
Metasploit adds Langflow, OpenCTI, Grafana and MongoDB modules
Six Langflow modules cover an auth bypass and remote code execution from 1.0.0 through 1.11.4.
6 stories, newest first · one card per story

Six Langflow modules cover an auth bypass and remote code execution from 1.0.0 through 1.11.4.
Custom entities and agent runtime context are generally available; several monitoring features remain in preview.
A Metasploit commit clarifies version handling for the Grafana CVE-2024-9264 module.

Canada's Cyber Centre warns Grafana OSS versions 12.3.0 through 13.2.1 are affected by a Geomap MapLibre XSS vulnerability; administrators should apply updates.

DeepSeek V4.1 Flash achieves 11/11 code executions on Enclave's AI hacking benchmark for $4.65 across Grafana, Jenkins, and Nextcloud targets.
Canada's Cyber Centre warned that Grafana Alloy versions through 1.18.1 are affected by CVE-2026-19516 and urged users to apply available updates.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views