RAGFlow

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 3, 2026
Last mentionedSep 29, 2026

Timeline

2 articles · newest first

Working Around the Compute Ceiling: Byte-Exact Memory in Galahad Makes LLM Reading a One-Time Cost LLM Reading a One-Time Cost

Galahad caches byte-exact KV state so repeated LLM document reading becomes a one-time cost.

Hugging Face daily papersSep 29, 20:00 UTC · Sep 29, 2026AI research5 · 3 reads

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

CISA added seven actively exploited vulnerabilities to its KEV catalog, including SonicWall SMA 1000 SSRF CVE-2026-83548, amid campaigns deploying reverse shells and crypto miners.

The Hacker NewsSep 3, 05:19 UTC · Sep 3, 2026Exploit / PoCExploitedCVE-2026-83548 CVE-2026-83549 CVE-2026-9586+104 · 1 read

Related CVEs

by mentions

CVE-2026-8232914%9.8
Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access
published Aug 28, 2026jfrog artifactoryKEVPoC ×2
CVE-2026-958619%9.3
Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition
published Jul 17, 2026Sangoma Switchvox SMB EditionKEVPoC
CVE-2026-59822<1%8.8
Unauthenticated MCP Endpoint Authentication Bypass in BerriAI LiteLLM
published Jul 8, 2026BerriAI LiteLLMKEV
CVE-2026-4227191%8.7
Command Injection in BerriAI LiteLLM AI Gateway Exploited in the Wild
published May 8, 2026BerriAI LiteLLM (proxy server / AI Gateway)KEV
CVE-2026-8354910%7.8
Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
published Sep 1, 2026SonicWall SMA1000 series appliances - Appliance Management Console (AMC)KEV
CVE-2026-4871070%6.5
HTTP Request Smuggling in Kludex Starlette (CVE-2026-48710)
published May 26, 2026Kludex (Encode) StarletteKEVPoC ×3
CVE-2026-247701%9.8
RAGFlow: In version 0.23.1 and possibly earlier versions, the MinerU parser contains a "Zip Slip" vulnerability, allowing an attacker to…
published Jan 27, 2026infiniflow ragflowPoC
CVE-2025-69286<1%8.9
RAGFlow: The use of an insecure key generation algorithm in the API key and beta (assistant/agent share auth) token generation process…
published Dec 31, 2025infiniflow ragflowPoC
CVE-2026-28797<1%8.7
RAGFlow: In versions 0.24.0 and prior, a Server-Side Template Injection (SSTI) vulnerability exists in RAGFlow's Agent workflow Text…
published Apr 3, 2026infiniflow ragflowPoC
CVE-2025-68700<1%8.6
RAGFlow: A low-privileged authenticated user (normal login account) can execute arbitrary system commands on the server host process via…
published Dec 31, 2025infiniflow ragflowPoC

Appears with

SGLangproduct · 1
vLLMproduct · 1
SMA 1000product · 1
llama.cppproduct · 1
SonicWallvendor · 1
CISAorganization · 1
LiteLLMproduct · 1
Sangomavendor · 1
watchTowrorganization · 1
Artifactoryproduct · 1
Wizorganization · 1
Qilinthreat actor · 1
Starlettevendor · 1
Berri LiteLLMvendor · 1
JFrogvendor · 1
Microsoftorganization · 1

Entities are extracted by the model from each article. First seen Sep 3, 2026, last mentioned Sep 29, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.