CVE ID :CVE-2026-77937 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying…
CVE-2026-77936 – Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access
CVE ID :CVE-2026-77936 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added…
CVE-2026-77935 – Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
CVE ID :CVE-2026-77935 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to…
CVE-2026-77934 – Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
CVE ID :CVE-2026-77934 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by…
CVE-2026-77933 – DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment
CVE ID :CVE-2026-77933 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and…
CVE-2026-105453 – IBM Sterling Connect:Direct for Unix Improper Privilege Management
CVE ID :CVE-2026-105453 Published : Oct. 19, 2026, 11:56 p.m. | 9 minutes ago Description :IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to…
CVE-2026-107366 – Langflow OSS Authorization Bypass Through User-Controlled Key
CVE ID :CVE-2026-107366 Published : Oct. 19, 2026, 11:49 p.m. | 15 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user…
CVE-2026-107400 – Security Vulnerability identified in IBM TRIRIGA – GWT Mock Authentication
CVE ID :CVE-2026-107400 Published : Oct. 19, 2026, 11:46 p.m. | 18 minutes ago Description :IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due…
CVE-2026-109126 – IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials
CVE ID :CVE-2026-109126 Published : Oct. 19, 2026, 11:43 p.m. | 22 minutes ago Description :IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker…
CVE-2026-112371 – H3C Magic NX15 RPC esps write code injection
CVE ID :CVE-2026-112371 Published : Oct. 19, 2026, 11:17 p.m. | 47 minutes ago Description :A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps…