gcdRadar
tags/Attack types

rce

22 live · 314 on record · last incident 2 days ago

Dec ’25records per month, by first reportNov ’26

Live22

  1. live
    Trained to betray: How post-training supply chain attacks hijack coding agents

    Research · since 12 Nov 2026

    Researchers demonstrated that poisoned datasets and checkpoints can compromise AI coding agents and trigger remote code execution. No real-world exploitation is reported.

    AI
  2. live9.2
    Windchill CVE-2026-126325: PTC patches critical Windchill and FlexPLM vulnerability

    Patch now · Disclosed · Patched · since 12 Nov 2026 · CVE-2026-126325

    PTC released patches for a critical deserialization flaw in its Windchill and FlexPLM products (CVE-2026-126325) that could allow remote code execution. The vulnerability has a CVSS v4 score of 9.2 and is considered critical.

    Do:Apply the released patches for Windchill and FlexPLM immediately

  3. live9.8
    Apache HTTP Server CVE-2026-119618: Critical Apache HTTP/2 Flaw Allows Remote Code Execution

    Patch now · Disclosed · Patched · since 11 Nov 2026 · CVE-2026-119618

    A critical remote code execution vulnerability affects the mod_http2 module in Apache HTTP Server versions 2.4.55 through 2.4.70. A patch has been released in version 2.4.71 to address the issue.

    Do:Update Apache HTTP Server to version 2.4.71.

  4. live
    Citrix Citrix and Ivanti release patches for critical and high‑severity vulnerabilities

    Patch now · Disclosed · Patched · since 11 Nov 2026 · updated 13 Nov 2026 · CVE-2026-120868

    Citrix and Ivanti disclosed multiple critical and high‑severity vulnerabilities that could allow attackers to tamper with certificate entries, execute code remotely, and compromise hosts. The vendors have issued patches to address the flaws.

    Do:Deploy the NetScaler patches covering CVE‑2026‑120868.

  5. live
    Git CVE-2026-111760: Git Recursive Clone RCE Flaw

    Patch now · Disclosed · Patched · since 10 Nov 2026 · updated 11 Nov 2026 · CVE-2026-111760

    A flaw in Git allows malicious repositories to execute code during recursive submodule clones due to integer truncation. The Git project released patches across multiple versions to address the vulnerability.

    Do:Update Git to version 2.56.1 or the corresponding patched version for your series.

  6. live
    SGLang SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents

    Breaches & attacks · Exploited · since 8 Nov 2026

    An attacker exploited an RCE vulnerability in SGLang to breach NEAR AI inference servers and access active requests. The incident resulted in data leakage affecting multiple user agents and requests.

    AI
  7. live10.0
    SAP NetWeaver SAP patches four CVSS 10.0 flaws in NetWeaver and Web Dispatcher

    Patch now · Disclosed · Patched · since 10 Nov 2026

    SAP fixed four critical unauthenticated remote code execution and related flaws in NetWeaver application servers and the Web Dispatcher. All four vulnerabilities carry the maximum CVSS score of 10.0 and were addressed in the monthly Security Patch Day.

    Do:Apply the November 2026 SAP security updates to the Gateway component.

  8. live
    Claude Vulnerability in Claude Document-Processing Tool Allows Code Execution

    Patch now · Exploited · since 9 Nov 2026

    Attackers can exploit a flaw in Claude's document-processing tool by supplying a crafted temporary file. This vulnerability enables the AI assistant to execute arbitrary code on the user's local machine.

    Do:Avoid opening untrusted documents or files with Claude tools until a patch or mitigation is provided.

    AI
  9. live
    GPUStack CVE-2026-102895: GPUStack Improper Authentication Vulnerability

    Patch now · Exploited · Partly patched · since 9 Nov 2026 · CVE-2026-102895

    GPUStack contains an improper authentication vulnerability enabling unauthenticated administrative access and code execution. The flaw has been added to CISA's KEV catalog following confirmed exploitation in the wild.

    Do:Apply mitigations in accordance with vendor instructions and CISA BOD 26-04 guidance.

    AI
  10. live
    QNAP NAS QNAP warns of Plex2Shell attacks exploiting Plex Media Server on NAS devices

    Patch now · Exploited · No patch yet · since 6 Nov 2026 · updated 9 Nov 2026

    Hackers are actively exploiting a vulnerability chain dubbed Plex2Shell to compromise QNAP network-attached storage devices. QNAP has urged users to update their Plex Media Server installations immediately.

    Do:Update Plex Media Server to the latest version available in the QNAP App Center.

  11. live
    Microsoft Paint CVE-2026-83844: Microsoft Paint RCE Flaw Fixed via Microsoft Store

    Patch now · Disclosed · Patched · since 6 Nov 2026 · updated 9 Nov 2026 · CVE-2026-83844

    A remote code execution flaw in Microsoft Paint allows attackers to run code over a network via an out-of-bounds read. Microsoft has released a patch available through the Microsoft Store rather than Windows Update.

    Do:Update Microsoft Paint via the Microsoft Store to version 11.2609.401.0 or later.

  12. live
    APT APT Package Manager Flaw Allows MitM Attackers to Execute Arbitrary Code

    Patch now · Disclosed · Patched · since 4 Nov 2026

    A vulnerability in the APT package manager for Debian and Ubuntu allows MitM attackers to swap verified packages during failed download retries. Exploitation results in arbitrary code execution running with root privileges.

    Do:Update APT package manager packages as provided by Debian and Ubuntu advisories.

  13. live
    Android CVE-2026-58868: Google Issues Patches for Critical Android Flaw

    Patch now · Disclosed · Patched · since 4 Nov 2026 · CVE-2026-58868

    Google disclosed a critical remote code execution vulnerability affecting Android versions 14 through 17. The issue requires no user interaction, and users must apply the November security patch level to receive the fix.

    Do:Update to security patch level 2026-11-01 or later.

  14. live8.1
    WordPress Core CVE-2026-119977: WordPress Core Time-of-Check Time-of-Use Race Condition Vulnerability

    Patch now · Exploited · Patched · since 3 Nov 2026 · updated 6 Nov 2026 · CVE-2026-119977

    WordPress core contains a time-of-check time-of-use race condition vulnerability allowing unauthenticated attackers to execute code via predictable staging paths during upgrades. CISA added the flaw to its known exploited vulnerabilities catalog following confirmed in-the-wild exploitation.

    Do:Block web access to the staging directory while applying WordPress updates to prevent race condition exploitation during the installation phase.

  15. live
    Android Framework Android November 2026 Updates Patch Critical Framework Flaw

    Patch now · Disclosed · Patched · since 3 Nov 2026

    Google released the November 2026 security updates for Android, addressing over 200 vulnerabilities including a critical remote code execution flaw in the Framework component. The critical vulnerability can be exploited without user interaction.

    Do:Update Android devices to the November 2026 security patch level.

  16. live10.0
    SIMATIC IoT2050 Advanced CVE-2026-58115: Siemens SIMATIC IoT2050 Flaw Exploited

    Patch now · Exploited · since 3 Nov 2026 · CVE-2026-58115

    Attackers are actively exploiting a maximum-severity missing authentication vulnerability in Siemens SIMATIC IoT2050 Advanced devices. The flaw allows unauthenticated remote attackers to execute arbitrary code and install backdoors.

    Do:Check vendor advisories for updates and restrict network access to vulnerable devices.

  17. live
    ChatGPT ChatGPT Share Link Vulnerability Allowed Code Execution and Data Access

    Patch now · Disclosed · Patched · since 18 Oct 2026

    A vulnerability in ChatGPT shared links allowed attackers to execute code within a victim's active session and read private chat logs. OpenAI patched the issue eight days after disclosure and rated it as high priority.

    Do:Ensure ChatGPT is updated to the latest version.

    AI
  18. live9.8
    Palo Alto Firewalls PHP2Shell Attacks Target Palo Alto Firewalls

    Patch now · Exploited · No patch yet · since 30 Oct 2026

    Threat actors are actively exploiting critical PHP vulnerabilities known as PHP2Shell to target Palo Alto firewalls. Millions of instances remain potentially exposed following more than a week of active attacks.

    Do:Apply available security patches or mitigation measures immediately.

  19. live10.0
    GitLab CVE-2026-97229: Attacker Attempted Exploitation of GitLab on Alpine Linux

    Patch now · Exploited · Patched · since 28 Oct 2026 · updated 2 Nov 2026 · CVE-2026-97229

    An attacker attempted to exploit a CVSS 10.0 remote code execution flaw in GitLab on Alpine Linux's server. Alpine reported no evidence of successful compromise following the attack.

    Do:Update GitLab to the latest patched version.

  20. live
    NetScaler ADC Critical RCE Vulnerabilities in Citrix NetScaler ADC and Gateway

    Patch now · Exploited · No patch yet · since 27 Sep 2026

    Citrix NetScaler ADC and Gateway contain critical unauthenticated remote code execution vulnerabilities that are actively exploited in the wild. Administrators must update affected software and perform a compromise assessment.

    Do:Update affected Citrix NetScaler ADC and Gateway software and run a compromise assessment.

  21. live
    Cisco Secure Email Gateway Critical Vulnerability in Cisco Secure Email Gateway Under Active Exploitation

    Patch now · Exploited · Patched · since 14 Oct 2026 · updated 3 Nov 2026

    Cisco published an advisory for a critical vulnerability in the Advanced Malware Protection feature of Cisco Secure Email Gateway. The flaw allows unauthenticated attackers to execute arbitrary commands with root privileges and is actively exploited.

    Do:Update the Content Scanner Tools package or upgrade Cisco AsyncOS Software to a fixed release.

  22. live9.2
    Brotli decoder Brotli Decoder Out-of-Bounds Write Triggers Multi-Platform Patching

    Patch now · Exploited · Partly patched · since 26 Oct 2026 · updated 4 Nov 2026 · CVE-2026-111497, CVE-2026-106072, CVE-2026-106069 +3

    An out-of-bounds write vulnerability in Google's Brotli decoder affects multiple runtimes including Node.js and Python packages. Vendors are issuing updates to address potential code execution risks.

    Do:Update PHP Windows packages to the latest patched releases.

