CVE-2026-58138 · conductor-oss conductor
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,897 matching vulnerabilities · Page 142 of 778
conductor-oss
IBM
CVE-2026-13773 · IBM WebSphere Extreme Scale
IBM WebSphere eXtreme Scale is affected by server side request forgery when ORB is used as Transport Protocol
CVE-2026-7873 · IBM Langflow OSS
Code Injection Vulnerability in Code Validation Endpoint
CVE-2026-10134 · IBM Langflow OSS
Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows
CVE-2026-10109 · IBM Db2
IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling
CVE-2026-7803 · IBM Langflow OSS
Flow Validation Bypass via Empty Component Type Field
CVE-2026-7871 · IBM Langflow OSS
Insecure Deserialization in Redis Cache Backend
CVE-2026-13772 · IBM WebSphere Extreme Scale
IBM WebSphere eXtreme Scale's OQL is affected by remote code execution
CVE-2026-7663 · IBM Langflow OSS
Unauthenticated Cross-User MCP Resource Access and Tool Execution via Streamable Transport Authorization Bypass
CVE-2026-11541 · IBM CICS Transaction Gateway for Multiplatforms
Inconsistent Interpretation of HTTP Requests in CICS Transaction Gateway for Multiplatforms.
CVE-2026-10560 · IBM Langflow OSS
Unauthenticated Access to Private Flow Build Events and Cancellation in Langflow OSS
CVE-2026-11546 · IBM WebSphere Application Server - Liberty
IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability
CVE-2026-11714 · IBM WebSphere Application Server - Liberty
IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability
CVE-2026-10140 · IBM Langflow OSS
Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem
CVE-2026-11708 · IBM WebSphere Application Server
IBM WebSphere Application Server is affected by a cross-site scripting vulnerability
CVE-2026-11712 · IBM WebSphere Application Server
IBM WebSphere Application Server is affected by a cross-site scripting vulnerability
CVE-2026-13449 · IBM Business Automation Manager Open Editions
XXE attack in IBM Business Automation Manager Open Editions
CVE-2026-7874 · IBM Langflow OSS
Weak Cryptographic Key Derivation Exposed All Stored Credentials
ThreeMammals
Grav
neuml
woodpecker-ci
Flowise
StoneFly
CVE-2026-55721 · StoneFly Storage Concentrator
SQL Injection in StoneFly Storage Concentrator
Crawl4AI
CVE-2026-13780 · Google Chrome
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised…
CVE-2026-13781 · Google Chrome
Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised…
CVE-2026-13846 · Google Chrome
Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process t…
CVE-2026-13776 · Google Chrome
Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to pote…
CVE-2026-13782 · Google Chrome
Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to p…
CVE-2026-13798 · Google Chrome
Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer pro…
CVE-2026-13859 · Google Chrome
Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox…
CVE-2026-13878 · Google Chrome
Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer pro…
CVE-2026-13775 · Google Chrome
Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to poten…
CVE-2026-13783 · Google Chrome
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI g…
CVE-2026-13784 · Google Chrome
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI g…
CVE-2026-13785 · Google Chrome
Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in sp…
CVE-2026-13789 · Google Chrome
Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to poten…
CVE-2026-13792 · Google Chrome
Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox esca…
CVE-2026-13796 · Google Chrome
Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process…
CVE-2026-13797 · Google Chrome
Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compro…
CVE-2026-13843 · Google Chrome
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who…
CVE-2026-13853 · Google Chrome
Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
CVE-2026-13854 · Google Chrome
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer proce…
CVE-2026-13861 · Google Chrome
Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to pote…
CVE-2026-13869 · Google Chrome
Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer pr…
CVE-2026-13851 · Google Chrome
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker…
CVE-2026-13852 · Google Chrome
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker…
CVE-2026-13872 · Google Chrome