Security1 hSeptember 27, 2026, 02:20

IBM patches 12 flaws in MQ and Langflow OSS, three rated 9.8

IBM released fixes for twelve vulnerabilities in IBM MQ, MQ Appliance and Langflow OSS; three Langflow flaws (CVE-2026-79724, CVE-2026-85025, CVE-2026-81204) carry a CVSS score of 9.8 and need no authentication, allowing arbitrary code and OS command execution. ZoomEye found 18,550 Langflow instances exposed online.

DEV Community

Open source

IBM patches 12 flaws in MQ and Langflow OSS, three rated 9.8

Three Langflow OSS flaws rated 9.8 require no authentication
Remaining Langflow issues rated 8.8 need an authenticated session
ZoomEye found 18,550 Langflow instances online on September 23
Main risk is exposure of credentials to models, datastores and APIs

#IBM#Langflow

CVE-2026-17633: Authenticated RCE in Langflow OSS via /api/v1/custom_component

Security

CVE-2026-81657 in IBM Guardium: deserialization flaw rated 9.8

Security

Langflow CVE-2026-12944: Scanner Blocklist Gap Leads to Root Code Execution

Security

IBM patches 12 flaws in MQ and Langflow OSS, three rated 9.8

CVE-2026-17633: Authenticated RCE in Langflow OSS via /api/v1/custom_component

CVE-2026-81657 in IBM Guardium: deserialization flaw rated 9.8

Langflow CVE-2026-12944: Scanner Blocklist Gap Leads to Root Code Execution

F5 patches exploited CVSS 9.8 flaw in BIG-IP APM