Earlier292

  1. closed6.4
    fast-agent CVE-2026-102610: fast-agent Unauthenticated RCE Vulnerability

    Patch now · Disclosed · Patched · since 6 Nov 2026 · CVE-2026-102610

    AI
  2. closed
    Qwen3 Agentic Backdoors via Pretraining Poisoning

    Research · since 30 Oct 2026

    AI
  3. closed9.0
    Flowise CVE-2026-119978: Flowise Sandbox Escape Leads to OS Command Execution

    Patch now · Disclosed · since 30 Oct 2026 · CVE-2026-119978

    AI
  4. closed8.7
    n8n CVE-2026-119408: n8n remote code execution via LangChain Code nodes

    Patch now · Disclosed · Patched · since 30 Oct 2026 · CVE-2026-119408

    AI
  5. closed9.8
    Langflow CVE-2026-110186: IBM Langflow OSS Code Generation Vulnerability

    Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-110186

    AI
  6. closed9.9
    Langflow CVE-2026-107327: IBM Langflow OSS Remote Code Execution Vulnerability

    Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-107327

    AI
  7. closed9.9
    Langflow CVE-2026-107329: IBM Langflow OSS remote code execution vulnerability

    Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-107329

    AI
  8. closed9.9
    Langflow CVE-2026-107328: IBM Langflow OSS remote code execution vulnerability

    Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-107328

    AI
  9. closed9.8
    Langflow CVE-2026-104339: IBM Langflow OSS OS command injection vulnerability

    Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-104339

    AI
  10. closed8.8
    Langflow CVE-2026-110196: IBM Langflow OSS Remote Code Execution Vulnerability

    Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-110196

    AI
  11. closed9.8
    Linux Kernel CVE-2026-98432: Linux Kernel TCP Flaw Exploitable via AI-Authored Code

    Research · since 27 Oct 2026 · updated 3 Nov 2026 · CVE-2026-98432

    AI
  12. closed8.6
    Cisco ASA CVE-2026-76418: Cisco ASA and FTD VPN Flaw Actively Exploited

    Patch now · Exploited · Patched · since 29 Oct 2026 · CVE-2026-76418

  13. closed9.9
    Campaign Classic CVE-2026-104351: Adobe Fixes Critical Campaign Classic Code Injection Flaw

    Patch now · Disclosed · Patched · since 28 Oct 2026 · CVE-2026-104351

  14. closed9.8
    Oracle E-Business Suite CVE-2026-101767: Threat actors probe critical Oracle E-Business Suite RCE flaw

    Patch now · Exploited · Patched · since Oct 2026 (approx.) · updated 29 Oct 2026 · CVE-2026-101767

  15. closed
    Claude Anthropic demonstrates AI-assisted vulnerability discovery using Claude

    Research · since 27 Oct 2026 · updated 29 Oct 2026

    AI
  16. closed9.6
    Adobe Commerce CVE-2026-48356: Adobe Commerce and Magento unrestricted file upload exploited

    Patch now · Exploited · Patched · since 27 Oct 2026 · CVE-2026-48356

  17. closed9.0
    HPE Networking Products HPE Patches Dozens of Critical Flaws in Networking Products

    Patch now · Disclosed · Patched · since 27 Oct 2026

  18. closed
    GitLab Community Edition and Enterprise Edition Critical RCE Vulnerability in GitLab CE and EE

    Patch now · Disclosed · Patched · since 12 Oct 2026

  19. closed9.8
    Check Point Security Gateway Critical Vulnerabilities in Check Point Products

    Patch now · Disclosed · Patched · since 9 Sep 2026

  20. closed7.5
    vLLM CVE-2026-115912: vLLM shared-memory multimodal remote code execution

    Patch now · Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115912

    AI
  21. closed8.1
    vLLM CVE-2026-115915: vLLM insecure image parsing command execution vulnerability

    Patch now · Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115915

    AI
  22. closed9.8
    PHP CVE-2026-109618 and CVE-2026-109619: PHP flaws exploited in the wild

    Patch now · Exploited · Patched · since 26 Oct 2026 · updated 29 Oct 2026 · CVE-2026-109619, CVE-2026-109618

  23. closed
    OpenCode OpenCode Flaw Allows Malicious MCP Servers to Execute Code

    Patch now · Disclosed · since Sep 2026 (approx.)

    AI
  24. closed9.2
    vLLM CVE-2026-114053: vLLM Vulnerable to Remote Code Execution via mm_processor_kwargs.code_revision

    Patch now · Disclosed · Patched · since 21 Oct 2026 · updated 27 Oct 2026 · CVE-2026-114053

    AI
  25. closed9.8
    Langchain-Chatchat CVE-2026-75128: Langchain-Chatchat unauthenticated tool call endpoint allows arbitrary OS command execution

    Patch now · Disclosed · since 20 Oct 2026 · CVE-2026-75128

    AI
  26. closed8.8
    Visual Studio Copilot CVE-2026-103572: Remote code execution in Visual Studio Copilot

    Patch now · Disclosed · since 13 Oct 2026 · CVE-2026-103572

    AI
  27. closed9.4
    Ollama Ollama vulnerable to path traversal leading to remote code execution

    Patch now · Disclosed · since 8 Oct 2026 · CVE-2026-103663

    AI
  28. closed8.8
    Langflow CVE-2026-104335: IBM Langflow OSS access control vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-104335

    AI
  29. closed8.8
    Langflow CVE-2026-97678: IBM Langflow OSS input validation vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97678

    AI
  30. closed8.8
    Langflow CVE-2026-97673: IBM Langflow OSS input validation vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97673

    AI
  31. closed9.8
    Langflow CVE-2026-104334: IBM Langflow OSS remote code execution vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-104334

    AI
  32. closed8.5
    Langflow CVE-2026-93449: IBM Langflow OSS Arbitrary Code Execution

