[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":48,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":55,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":61,"vulnerability-29800":68},[4,15,21,27,33,39],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Network Scanner","compliance-pages-launch-network-scanner","Scheduled scans are the spine of every compliance framework. Are you audit-ready?","https:\u002F\u002Fpentest-tools.com\u002Fusage\u002Fcompliance",false,[11],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Get compliance evidence","secondary","compliance-pages-launch",{"title":16,"slug":17,"text":18,"link":8,"external":9,"targets":19,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Website Scanner","compliance-pages-launch-website-scanner","Authenticated web-app scans show up in SOC 2, NIS2, and CRA Annex I. See why this is crucial for the business.",[20],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner",{"title":22,"slug":23,"text":24,"link":8,"external":9,"targets":25,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Advanced Pentest Reporting","compliance-pages-launch-reporting","Editable DOCX. Immutable PDF. JSON for the GRC tool. See why these formats are on every auditor's checklist.",[26],"\u002Ffeatures\u002Fpentest-reporting",{"title":28,"slug":29,"text":30,"link":8,"external":9,"targets":31,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Integrations","compliance-pages-launch-integrations","Vanta, Jira, webhooks - they all route back to DORA, NIS2, SOC 2, ISO 27001, CRA. See why this is crucial for the business.",[32],"\u002Ffeatures\u002Fintegrations",{"title":34,"slug":35,"text":36,"link":8,"external":9,"targets":37,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Sniper","compliance-pages-launch-sniper","Five compliance framework pages now reference Sniper as the source of validated exploitability evidence. See them all.",[38],"\u002Fexploit-helpers\u002Fsniper",{"title":40,"slug":41,"text":42,"link":43,"external":44,"targets":45,"cta":47,"variant":13,"campaign_id":41},"Office Hours #13 - Reducing tool sprawl","office-hours-13","[Live Office Hours, Wed Oct 14] How to consolidate your security testing stack without the lock-in","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_m_Won6d_SzOQ-gYhCdXU_A",true,[46],"\u002F","Save your spot",["Island",49],{"key":50,"params":51,"result":53},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":52},"{}",{"head":54},{},["Island",56],{"key":57,"params":58,"result":59},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":52},{"head":60},{},["Island",62],{"key":63,"params":64,"result":66},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":65},"{\"text-color\":\"gray\"}",{"head":67},{},{"id":69,"detectable_with":70,"vuln_details":77,"vuln_id":95,"name":96,"published":97,"updated":78},29800,{"tool":71,"engine":74},{"id":72,"name":73},1,"Network Scanner",{"id":75,"name":76},2,"Nuclei",{"id":69,"codename":78,"description":78,"severity":79,"risk_description":80,"public_description":81,"public_recommendation":82,"recommendation":78,"references":83,"cvssv3":87,"epss_score":88,"epss_percentile":89,"cve":90,"in_cisa_catalog":9,"date":92,"software_type":78,"vendor":93,"product":94,"ptt_exploit_capabilities":78},null,"critical","The risk exists that a remote unauthenticated attacker can fully compromise the server to steal confidential information, install ransomware, or pivot to the internal network.","Langflow OSS 1.0.0 through 1.12.2 is vulnerable to unauthenticated remote code execution via the POST \u002Fapi\u002Fv1\u002Fvalidate\u002Fcode endpoint, which calls importlib.import_module() on user-supplied import statements, executing module top-level code instead of merely validating syntax. Combined with the default LANGFLOW_AUTO_LOGIN=true configuration (which issues a superuser JWT from GET \u002Fapi\u002Fv1\u002Fauto_login with no credentials) and the custom_component exec() sink (POST \u002Fapi\u002Fv1\u002Fcustom_component, which can plant arbitrary Python modules into site-packages), a remote unauthenticated attacker achieves arbitrary OS command execution. Fixed in 1.12.3 by replacing importlib.import_module() with importlib.util.find_spec() (commit 461506ac2f).","Upgrade to Langflow OSS 1.12.3 or later. As a temporary mitigation, set LANGFLOW_AUTO_LOGIN=false with strong superuser credentials and restrict network access to the Langflow instance.",[84,85,86],"https:\u002F\u002Fwww.pruva.dev\u002Freproductions\u002FREPRO-2026-00381","https:\u002F\u002Fgithub.com\u002Flangflow-ai\u002Flangflow","https:\u002F\u002Fgithub.com\u002Flangflow-ai\u002Flangflow\u002Fcommit\u002F461506ac2f38f70a994b5140572b876448c11e4c",9.8,0.02662,0.8531,[91],"CVE-2026-93674","2026-10-07T00:00:00Z","langflow-ai","langflow","NETSCAN-NUCLEI-CVE-CVE-2026-93674","Langflow OSS \u003C=1.12.2 - Unauthenticated RCE via Import Code Execution","2026-10-11T00:00:00Z"]