[{"data":1,"prerenderedAt":52},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-18894":3},{"l":4,"details":25,"weitere":31,"indexierbar":50,"updated":51},{"cve":5,"status":6,"vendor":7,"product":7,"name":8,"added":9,"due":8,"ransomware":10,"published":9,"cwes":11,"cvss":13,"epss":18,"slug":21,"bereich":22,"schweregrad":23,"art":24,"produktLabel":7},"CVE-2026-18894","gemeldet","Langflow","","2026-10-29",false,[12],"CWE-94",{"version":14,"score":15,"severity":16,"vector":17},"3.1",9.8,"CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"score":19,"percentile":20},0.00523,0.44672,"cve-2026-18894","dev","kritisch","Einschleusen von Programmcode (Code Injection)",{"description":26,"refs":27},"IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are restricted to server-trusted component code.",[28],{"url":29,"host":30},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F7293016","ibm.com",[32,39,45],{"cve":33,"status":6,"produktLabel":34,"vendor":35,"product":36,"art":24,"bereich":22,"schweregrad":23,"score":37,"epss":-1,"added":38,"ransomware":10},"CVE-2026-120779","Microsoft Visual Studio Code","Microsoft","Visual Studio Code",9.6,"2026-11-10",{"cve":40,"status":6,"produktLabel":41,"vendor":8,"product":41,"art":42,"bereich":22,"schweregrad":23,"score":43,"epss":44,"added":38,"ransomware":10},"CVE-2026-125370","Kubero","Fest eingebauter Schlüssel für die Verschlüsselung",9.3,0.00683,{"cve":46,"status":6,"produktLabel":47,"vendor":8,"product":47,"art":48,"bereich":22,"schweregrad":23,"score":49,"epss":-1,"added":38,"ransomware":10},"CVE-2026-125758","Aptabase","Unsichere Standardeinstellung",9.1,true,"2026-11-12T13:05:11.283Z",1794488743550]