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93449

    AI
  33. closed8.8
    Langflow CVE-2026-88962: IBM Langflow OSS Arbitrary Code Execution

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-88962

    AI
  34. closed8.8
    Langflow CVE-2026-97655: IBM Langflow OSS Security Scanner Bypass Vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97655

    AI
  35. closed8.1
    Langflow CVE-2026-93445: IBM Langflow OSS Code Generation Vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93445

    AI
  36. closed9.8
    Langflow CVE-2026-93674: IBM Langflow OSS OS Command Execution Vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93674

    AI
  37. closed7.5
    Langflow CVE-2026-93443: IBM Langflow OSS Remote Code Execution Vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93443

    AI
  38. closed8.8
    Langflow CVE-2026-97676: IBM Langflow OSS remote code execution vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97676

    AI
  39. closed9.0
    Amazon Bedrock AgentCore CVE-2026-105812: Amazon Bedrock AgentCore Starter Toolkit Code Generation Flaw

    Patch now · Disclosed · since 6 Oct 2026 · CVE-2026-105812

    AI
  40. closed9.9
    Langflow Langflow Remote Code Execution via MCP Stdio Transport

    Patch now · Exploited · since 5 Oct 2026 · updated 15 Oct 2026 · CVE-2026-105740

    AI
  41. closed8.8
    Langflow CVE-2026-51886: Code injection vulnerability in Langflow

    Patch now · Disclosed · since 1 Oct 2026 · updated 5 Oct 2026 · CVE-2026-51886

    AI
  42. closed4.1
    Langflow CVE-2026-101861: Langflow Unsafe Eval Code Execution Vulnerability

    Patch now · Disclosed · since 28 Sep 2026 · CVE-2026-101861

    AI
  43. closed7.8
    NVIDIA NeMo CVE-2026-24239: NVIDIA NeMo Speech Remote Code Execution Vulnerability

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-24239

    AI
  44. closed7.8
    NVIDIA NeMo CVE-2026-65178: NVIDIA NeMo Vulnerability Allows Code Execution via Malicious Config

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-65178

    AI
  45. closed7.8
    NVIDIA NeMo CVE-2026-24267: Remote code execution in NVIDIA NeMo Speech

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-24267

    AI
  46. closed8.3
    MCP servers & tools CVE-2026-77271: Arbitrary file write and code execution in MCP Atlassian

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77271

    AI
  47. closed8.5
    ComfyUI + custom nodes CVE-2026-92816: ComfyUI path traversal leads to code execution

    Patch now · Disclosed · since 16 Sep 2026 · CVE-2026-92816

    AI
  48. closed9.0
    Flowise Flowise Validation Bypass Vulnerability in MCP Server Configuration

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-91932

    AI
  49. closed9.0
    Flowise CVE-2026-91931: Flowise custom MCP node remote code execution

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-91931

    AI
  50. closed9.6
    Langflow CVE-2026-12944: IBM Langflow OSS Arbitrary Code Execution

    Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-12944

    AI
  51. closed8.5
    vLLM CVE-2026-90553: vLLM Remote Code Execution Vulnerability

    Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90553

    AI
  52. closed9.8
    Flowise CVE-2026-52098: Flowise remote code execution vulnerability

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-52098

    AI
  53. closed9.8
    Langflow CVE-2026-81204: Critical code injection vulnerability in IBM Langflow OSS

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81204

    AI
  54. closed8.8
    Langflow CVE-2026-78569: Code execution vulnerability in IBM Langflow OSS security scanner

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-78569

    AI
  55. closed8.8
    Langflow CVE-2026-79742: Arbitrary code execution in IBM Langflow OSS due to blocklist flaw

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-79742

    AI
  56. closed8.8
    Langflow CVE-2026-78571: Remote code execution vulnerability in IBM Langflow OSS

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-78571

    AI
  57. closed8.8
    Langflow CVE-2026-81211: IBM Langflow OSS arbitrary Python code execution flaw

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81211

    AI
  58. closed8.8
    Langflow CVE-2026-81940: IBM Langflow OSS remote code execution vulnerability

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81940

    AI
  59. closed8.8
    Langflow CVE-2026-76059: IBM Langflow OSS Static Security Scanner Bypass

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-76059

    AI
  60. closed8.8
    Langflow IBM Langflow OSS vulnerable to arbitrary OS command execution

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81941

    AI
  61. closed9.2
    Gemini CLI CVE-2026-13745: Gemini CLI untrusted directory arbitrary code execution

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-13745

    AI
  62. closed8.8
    Langflow CVE-2026-19298: IBM Langflow OSS authorization bypass remote code execution

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-19298

    AI
  63. closed7.3
    OpenAI Codex OpenAI Codex CLI and Desktop vulnerable to arbitrary code execution via Git metadata

    Patch now · Disclosed · since 1 Sep 2026 · CVE-2026-19592

    AI
  64. closed7.8
    Hugging Face libraries Hugging Face Transformers Downloads Custom Code Before Consent

    Supply chain · Disclosed · since 1 Sep 2026 · CVE-2026-80047

    AI
  65. closed8.8
    Langflow CVE-2026-18729: IBM Langflow OSS code generation control vulnerability

    Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-18729

    AI
  66. closed9.8
    Langflow CVE-2026-19286: RCE vulnerability in IBM Langflow OSS A2A public endpoint

    Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-19286

    AI
  67. closed9.9
    Langflow CVE-2026-19295: Command execution vulnerability in IBM Langflow OSS

    Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-19295

    AI
  68. closed9.8
    gpt-researcher CVE-2026-37006: RCE vulnerability in gpt-researcher WebSocket endpoint

    Patch now · Disclosed · since 27 Aug 2026 · CVE-2026-37006

    AI
  69. closed8.1
    NVIDIA NemoClaw CVE-2026-65081: NVIDIA NemoClaw installation untrusted code execution

    Patch now · Disclosed · since 25 Aug 2026 · CVE-2026-65081

    AI
  70. closed9.9
    Flowise CVE-2026-73602: Sandbox escape and code execution in Flowise

    Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73602

    AI
  71. closed9.0
    Flowise CVE-2026-73601: Remote code execution in Flowise Custom MCP node

    Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73601

    AI
  72. closed9.0
    Flowise CVE-2026-73485: Code injection vulnerability in Flowise Airtable Agent node

    Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73485

    AI
  73. closed9.4
    Flowise CVE-2026-73483: Flowise NodeVM sandbox escape via puppeteer configuration

    Patch now · Disclosed · since 7 Oct 2026 · updated 7 Oct 2026 · CVE-2026-73483

    AI
  74. closed9.0
    Flowise CVE-2026-73487: Flowise prompt injection bypass leads to RCE and SSRF

    Patch now · Disclosed · since 7 Oct 2026 · updated 7 Oct 2026 · CVE-2026-73487

    AI
  75. closed7.7
    Cursor CVE-2026-73217: Sandbox escape vulnerability in Cursor IDE

    Patch now · Disclosed · since 11 Aug 2026 · CVE-2026-73217

    AI
  76. closed9.3
    MCP servers & tools CVE-2026-67531: FrontMCP Sandbox Escape Leading to RCE

    Patch now · Disclosed · since 6 Aug 2026 · CVE-2026-67531

    AI
  77. closed9.2
    llama.cpp Use-After-Free Vulnerability in llama.cpp llama-server

    Patch now · Disclosed · since 6 Aug 2026 · CVE-2026-43631

    AI
  78. closed7.2
    Langflow CVE-2026-17630: IBM Langflow OSS Arbitrary Code Execution

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-17630

    AI
  79. closed8.8
    Langflow CVE-2026-8182: Unauthenticated Remote Code Execution in Langflow OSS

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-8182

    AI
  80. closed8.8
    Langflow CVE-2026-17632: Arbitrary Code Execution Flaw in Langflow OSS AST Scanning

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-17632

    AI
  81. closed8.8
    Langflow CVE-2026-17623: Improper Validation in Langflow OSS Allows Arbitrary Command Execution

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-17623

    AI
  82. closed8.5
    Langflow CVE-2026-17624: Arbitrary code execution vulnerability in IBM Langflow OSS

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-17624

    AI
  83. closed7.2
    Langflow CVE-2026-17625: OS command execution vulnerability in IBM Langflow OSS

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-17625

    AI
  84. closed8.1
    Langflow IBM Langflow OSS executes unintended code during Agentic Assistant validation

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-9196

    AI
  85. closed8.8
    Langflow IBM Langflow OSS cryptographic weakness allows arbitrary code execution

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-9201

    AI
  86. closed9.4
    Flowise CVE-2026-69256: Flowise Remote Code Execution Vulnerability in CSVAgent

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69256

    AI
  87. closed9.4
    Flowise CVE-2026-69254: Flowise RCE via NodeVM Sandbox Escape in executeJavaScriptCode

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69254

    AI
  88. closed9.4
    Flowise CVE-2026-69264: Flowise RCE via CSVAgent data URI Python interpolation

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69264

    AI
  89. closed9.2
    Flowise CVE-2026-69255: Flowise CSV Agent Remote Code Execution via Pyodide Code Injection

    Patch now · Exploited · since 4 Aug 2026 · CVE-2026-69255

    AI
  90. closed9.5
    Flowise CVE-2026-70470: Flowise Pyodide Validator Unicode Homoglyph Bypass Leads to RCE

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70470

    AI
  91. closed9.0
    Flowise CVE-2026-69251: Flowise RCE via TypeORM DataSource

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69251

    AI
  92. closed9.0
    Flowise CVE-2026-69253: Flowise Sandbox Escape to Remote Code Execution

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69253

    AI
  93. closed9.4
    Flowise CVE-2026-69259: Flowise RCE via SQLite Record Manager Node

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69259

    AI
  94. closed8.7
    Flowise Flowise patch bypass allows unauthenticated RCE via npm_config_yes

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69263

    AI
  95. closed9.5
    Flowise Flowise CSV Agent prompt injection leads to remote code execution

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70477

    AI
  96. closed9.8
    ComfyUI + custom nodes CVE-2026-68771: ComfyUI Unsafe Deserialization in Training Dataset Node

    Patch now · Disclosed · since 31 Jul 2026 · CVE-2026-68771

    AI
  97. closed9.8
    Hugging Face libraries CVE-2026-68770: sentence-transformers local model loading remote code execution vulnerability

    Patch now · Disclosed · since 31 Jul 2026 · CVE-2026-68770

    AI
  98. closed9.9
    Langflow CVE-2026-12946: IBM Langflow OSS Remote Code Execution Vulnerability

    Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-12946

    AI
  99. closed9.8
    Langflow CVE-2026-12940: IBM Langflow OSS RCE via Environment Variable Injection

    Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-12940

    AI
  100. closed8.8
    Langflow CVE-2026-7755: IBM Langflow Remote Code Execution Vulnerability

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-7755

    AI
  101. closed9.8
    Langflow CVE-2026-9198: IBM Langflow OSS unauthenticated RCE vulnerability

    Patch now · Exploited · since 17 Jul 2026 · CVE-2026-9198

    AI
  102. closed8.1
    Langflow CVE-2026-13448: IBM Langflow OSS Public Flow Build RCE Vulnerability

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-13448

    AI
  103. closed9.9
    Langflow CVE-2026-8481: IBM Langflow OSS Code Validation RCE Vulnerability

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-8481

    AI
  104. closed9.9
    Langflow CVE-2026-8476: IBM Langflow OSS remote code execution via unsafe pickle deserialization

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-8476

    AI
  105. closed9.8
    Langflow CVE-2026-8505: Langflow Unauthenticated Flow Execution via Webhook Bypass

    Patch now · Disclosed · since 5 Oct 2026 · updated 5 Oct 2026 · CVE-2026-8505

    AI
  106. closed5.3
    Claude Code + SDKs CVE-2026-47751: Claude Code Action vulnerable to malicious MCP configuration

    Patch now · Disclosed · since 16 Jul 2026 · CVE-2026-47751

    AI
  107. closed9.8
    LiteLLM CVE-2026-30623: Remote code execution vulnerability in LiteLLM

    Patch now · Disclosed · since 15 Jul 2026 · CVE-2026-30623

    AI
  108. closed7.8
    GitHub Copilot CVE-2026-50510: Code execution vulnerability in GitHub Copilot

    Patch now · Disclosed · since 14 Jul 2026 · CVE-2026-50510

    AI
  109. closed2.1
    LiteLLM CVE-2026-59821: LiteLLM Custom Code Guardrails Bypass Sandboxing

    Patch now · Disclosed · since 22 Jul 2026 · updated 22 Jul 2026 · CVE-2026-59821

    AI
  110. closed9.8
    Langflow CVE-2026-7803: IBM Langflow OSS flow node arbitrary code execution

    Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-7803

    AI
  111. closed9.8
    Langflow CVE-2026-7871: IBM Langflow OSS arbitrary code execution vulnerability

    Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-7871

    AI
  112. closed9.9
    Langflow CVE-2026-7873: IBM Langflow OSS Remote Command Execution Vulnerability

    Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-7873

    AI
  113. closed10.0
    Langflow CVE-2026-10134: IBM Langflow OSS critical vulnerability enables secret exposure and remote code execution

    Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-10134

    AI
  114. closed9.8
    LLaMA-Factory CVE-2026-58116: LLaMA-Factory remote code execution via malicious model path

    Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-58116

    AI
  115. closed5.0
    Flowise CVE-2026-58057: Flowise custom MCP stdio environment variable bypass leads to RCE

    Patch now · Disclosed · since 28 Jun 2026 · CVE-2026-58057

    AI
  116. closed10.0
    Flowise Flowise Path Traversal File Overwrite Vulnerability CVE-2025-71338

    Patch now · Disclosed · since 25 Jun 2026 · CVE-2025-71338

    AI
  117. closed9.8
    Flowise CVE-2025-71336: Unsandboxed remote code execution in Flowise Custom MCP

    Patch now · Disclosed · Patched · since 25 Jun 2026 · updated 26 Jun 2026 · CVE-2025-71336

    AI
  118. closed9.9
    Langflow CVE-2026-10561: Langflow Unsandboxed PythonREPLComponent Execution

    Patch now · Disclosed · since 6 Oct 2026 · updated 6 Oct 2026 · CVE-2026-10561

    AI
  119. closed9.6
    Langflow CVE-2026-55447: Langflow BaseFileComponent arbitrary file read and RCE vulnerability

    Patch now · Disclosed · since 19 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55447

    AI
  120. closed7.5
    vLLM CVE-2026-41523: vLLM Security Check Bypass via assert Statement

    Patch now · Disclosed · since 16 Jun 2026 · updated 22 Jun 2026 · CVE-2026-41523

    AI
  121. closed9.6
    Langflow CVE-2026-48519: Langflow unauthenticated RCE in playgrounds

    Patch now · Disclosed · since 16 Jun 2026 · updated 23 Jun 2026 · CVE-2026-48519

    AI
  122. closed9.4
    ChromaDB CVE-2026-45833: ChromaDB code injection vulnerability

    Patch now · Disclosed · since 12 Jun 2026 · CVE-2026-45833

    AI
  123. closed8.0
    Hugging Face libraries HuggingFace transformers vulnerable to arbitrary code execution in LightGlue loader

    Patch now · Disclosed · since 3 Jun 2026 · CVE-2026-5241

    AI
  124. closed8.8
    vLLM vLLM Hardcoded Trust Remote Code Parameter Leads to RCE

    Patch now · Disclosed · since 28 May 2026 · CVE-2026-4944

    AI
  125. closed9.8
    Langflow CVE-2026-7524: RCE via symlink validation flaw in IBM Langflow OSS

    Patch now · Disclosed · since 27 May 2026 · CVE-2026-7524

    AI
  126. closed8.6
    claude-code-cache-fix CVE-2026-45136: Remote code execution in claude-code-cache-fix

