IBM Langflow Code Injection Vulnerability (CVE-2026-9198)

2 karet z 2 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-9198

KEV ✓ EPSS 0.29 EPSS k 18. 10. 2026 náprava do 7. 8. 2026

Hodnocení závažnosti

9.8 CVSS 3.1 ibm

útok odkudkoli z internetu bez přípravy bez přihlášení bez zásahu uživatele

dopad plný únik dat úplná změna dat úplný výpadek

přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

cve.org · NVD

4. 8. 2026

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9198 IBM Langflow Code Injection Vulnerability CVE-2026-18556 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-34486 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the…

KEV ✓ EPSS 0.29 CVE-2026-18556 CVE-2026-34486 CVE-2026-9198 IBM N-able Apache veřejná správa US

4. 8. 2026 · CISA Advisories · CISA Adds Three Known Exploited Vulnerabilities to Catalog

4. 8. 2026

IBM Langflow Code Injection Vulnerability (CVE-2026-9198)

CISA added CVE-2026-9198 to the Known Exploited Vulnerabilities catalog. Affected product: IBM Langflow. Remediation due date: 2026-08-07.

KEV ✓ EPSS 0.29 CVE-2026-9198 IBM US

4. 8. 2026 · CISA KEV · IBM Langflow Code Injection Vulnerability (CVE-2026-9198)