// day
Jul 21, 2026
2 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Jul 21, 2026
Langflow Langflow: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
› Langflow Langflow
Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. Added to CISA KEV on 2026-07-21.
CVE-2026-0770 - highclosedpatchedclosed Jul 21, 2026
WordPress Core: WordPress Core SQL Injection Vulnerability
› WordPress Core
WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations. CISA added CVE-2026-60137, CVE-2026-63030 to the Known Exploited Vulnerabilities catalog on 2026-07-21 based on evidence of active exploitation.
CVE-2026-60137CVE-2026-63030
