CVE Vulnerabilities - 17 July 2026

A vulnerability in PrestaShop's ps_facetedsearch module allows an attacker to execute code on your server without needing a login. This can happen if you're using a vulnerable version of the module an...

IBM Langflow OSS versions 1.0.0 through 1.10.0 have a security issue that could allow an attacker to write files to unintended locations on your server. This could happen if an attacker controls an ex...

Authenticated users on IBM Langflow OSS can gain superuser access and execute system commands, putting sensitive data at risk. This is a critical issue that requires immediate attention from administr...

IBM Langflow OSS versions 1.0.0 through 1.10.0 contain a critical security flaw in their disk caching system. This means an attacker could potentially take control of the entire system if they can man...

IBM Langflow versions 1.0.0 to 1.10.0 have a security flaw that allows attackers to inject malicious code into the system. This can happen when a user with permission to create flows embeds malicious ...

IBM Langflow's code validation API allows users to execute their own Python code, potentially running malicious system commands with the server's full privileges. This affects versions 1.0.0 through 1...

IBM Langflow's open-source version contains a serious security risk: its use of hard-coded passwords and keys. This means that anyone with access to the software can see these sensitive credentials, w...

CodeIgniter4, a popular web development framework, has a security issue that allows malicious PHP files to be uploaded. This can happen if your application allows users to upload files and relies on t...

IBM Langflow OSS versions 1.0.0 through 1.10.0 have a security issue where anyone can trigger any flow without needing a password. This could allow an attacker to execute malicious code. To stay safe,...

Certain versions of WordPress are vulnerable to a remote code execution attack through its REST API. This can happen if an attacker exploits a SQL injection flaw in the way WordPress handles certain q...

IBM Langflow OSS versions 1.0.0 to 1.10.0 have a security issue that allows unauthorized access to administrative features. This can happen if a network attacker uses a feature called auto-login. To p...

IBM Langflow users are at risk of remote code execution due to a security flaw that allows attackers to create new user accounts without authentication. This could allow an attacker to gain full contr...

IBM Langflow's default settings allow unauthorized users to run code on the system, posing a significant risk. This issue affects versions 1.0.0 through 1.10.0 of the software. To protect your system,...

The GisLab Laboratory Management System is vulnerable to SQL injection attacks, which could allow unauthorized access to sensitive data. This affects versions 1.4.03 and later, up to 08072026. Users s...

The Vimesoft Enterprise Video Platform has a weakness in its password change process. This means that a malicious user could potentially change someone else's password without needing to know the curr...

The Libpve Storage Perl library, used by Proxmox servers, contains a vulnerability that allows attackers to inject malicious code. This could lead to unauthorized access or data theft. Users should up...

A security update is needed for hplip printer drivers to fix a previously incomplete patch. This affects HP printer users, who should update their drivers to prevent potential security risks. Update y...

The rootio-zlib package on Root:Debian:11 has a vulnerability that could allow attackers to access sensitive data. This is a serious issue because it could compromise the security of your system. To p...

A security patch has been released for the Rootio-Imagemagick package on Debian 11. This patch fixes a vulnerability that could allow an attacker to run unauthorized code on a system. We recommend upd...

The rootio-python3.9 package had a security issue that allowed an attacker to run malicious code without being authenticated. Root has released a patch to fix this issue, and it's essential to update ...

A security patch has been released for rootio-perl, a Perl library used by the Root framework. This patch fixes a vulnerability that could allow unauthorized access to system settings. Root users shou...

The AIWU plugin for WordPress doesn't properly check user access, allowing attackers to gain administrator privileges without logging in. This can lead to sensitive tasks being performed without permi...

The Aimogen Pro plugin for WordPress allows unauthorized users to create admin accounts and gain full control of the website. This is a serious security risk because an attacker could use this to take...

HP printer drivers contain a security issue that could allow an attacker to gain unauthorized access. This affects HP printers and multi-function peripherals. You should update the drivers to fix the ...

A security issue in Bricksforge plugin for WordPress allows attackers to create new admin accounts without a password. This can happen if a public form is configured to allow user registration. To fix...