Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-01 07:22 UTC
Importiert: 2026-09-07 12:53 UTC
CVSS: 9.8
Quelle-ID: thn_global
uid_hash: 83ff379e679481407930664cc764bc86dd65cf8aa63c8730c58b9e94403d33b0

The Hacker News

Inhalt

Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.

The vulnerabilities in question are listed below -

CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user. CVE-2026-66066 aka

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-0768	CRITICAL	9.8	CRITICAL	9.8			2026-01-23
CVE-2026-66066	CRITICAL	9.8	CRITICAL	9.5			2026-07-30

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste