Skip to content

Exploited: 178

LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

7.5

CVE-2026-110245Fix available

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication.

Langflow Langflow2026-10-29 16:17 UTC1 min readRead in

Summary

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication.

Remediation

Inventory every Langflow Langflow deployment, including staging.
Upgrade Langflow Langflow to 1.12.5.
Confirm the running version after the upgrade.

References

Patchhttps://www.ibm.com/support/pages/node/7293016

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected versions

Version	Fixed in
1.0.0 – <1.12.5	1.12.5

Weakness

CWE-287

Exploit probability (EPSS)

0.4%

Timeline

2026-10-29Publicly disclosed

Sources

NVD