LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

Langflow CVEs

Every Langflow vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.

4Tracked CVEs 3Known exploited 2Critical 9.0+ 0Covered this week

All Known exploited Critical High This week

4 CVEs EPSSCoverage

9.3CVSS 4.0 CVE-2026-33017 Exploited Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint Langflow EPSS 96% 3 stories 4 months ago 9.8CVSS 3.1 CVE-2025-3248 Exploited Ransomware Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code Langflow EPSS >99.9% 4 stories 4 months ago 8.8CVSS 3.1 CVE-2026-5027 Langflow - Path Traversal Arbitrary File Write via upload_user_file Langflow EPSS 41% 1 story 4 months ago 8.4CVSS 3.1 CVE-2026-55255 Exploited Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow Langflow EPSS 0.89% 1 story 4 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.