OpenCTI

Search everything

Mentions · 7d1
Mentions · 30d2
All mentions2
First seenOct 9, 2026
Last mentioned2d ago

Timeline

2 articles · newest first

Metasploit adds Langflow, OpenCTI, Grafana and MongoDB modules

Six Langflow modules cover an auth bypass and remote code execution from 1.0.0 through 1.11.4.

Rapid7 BlogOct 23, 15:38 UTC · 2d agoToolsCVE-2026-53959 CVE-2026-93680 CVE-2026-27960+74 · 1 read

Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules

Rapid7's Metasploit wrap-up adds 12 modules, including unauthenticated RCE for N-central, Langflow, LiteLLM, and dizqueTV.

Rapid7 BlogOct 9, 11:00 UTC · 16d agoToolsCVE-2026-22778 CVE-2000-0979 CVE-2026-86218+611 · 6 reads

Related CVEs

by mentions

CVE-2026-077063%9.8
Unauthenticated Remote Code Execution in Langflow validate Endpoint
published Jan 23, 2026LangflowKEV
CVE-2026-4227193%8.7
Command Injection in BerriAI LiteLLM AI Gateway Exploited in the Wild
published May 8, 2026BerriAI LiteLLM (proxy server / AI Gateway)KEV
CVE-2026-7873<1%9.9
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling…
published Jun 30, 2026langflow langflow
CVE-2026-076941%9.8
Unauthenticated Eval Injection RCE in Langflow (eval_custom_component_code)
published Jan 23, 2026langflowPoC
CVE-2024-926495%9.4
Authenticated Command Injection & Local File Inclusion in Grafana SQL Expressions
published Oct 18, 2024Grafana Labs Grafana
CVE-2024-58286<1%9.3
dizqueTV 1.5.3 contains a remote code execution vulnerability that allows attackers to inject arbitrary commands through the FFMPEG Executable Path settings
published Dec 11, 2025
CVE-2026-43503<1%8.8
Linux kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers…
published May 23, 2026linux linux kernel
CVE-2026-42249<1%7.7
Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers
published Apr 29, 2026ollama ollama
CVE-2026-39980<1%7.2
OpenCTI: The safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary…
published Apr 9, 2026citeum opencti
CVE-2000-09796.4
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers…
published Dec 19, 2000microsoft windows 95PoC

Appears with

Metasploitproduct · 2
Langflowproduct · 2
Rapid7organization · 2
Qualysorganization · 1
GitLabproduct · 1
LiteLLMproduct · 1
4gaBoardsproduct · 1
MongoDBproduct · 1
Grafanaproduct · 1
BerriAIvendor · 1
Qualysvendor · 1
Rapid7vendor · 1
Apache Solrproduct · 1
snapdproduct · 1
dizqueTVproduct · 1
Ollamaproduct · 1

Entities are extracted by the model from each article. First seen Oct 9, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.