    Patch now · Disclosed · since 27 May 2026 · CVE-2026-45136

    AI
  127. closed7.8
    Hugging Face libraries HuggingFace transformers vulnerable to remote code execution via config.json

    Patch now · Disclosed · since 26 May 2026 · CVE-2026-4372

    AI
  128. closed8.8
    vLLM CVE-2026-5817: Docker Model Runner vllm-metal arbitrary code execution vulnerability

    Patch now · Disclosed · since 22 May 2026 · CVE-2026-5817

    AI
  129. closed7.5
    Hugging Face libraries CVE-2026-45804: Diffusers remote code execution vulnerability

    Patch now · Disclosed · since 20 May 2026 · CVE-2026-45804

    AI
  130. closed
    Flowise Flowise MCP security bypass leads to RCE

    Patch now · Disclosed · since 14 May 2026

    AI
  131. closed9.4
    Flowise CVE-2026-46442: FlowiseAI NodeVM sandbox escape and RCE vulnerability

    Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46442

    AI
  132. closed8.5
    GitHub Copilot CVE-2026-45033: GitHub Copilot CLI Arbitrary Code Execution

    Patch now · Disclosed · since 13 May 2026 · CVE-2026-45033

    AI
  133. closed9.8
    Guardrails AI CVE-2026-31233: Guardrails AI code injection in Hub installer

    Supply chain · Disclosed · since 12 May 2026 · CVE-2026-31233

    AI
  134. closed8.8
    Hugging Face libraries Hugging Face Diffusers custom pipeline trust_remote_code bypass vulnerability

    Patch now · Disclosed · since 7 May 2026 · CVE-2026-44827

    AI
  135. closed8.8
    Hugging Face libraries Hugging Face Diffusers trust_remote_code bypass allows remote code execution

    Patch now · Disclosed · since 7 May 2026 · CVE-2026-44513

    AI
  136. closed8.8
    Langflow CVE-2026-6543: IBM Langflow Desktop arbitrary command execution

    Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-6543

    AI
  137. closed9.8
    Ollama CVE-2026-42249: Ollama for Windows update mechanism remote code execution

    Patch now · Disclosed · since 29 Apr 2026 · CVE-2026-42249

    AI
  138. closed10.0
    Gemini CLI CVE-2026-12537: Gemini CLI remote code execution vulnerability

    Patch now · Disclosed · since 24 Apr 2026 · updated 24 Jun 2026 · CVE-2026-12537

    AI
  139. closed9.8
    Flowise CVE-2026-41264: Flowise CSV Agent Prompt Injection RCE

    Patch now · Disclosed · since 21 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41264

    AI
  140. closed9.8
    Flowise CVE-2026-41265: Flowise Airtable Agent Remote Code Execution

    Patch now · Disclosed · since 18 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41265

    AI
  141. closed7.7
    Flowise CVE-2026-41268: Flowise Parameter Override Bypass Remote Command Execution

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41268

    AI
  142. closed8.3
    Flowise CVE-2026-41138: Flowise AirtableAgent Prompt Injection RCE

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41138

    AI
  143. closed9.4
    Flowise CVE-2026-41137: Flowise CSVAgent Code Injection RCE

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41137

    AI
  144. closed9.9
    Flowise CVE-2026-40933: Flowise Authenticated RCE via MCP Adapters

    Patch now · Disclosed · since 16 Apr 2026 · updated 21 Apr 2026 · CVE-2026-40933

    AI
  145. closed7.1
    Flowise CVE-2026-41269: Flowise file upload validation bypass leads to RCE

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41269

    AI
  146. closed8.6
    Langchain-Chatchat CVE-2026-30617: Remote Code Execution in LangChain-ChatChat MCP Server

    Patch now · Disclosed · since 15 Apr 2026 · CVE-2026-30617

    AI
  147. closed8.0
    Windsurf CVE-2026-30615: Prompt Injection and RCE in Windsurf AI Editor

    Patch now · Disclosed · since 15 Apr 2026 · CVE-2026-30615

    AI
  148. closed9.8
    OpenAI Codex CVE-2025-61260: OpenAI Codex CLI enables code execution via malicious MCP files

    Patch now · Disclosed · since 14 Apr 2026 · CVE-2025-61260

    AI
  149. closed8.8
    LiteLLM CVE-2026-40217: LiteLLM sandbox escape in custom-code guardrail

    Patch now · Disclosed · since 11 May 2026 · updated 11 May 2026 · CVE-2026-40217

    AI
  150. closed
    LiteLLM LiteLLM sandbox escape vulnerability in custom-code guardrail

    Patch now · Disclosed · since 10 Apr 2026

    AI
  151. closed6.5
    Hugging Face libraries CVE-2026-1839: HuggingFace Transformers Arbitrary Code Execution in Trainer

    Patch now · Disclosed · since 7 Apr 2026 · CVE-2026-1839

    AI
  152. closed8.7
    LiteLLM CVE-2026-35029: LiteLLM proxy configuration endpoint privilege escalation

    Patch now · Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-35029

    AI
  153. closed9.3
    Agno CVE-2026-35002: Agno Framework Eval Injection Vulnerability

    Patch now · Disclosed · Patched · since 2 Apr 2026 · updated 27 Oct 2026 · CVE-2026-35002

    AI
  154. closed9.8
    llama.cpp CVE-2026-34159: RCE Vulnerability in llama.cpp RPC Backend

    Patch now · Disclosed · since 1 Apr 2026 · CVE-2026-34159

    AI
  155. closed
    LangChain family RCE Vulnerabilities in LLM-Integrated Applications via Prompt Injection

    Research · since 27 Feb 2025

    AI
  156. closed8.8
    vLLM CVE-2026-27893: vLLM Hardcoded Trust Override Enables RCE

    Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-27893

    AI
  157. closed9.3
    Langflow CVE-2026-33873: Langflow Authenticated Code Execution in Agentic Assistant

    Patch now · Disclosed · since 26 Mar 2026 · updated 27 Mar 2026 · CVE-2026-33873

    AI
  158. closed7.8
    NVIDIA NeMo CVE-2026-24159: NVIDIA NeMo Framework remote code execution vulnerability

    Patch now · Disclosed · since 24 Mar 2026 · CVE-2026-24159

    AI
  159. closed7.8
    NVIDIA NeMo CVE-2026-24157: NVIDIA NeMo Framework checkpoint loading vulnerability allows RCE

    Patch now · Disclosed · since 24 Mar 2026 · CVE-2026-24157

    AI
  160. closed7.8
    llama.cpp CVE-2026-33298: Integer overflow in llama.cpp allows remote code execution

    Patch now · Disclosed · since 24 Mar 2026 · CVE-2026-33298

    AI
  161. closed9.8
    Langflow CVE-2026-33017: Unauthenticated RCE in Langflow Public Flow Build

    Patch now · Disclosed · since 17 Mar 2026 · updated 20 Mar 2026 · CVE-2026-33017

    AI
  162. closed9.6
    AnythingLLM CVE-2026-32626: XSS to RCE vulnerability in AnythingLLM desktop chat

    Patch now · Disclosed · since 16 Mar 2026 · CVE-2026-32626

    AI
  163. closed9.1
    Claude Code UI CVE-2026-31862: RCE vulnerability in Cloud CLI Claude Code UI

    Patch now · Disclosed · since 11 Mar 2026 · CVE-2026-31862

    AI
  164. closed9.8
    Langflow CVE-2026-27966: Langflow Remote Code Execution in CSV Agent

    Patch now · Disclosed · since 27 Feb 2026 · updated 27 Feb 2026 · CVE-2026-27966

    AI
  165. closed9.9
    Semantic Kernel RCE Vulnerability in Microsoft Semantic Kernel Search Plugin

    Research · since 7 May 2026 · updated 30 Jun 2026 · CVE-2026-26030

    AI
  166. closed7.8
    NVIDIA NeMo CVE-2025-33252: RCE vulnerability in NVIDIA NeMo Framework

    Patch now · Disclosed · since 18 Feb 2026 · CVE-2025-33252

    AI
  167. closed7.8
    NVIDIA NeMo CVE-2025-33251: RCE vulnerability in NVIDIA NeMo Framework

    Patch now · Disclosed · since 18 Feb 2026 · CVE-2025-33251

    AI
  168. closed7.8
    NVIDIA NeMo CVE-2025-33250: RCE vulnerability in NVIDIA NeMo Framework

    Patch now · Disclosed · since 18 Feb 2026 · CVE-2025-33250

    AI
  169. closed8.0
    NVIDIA NeMo CVE-2025-33245: NVIDIA NeMo Framework RCE Vulnerability

    Patch now · Disclosed · since 18 Feb 2026 · CVE-2025-33245

    AI
  170. closed7.8
    NVIDIA NeMo CVE-2025-33243: NVIDIA NeMo Framework Distributed RCE Vulnerability

    Patch now · Disclosed · since 18 Feb 2026 · CVE-2025-33243

    AI
  171. closed7.8
    NVIDIA NeMo CVE-2025-33241: NVIDIA NeMo Framework RCE Vulnerability

    Patch now · Disclosed · since 18 Feb 2026 · CVE-2025-33241

    AI
  172. closed7.8
    NVIDIA NeMo CVE-2025-33253: NVIDIA NeMo Framework RCE Vulnerability

    Patch now · Disclosed · since 18 Feb 2026 · CVE-2025-33253

    AI
  173. closed8.0
    GitHub Copilot CVE-2026-21523: Race condition in GitHub Copilot and Visual Studio

    Patch now · Disclosed · since 10 Feb 2026 · CVE-2026-21523

    AI
  174. closed8.8
    GitHub Copilot CVE-2026-21516: Remote Code Execution via Command Injection in GitHub Copilot

    Patch now · Disclosed · since 10 Feb 2026 · CVE-2026-21516

    AI
  175. closed8.8
    GitHub Copilot CVE-2026-21256: RCE via Command Injection in GitHub Copilot and Visual Studio

    Patch now · Disclosed · since 10 Feb 2026 · CVE-2026-21256

    AI
  176. closed8.8
    OpenClaw OpenClaw Remote Code Execution Vulnerability Demonstrated

    Research · since 1 Feb 2026 · CVE-2026-25253

    AI
  177. closed9.8
    vLLM CVE-2026-22778: vLLM remote code execution via video processing

    Patch now · Disclosed · since 2 Feb 2026 · CVE-2026-22778

    AI
  178. closed7.2
    AnythingLLM CVE-2026-24478: AnythingLLM Path Traversal Leading to RCE

    Patch now · Disclosed · since 27 Jan 2026 · CVE-2026-24478

    AI

114 more in the archive.