improper-authentication
1 live · 2 on record · last incident 5 days ago
Live1
- liveGPUStack CVE-2026-102895: GPUStack Improper Authentication Vulnerability
Patch now · Exploited · Partly patched · since 9 Nov 2026 · CVE-2026-102895
GPUStack contains an improper authentication vulnerability enabling unauthenticated administrative access and code execution. The flaw has been added to CISA's KEV catalog following confirmed exploitation in the wild.
Do:Apply mitigations in accordance with vendor instructions and CISA BOD 26-04 guidance.
AI
Earlier1
- closed8.2Langflow CVE-2026-18891: IBM Langflow OSS improper authentication vulnerability
Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-18891
AI