CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
2 advisories matched
2026-10-30
IXP Manager IDOR Vulnerability in API Key Management (CVE-2026-63338)
[Affected Scope] All IXP Manager installations prior to version 7.3.0.
[Impact] Authenticated attackers can view or modify API keys belonging to other users, potentially leading to full administrative takeover of the IXP infrastructure.
[Mitigation] Immediately upgrade IXP Manager to version 7.3.0 or later.
2026-06-23
Langflow /api/v1/responses IDOR Vulnerability Leading to Unauthorized Flow Execution (CVE-2026-55255)
[Affected Scope] Langflow versions prior to 1.9.1
[Impact] An authenticated attacker can execute arbitrary AI workflows belonging to other users by exploiting an IDOR vulnerability, potentially exposing sensitive data.
[Mitigation] Immediately upgrade Langflow to version 1.9.1 or higher, and restrict network access until patched.