Tag: path traversal

2 articles

Brightly-lit tech setting with rows of equipment in the background and an unoccupied computer terminal in the foreground.

Langflow Vulnerability Exploited for Unauthenticated Remote Code Execution

A single, unauthenticated request is all it takes to exploit a high-severity flaw in Langflow, allowing attackers to execute remote code without needing any login credentials. This vulnerability, tracked as CVE-2026-5027, enables malicious actors to write files to any location on a host filesystem.

Analyst 207
Network devices on a rack in a server room, highlighting potential vulnerability to exploitation.

Ubiquiti Fixes Maximum-Severity UniFi OS Flaws

Ubiquiti has patched three critical vulnerabilities in UniFi OS that left nearly 100,000 Internet-exposed endpoints, including 50,000 in the US, open to remote attacks without requiring login credentials. The fixes address severe flaws that could allow unauthorized system changes, file access, and even command injection.

Analyst 207