2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
26 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-93675 Langflow | HIGH8.8 | Langflow | CWE-440 | 0.8% | Oct 7, 2026 |
| CVE-2026-93449 Langflow | HIGH8.5 | Langflow | CWE-94 Code Injection | 0.7% | Oct 7, 2026 |
| CVE-2026-93445 Langflow | HIGH8.1 | Langflow | CWE-94 Code Injection | 0.7% | Oct 7, 2026 |
| CVE-2026-93443 Langflow | HIGH7.5 | Langflow | CWE-94 Code Injection | 0.7% | Oct 7, 2026 |
| CVE-2026-19305 Langflow | HIGH8.6 | Langflow | CWE-918 Server Side Request Forgery | 0.3% | Sep 4, 2026 |
| CVE-2026-18904 Langflow | HIGH8.2 | Langflow | CWE-639 Insecure Direct Object Reference | 0.3% | Aug 28, 2026 |
| CVE-2026-9205 Langflow | HIGH7.4 | Langflow | CWE-338 | 0.3% | Aug 5, 2026 |
| CVE-2026-9196 Langflow | HIGH8.1 | Langflow | CWE-94 Code Injection | 0.5% | Aug 5, 2026 |
| CVE-2026-8470 Langflow | HIGH7.4 | Langflow | CWE-327 | 0.1% | Aug 5, 2026 |
| CVE-2026-8183 Langflow | HIGH7.7 | Langflow | CWE-22 Path Traversal | 0.6% | Aug 5, 2026 |
| CVE-2026-17633 Langflow | HIGH8.5 | Langflow | CWE-94 Code Injection | 0.7% | Aug 5, 2026 |
| CVE-2026-17624 Langflow | HIGH8.5 | Langflow | CWE-94 Code Injection | 0.7% | Aug 5, 2026 |
| CVE-2026-17625 Langflow | HIGH7.2 | Langflow | CWE-78 OS Command Injection | 0.8% | Aug 5, 2026 |
| CVE-2026-17630 Langflow | HIGH7.2 | Langflow | CWE-184 | 0.8% | Aug 5, 2026 |
| CVE-2026-12942 Langflow | HIGH7.5 | Langflow | CWE-22 Path Traversal | 0.6% | Jul 30, 2026 |
| CVE-2026-7872 Langflow | HIGH7.5 | Langflow | CWE-22 Path Traversal | 0.6% | Jul 17, 2026 |
| CVE-2026-13448 Langflow | HIGH8.1 | Langflow | CWE-184 | 0.7% | Jul 17, 2026 |
| CVE-2026-7663 Langflow | CRITICAL9.1 | Langflow | CWE-285 Improper Authorization | 0.5% | Jun 30, 2026 |
| CVE-2026-10560 Langflow | HIGH8.2 | Langflow | CWE-287 Improper Authentication | 0.5% | Jun 30, 2026 |
| CVE-2026-7787 Langflow | HIGH7.5 | Langflow | CWE-639 Insecure Direct Object Reference | 0.4% | Jun 11, 2026 |
| CVE-2026-7528 Langflow | HIGH7.1 | Langflow | CWE-400 Uncontrolled Resource Consumption | 0.4% | May 27, 2026 |
| CVE-2026-34046 Langflow | HIGH8.7 | Langflow | CWE-639 Insecure Direct Object Reference | 0.7% | Mar 27, 2026 |
| CVE-2026-33873 Langflow | CRITICAL9.3 | Langflow | CWE-94 Code Injection | 1.8% | Mar 27, 2026 |
| CVE-2026-33497 Langflow | HIGH8.7 | Langflow | CWE-22 Path Traversal | 2.0% | Mar 24, 2026 |
| CVE-2026-33017 Exploited Langflow | CRITICAL9.3 | Langflow | CWE-94 Code Injection | 24.8% | Mar 20, 2026 |
| CVE-2026-21445 Langflow | HIGH8.8 | Langflow | CWE-306 Missing Authentication | 33.3% | Jan 2, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications