https://pwn.watch/t/ibm Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 04 Aug 2026 00:00:00 GMT https://pwn.watch/i/ibm-langflow-cve-2026-9198 https://pwn.watch/i/ibm-langflow-cve-2026-9198 Tue, 04 Aug 2026 00:00:00 GMT high <p>Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. Added to CISA KEV on 2026-08-04.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2026-08-04: CISA added CVE-2026-9198 to the KEV catalog (due 2026-08-07).</li></ul> <p><strong>CVEs:</strong> CVE-2026-9198</p> https://pwn.watch/i/ibm-aspera-faspex-cve-2022-47986 https://pwn.watch/i/ibm-aspera-faspex-cve-2022-47986 Tue, 21 Feb 2023 00:00:00 GMT critical <p>IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw. Added to CISA KEV on 2023-02-21. CISA lists known use in ransomware campaigns.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2023-02-21: CISA added CVE-2022-47986 to the KEV catalog (due 2023-03-14).</li></ul> <p><strong>CVEs:</strong> CVE-2022-47986</p>