_timestamp": "2026-08-04T18:22:35.166317Z"}, {"uuid": "03a1969e-3859-4d12-bc1c-6271b4300802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3msbqbznk2s2s", "content": "\ud83d\udd34 EXPLOITED\n\nLangflow, the popular AI workflow builder, has a critical flaw (CVE-2026-9198): its auto-login endpoint hands any stranger an admin token, then a second endpoint runs their code.\n\nCISA says it's exploited now. Update past 1.10.0 and disable auto-login.", "creation_timestamp": "2026-08-04T19:21:33.859571Z"}, {"uuid": "55a6524c-f56b-4841-b149-9a5128898e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-770", "content": "", "creation_timestamp": "2026-08-04T20:15:03.580093Z"}, {"uuid": "0057e506-e8e2-4b9d-b01d-6f525943b579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msc63m3egi26", "content": "\ud83d\udea8 CISA KEV ALERT: CVE-2026-9198 identifies a critical unauthenticated code injection flaw in IBM Langflow allowing full RCE on default deployments. Active exploitation confirmed. Get the execution mechanics, CrowdStrike CQL detection, and compensating controls now: https://thecybermind.co/fi0v", "creation_timestamp": "2026-08-04T23:28:30.287268Z"}, {"uuid": "033c7950-e37b-4372-b8eb-b9a90e8d64e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mscjv5grby2e", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60273\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds Three Known Exploited Vulnerabilities to Catalog  #CISA (Aug 4)\n\nCVE-2026-9198 IBM Langflow \u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\nCVE-2026-18556 N-able N-central\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\uff08\u4ee3\u66ff\u30d1\u30b9\u307e\u305f\u306f\u30c1\u30e3\u30cd\u30eb\u306e\u4f7f\u7528\uff09\u306e\u8106\u5f31\u6027\nCVE-2026-34486 Apache Tomcat\u306b\u304a\u3051\u308b\u6a5f\u5bc6\u30c7\u30fc\u30bf\u306e\u6697\u53f7\u5316\u306e\u6b20\u843d\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-05T02:59:38.040007Z"}, {"uuid": "f5455ad0-6b7a-4620-bf4b-4923294d2240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "Telegram/PfEGiROgrNR5ykZ5BXHTDqc3pwoH93Egm5-xEiTSmFuTh6c", "content": "", "creation_timestamp": "2026-08-12T08:00:04.219044Z"}, {"uuid": "ea8929cf-6ea9-45d5-9836-cf2dbd8598af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/nuke86.rfeed.it/post/3msuo45tbro24", "content": "\u2728 CVE-2026-9198: Langflow sotto attacco attivo, ecco perch\u00e9 aggiornare subito \nLeggi il blog: spcnet.it/cve-2026-919...", "creation_timestamp": "2026-08-12T08:03:05.322927Z"}, {"uuid": "45a93507-48cf-4b23-8d6a-15f968d38508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msdaqjb7kk2c", "content": "CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305fLangflow\u3001N-central\u3001Tomcat\u306e\u8106\u5f31\u6027\u3092\u8b66\u544a\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81(CISA)\u306f\u706b\u66dc\u65e5\u3001IBM Langflow OSS\u3001N-able N-central\u3001Apache Tomcat\u306b\u5b58\u5728\u3059\u308b3\u4ef6\u306e\u8106\u5f31\u6027\u304c\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\u3057\u307e\u3057\u305f\u3002 CVE-2026-9198(CVSS\u30b9\u30b3\u30a29.8)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308bLangf...", "creation_timestamp": "2026-08-05T09:48:38.831302Z"}, {"uuid": "e945e369-0f22-4e27-a017-bd9fa9cbd8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msdcqap3ks2p", "content": "\ud83e\udd16 CISA added 3 actively exploited flaws to its KEV catalog, incl. CVE-2026-9198 (CVSS 9.8): unauthenticated RCE in Langflow, plus Tomcat and N-central bugs. Patch now.\nhttps://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html", "creation_timestamp": "2026-08-05T10:24:17.144914Z"}, {"uuid": "b67c1fc8-bfae-44d9-a020-c7d805c58056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\n\nThe list of vulnerabilities is as follows -\n\n\n  CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote", "creation_timestamp": "2026-08-05T13:00:35.544808Z"}, {"uuid": "04059771-c3ea-497f-82ca-6518f8ef30eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msdu2ky3rs2k", "content": "2/ \u26a0\ufe0f CISA just added Langflow's CVE-2026-9198 (CVSS 9.8) to its actively exploited list. Unauthenticated remote code execution. Patch to 1.10.1 now if you run it. No excuses on this one.", "creation_timestamp": "2026-08-05T15:34:24.635219Z"}, {"uuid": "84de2ca2-7718-49a7-a024-a31e389cdd72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msdu2lbz622k", "content": "2/ \u26a0\ufe0f CISA just added Langflow's CVE-2026-9198 (CVSS 9.8) to its actively exploited list. Unauthenticated remote code execution. Patch to 1.10.1 now if you run it. No excuses on this one.", "creation_timestamp": "2026-08-05T15:34:25.257818Z"}, {"uuid": "083cef5a-700e-4187-a1e7-37615c07b599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msdu2lc34k2k", "content": "2/ \u26a0\ufe0f CISA just added Langflow's CVE-2026-9198 (CVSS 9.8) to its actively exploited list. Unauthenticated remote code execution. Patch to 1.10.1 now if you run it. No excuses on this one.", "creation_timestamp": "2026-08-05T15:34:25.722357Z"}, {"uuid": "8e393fae-db30-4efe-b0a2-22d8887da8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msdu2lc43s2k", "content": "2/ \u26a0\ufe0f CISA just added Langflow's CVE-2026-9198 (CVSS 9.8) to its actively exploited list. Unauthenticated remote code execution. Patch to 1.10.1 now if you run it. No excuses on this one.", "creation_timestamp": "2026-08-05T15:34:26.170943Z"}, {"uuid": "3b3c28ed-2422-4531-a8db-d46c1a9b9cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msdu2lc62c2k", "content": "2/ \u26a0\ufe0f CISA just added Langflow's CVE-2026-9198 (CVSS 9.8) to its actively exploited list. Unauthenticated remote code execution. Patch to 1.10.1 now if you run it. No excuses on this one.", "creation_timestamp": "2026-08-05T15:34:26.620896Z"}, {"uuid": "72660eee-b6b8-4dbb-ada5-dff878a8cde4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msdu2lc6zk2k", "content": "2/ \u26a0\ufe0f CISA just added Langflow's CVE-2026-9198 (CVSS 9.8) to its actively exploited list. Unauthenticated remote code execution. Patch to 1.10.1 now if you run it. No excuses on this one.", "creation_timestamp": "2026-08-05T15:34:27.058444Z"}, {"uuid": "dad385b4-b094-4cb6-9439-9ef2023b531e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msdu2lc7ys2k", "content": "2/ \u26a0\ufe0f CISA just added Langflow's CVE-2026-9198 (CVSS 9.8) to its actively exploited list. Unauthenticated remote code execution. Patch to 1.10.1 now if you run it. No excuses on this one.", "creation_timestamp": "2026-08-05T15:34:27.502538Z"}, {"uuid": "514a1128-c4d9-48c7-bbc0-1778d34aad05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msdu2lc7yt2k", "content": "2/ \u26a0\ufe0f CISA just added Langflow's CVE-2026-9198 (CVSS 9.8) to its actively exploited list. Unauthenticated remote code execution. Patch to 1.10.1 now if you run it. No excuses on this one.", "creation_timestamp": "2026-08-05T15:34:27.974181Z"}, {"uuid": "e98a216e-1b76-4f53-b704-72ec6c6a6cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3msdzfpjpup2q", "content": "CVE-2026-9198 chains an auto-login JWT bypass with exec() RCE for unauthenticated Langflow takeover. https://intel.threadlinqs.com/threat/TL-2026-1893 #ThreatIntel #CVE_2026_9198 #CVE_2026_9103 #KeyHunter", "creation_timestamp": "2026-08-05T17:09:59.860372Z"}, {"uuid": "728e35d5-1cf6-48cf-b67e-4f79b6ecdded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96800", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a PoC-CVE-2026-9198\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 18:47:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T20:00:04.992201Z"}, {"uuid": "54536238-af62-4495-a9e1-65ec9980d42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mseeyfddjh2b", "content": "\ud83e\udd16 CISA KEV adds 3 exploited flaws: CVE-2026-9198 (9.8) Langflow RCE; CVE-2026-18576 N-central admin hijack; CVE-2026-34486 (7.5) Tomcat. Patch in 3 days.\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-langflow-n-central-apache-tomcat-flaws/", "creation_timestamp": "2026-08-05T20:37:17.484848Z"}, {"uuid": "63698028-2007-4e41-af82-be5046dfc002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "Telegram/aUMSckDy3JDEcbvb6stjgMvcGejlLC1WM-LQ3QMdynxorg", "content": "", "creation_timestamp": "2026-08-05T21:00:03.898783Z"}, {"uuid": "6df63aa4-d92d-4a7f-96e6-56a80200688d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "exploited", "source": "Telegram/aUMSckDy3JDEcbvb6stjgMvcGejlLC1WM-LQ3QMdynxorg", "content": "", "creation_timestamp": "2026-08-06T00:00:09.063671Z"}, {"uuid": "e45e67af-2c3c-4a05-bd5a-9edcc2f06fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96800", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a PoC-CVE-2026-9198\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 18:47:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:25.121942Z"}, {"uuid": "3374a490-d4ac-40e9-94d7-8bcf0a9a4dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\n\nThe list of vulnerabilities is as follows -\n\n\n  CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote", "creation_timestamp": "2026-08-06T01:00:33.468140Z"}, {"uuid": "b5fe4bfd-ff04-45f8-881c-16f76df25978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "Telegram/PfEGiROgrNR5ykZ5BXHTDqc3pwoH93Egm5-xEiTSmFuTh6c", "content": "", "creation_timestamp": "2026-08-13T00:00:44.621616Z"}, {"uuid": "a5b81011-c1ad-48ba-b96a-752655cb533d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-034", "content": "", "creation_timestamp": "2026-08-13T08:45:55.490200Z"}, {"uuid": "e1c724a4-83d5-43d7-93bc-842848ac7f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97507", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9198\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CuteeCat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 00:55:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-9198\u5229\u7528\u4ee3\u7801\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T02:00:03.414361Z"}, {"uuid": "37a6fba1-630e-4647-bf15-435c2b2c80c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msi4ib2pnp2r", "content": "\ud83d\udea8 CISA just added three more flaws to its KEV catalog. Your patch queue just got longer.