CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
N-able N-central Authentication Bypass and Account Takeover Vulnerability (CVE-2026-18577) Security Advisory
[Affected Scope] N-able N-central versions up to and including 2026.3.1
[Impact] Attackers can bypass authentication and achieve full account takeover by exploiting an incomplete patch for CVE-2026-18556
[Mitigation] Immediately upgrade to N-central 2026.3 Hotfix 1 or later, and restrict external access to the management interface until patched
Langflow CORS Misconfiguration and Token Hijacking leading to Remote Code Execution (CVE-2025-34291)
[Affected Scope] Langflow versions up to and including 1.6.9
[Impact] Attackers can hijack victim sessions to take over accounts and execute arbitrary code via built-in code execution features, leading to full system compromise
[Mitigation] Upgrade Langflow to the latest patched version, restrict CORS configurations, and update refresh token cookie attributes to Lax/Strict