Advisory explorer

4 of 4 advisories

Quick views

Filter by signal0 active

August 2026

Aug 6

GHSA-vwf4-m7j8-wcjfActive exploitation

Metabase says its critical zero-day was actively exploited

An unauthenticated SQL-injection path can lead to Metabase administrator access, exposed database credentials, and data theft.

AnalyticsData platformsSQL injection

July 2026

Jul 27

CVE-2026-63077Known exploited

TeamCity unauthenticated RCE is in CISA KEV

CISA reports that unsafe deserialization in the TeamCity agent polling protocol can permit unauthenticated remote code execution.

CI/CDDeveloper infrastructureUnsafe deserialization

Jul 2

CVE-2026-9198Known exploited

Unauthenticated Langflow code injection is in CISA KEV

CISA says default Langflow deployments may permit unauthenticated attackers to achieve full remote code execution.

AIAgent workflowsCode injection

June 2026

June 2026

CVE-2026-8037Known exploited

Progress LoadMaster command injection is in CISA KEV

CISA says an unauthenticated attacker can execute arbitrary commands through unsanitized input in multiple LoadMaster command endpoints.

InfrastructureLoad balancersCommand injection

Published	Advisory	Technology	Signal	Priority
Aug 6, 2026	Metabase Metabase`GHSA-vwf4-m7j8-wcjf`	Analytics, Data platforms	Active exploitation	Act now
Jul 27, 2026	JetBrains TeamCity`CVE-2026-63077`	CI/CD, Developer infrastructure	Known exploited	Act now
Jul 2, 2026	IBM Langflow`CVE-2026-9198`	AI, Agent workflows	Known exploited	Act now
June 2026	Progress LoadMaster`CVE-2026-8037`	Infrastructure, Load balancers	Known exploited	Act now

Independent summaries. Verify affected versions and fixes with the linked vendor guidance.