CWE-94
4 articles
Langflow CVE-2026-93680 and 32 more bugs. Strangers can get into 1.12.x servers, so upgrade to 1.13.0
How to fix CVE-2026-93680: upgrade Langflow to 1.13.0. IBM published 33 Langflow CVEs on Oct 29, 2026. Two 9.8s through 1.12.8 need no login, Metasploit already has a module for the auth bypass, and the upgrade can lock you out unless you set a superuser password first.
HOL GuardExploited PAN-OS bug gives attackers root on Palo Alto firewalls, now on CISA KEV (CVE-2026-0322)
How to fix CVE-2026-0322: upgrade PAN-OS to the hotfix for your train (12.2.4, 12.1.10-h2, 11.2.13-h3, 11.1.16-h3, 10.2.18-h12 and others). Attackers are using this admin-interface bug for root on Palo Alto firewalls and Panorama; CISA due date Oct 17.
HOL GuardUnsloth RCE: malicious Hugging Face model config.json injects code
How to fix CVE-2026-93348: upgrade unsloth-zoo to 2026.8.14+ and unsloth to 2026.8.20+
HOL GuardSharePoint code injection hits CISA KEV
How to fix CVE-2026-65660: upgrade SharePoint Server to the August 2026 fixed builds (SE 16.0.19725.20522 / 2019 16.0.10417.20198 / 2016 16.0.5565.1001)
HOL GuardRelated topics
Keep exploring
The engineering desk continues across the ecosystem: security research on shipping agents safely, and plugins that put the standards to work.