\n\nCVE-2026-9198.\n\nhttps://www.yazoul.net/news/article/cisa-flags-langflow-rce-tomcat-and-n-central-flaws-as-actively-exploited/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-07T08:15:45.464230Z"}, {"uuid": "632136c3-fc2c-4e90-8dc0-c22266b20264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97507", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9198\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CuteeCat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 00:55:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-9198\u5229\u7528\u4ee3\u7801\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T00:00:08.900636Z"}, {"uuid": "ac10be0d-ac45-4549-98a7-77fbd275e174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3msix5c3wid2z", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-9198: IBM Langflow Code Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-9198", "creation_timestamp": "2026-08-07T16:14:59.287504Z"}, {"uuid": "808fb007-8ee6-4f07-8273-94c3173b7c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mquedxsgce2v", "content": "CVE-2026-9198 - langflow oss\nIBM Langflow's default settings allow unauthorized users to run code on the system, posing a significant risk. This issue affects versions 1.0.0 through 1.10.0 of the software.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-17T18:18:04.827080Z"}, {"uuid": "0006300f-50ba-4924-b5cc-fc5aa77d25d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqx2jkspbj2f", "content": "\ud83d\udd34 CVE-2026-9198 - Critical (9.8)\n\nIBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_logi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9198/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T20:00:14.650205Z"}, {"uuid": "1688a9c7-6b17-4d80-a8cd-08782f4a2acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://t.me/bdufstecru/3338", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 /api/v1/validate/code, /api/v1/auto_login \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 IBM Langflow OSS \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-10244\nCVE-2026-9198\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\n\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.10.1:\nhttps://www.ibm.com/support/pages/node/7278927", "creation_timestamp": "2026-07-22T16:00:04.151980Z"}, {"uuid": "11892f19-3508-4bfb-8cdc-a3ce9349745d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-poc-pubblico-per-lo-sfruttamento-della-cve-2026-9198", "content": "", "creation_timestamp": "2026-07-22T16:15:17.908629Z"}, {"uuid": "014a3ad2-3aa0-4175-a0b0-06ab08ed58e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "Telegram/wu7ZwWUDhyI14H4kQ3LWs1KWN75IcQ-iWlf3DfK8jhFVpKA", "content": "", "creation_timestamp": "2026-07-22T17:00:04.905389Z"}, {"uuid": "fe49bf48-e9c7-491b-9c3b-9b0edda2b673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://t.me/bdufstecru/3338", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 /api/v1/validate/code, /api/v1/auto_login \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 IBM Langflow OSS \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-10244\nCVE-2026-9198\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\n\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.10.1:\nhttps://www.ibm.com/support/pages/node/7278927", "creation_timestamp": "2026-07-23T00:00:22.773520Z"}, {"uuid": "17db7fe0-9697-479d-8e24-438693cff5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "Telegram/wu7ZwWUDhyI14H4kQ3LWs1KWN75IcQ-iWlf3DfK8jhFVpKA", "content": "", "creation_timestamp": "2026-07-23T01:00:05.594485Z"}, {"uuid": "c0e92762-c7a3-4ae8-a262-1cdda95e5bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-poc-pubblico-per-lo-sfruttamento-della-cve-2026-9198", "content": "Disponibile un Proof of Concept (PoC) per la CVE-2026-9198 - gi\u00e0 sanata dal vendor - presente in Langflow OSS, nota piattaforma open source integrata nelle soluzioni enterprise di IBM, per la progettazione visuale di workflow basati su Intelligenza Artificiale. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-07-23T01:00:40.967777Z"}, {"uuid": "1f0c3662-8bd6-462b-876e-a4e6adec723c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://t.me/GithubRedTeam/94477", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9198_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T05:00:05.777932Z"}, {"uuid": "b52bb32d-0366-4fe1-b580-dedf6d8e8478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94477", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9198_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:09.647986Z"}, {"uuid": "6f1ec301-ad47-4865-8c6f-be5443b1429e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "Telegram/M-3cLQvPgI-q_MEcWYT-wWAA2JFIhIDN85UPqM1dZ7X-wCw", "content": "", "creation_timestamp": "2026-07-24T18:00:04.231114Z"}, {"uuid": "dd58638f-44b8-491c-8abf-b797ab928f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://t.me/GithubRedTeam/94943", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9198\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ywh-jfellus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 09:42:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T11:00:03.753493Z"}, {"uuid": "d85b1386-739d-4733-a637-d115d8f854ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "Telegram/rA_p99UjCZMfj7lKKpB-QLOB_ZbKAJGY8XrtkZJhqRLC2rg", "content": "", "creation_timestamp": "2026-07-24T15:00:03.986468Z"}, {"uuid": "d617e0e0-e3f3-4ba4-859e-7c72522f9aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://t.me/GithubRedTeam/95016", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9198\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 20:59:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIBM Langflow Unauthenticated RCE via Auto-Login Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T22:00:04.563856Z"}, {"uuid": "92643fa3-1193-48ba-9fb7-df506afe12c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95016", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9198\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 20:59:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIBM Langflow Unauthenticated RCE via Auto-Login Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T00:00:09.352559Z"}, {"uuid": "db6d4165-4803-4b5a-a841-92232b38df10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "Telegram/M-3cLQvPgI-q_MEcWYT-wWAA2JFIhIDN85UPqM1dZ7X-wCw", "content": "", "creation_timestamp": "2026-07-25T00:00:09.882724Z"}, {"uuid": "12bf392a-f7fd-4915-9771-95103c6f5530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "Telegram/rA_p99UjCZMfj7lKKpB-QLOB_ZbKAJGY8XrtkZJhqRLC2rg", "content": "", "creation_timestamp": "2026-07-25T00:00:10.303195Z"}, {"uuid": "f114dae0-ff86-4763-becf-8f71d06ba6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94943", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9198\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ywh-jfellus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 09:42:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T00:00:10.949086Z"}, {"uuid": "0242d8dc-6c6b-4b1d-bb29-fbacc6b4cfe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "Telegram/MD-MwBd_W8uwTqsEvI7HPalRa1bGoxdlVd6D-EmkL4FhnPg", "content": "", "creation_timestamp": "2026-07-25T04:00:03.905820Z"}, {"uuid": "504fa5f8-4a36-42b8-b575-3237b1e8ca6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "Telegram/MD-MwBd_W8uwTqsEvI7HPalRa1bGoxdlVd6D-EmkL4FhnPg", "content": "", "creation_timestamp": "2026-07-26T00:00:46.828082Z"}, {"uuid": "535ac666-b23a-43e5-9179-8a14c6b872c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrkahmpsvr2l", "content": "\ud83d\udccc CVE-2026-9198 - IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with... https://www.cyberhub.blog/cves/CVE-2026-9198", "creation_timestamp": "2026-07-26T11:07:06.757666Z"}, {"uuid": "e9a5fc6d-cff6-4635-8d34-484d717c4933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-9198.yaml", "content": "", "creation_timestamp": "2026-07-28T06:00:05.666601Z"}, {"uuid": "bb1ac43a-0794-4274-b0a1-3bfd27537302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://t.me/GithubRedTeam/95481", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9198\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a samael0x4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 07:52:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIBM Langflow OSS 1.0.0 through 1.10.0 contains a remote code execution [RCE]\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T10:00:04.790078Z"}, {"uuid": "4eed411f-07e5-40f4-9621-b74f8f5741d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95481", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9198\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a samael0x4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 07:52:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIBM Langflow OSS 1.0.0 through 1.10.0 contains a remote code execution [RCE]\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T00:00:39.091782Z"}]}