January 2026

Vulnerability Overview Executive Summary A high-severity command injection vulnerability exists in the Framelink Figma MCP Server. Due…

Vulnerability Summary CVE ID: CVE-2026-0756Component: github-kanban-mcp-server (@sunwood-ai-labs/github-kanban-mcp-server)Vulnerability Type: OS Command InjectionAttack Class: Unauthenticated Remote Code ExecutionSeverity: CriticalCVSS…

Top-Level Summary Vulnerability Background This issue arises because the GPT Academic application accepts serialized data uploaded by…

CVE-2026-0768 – Langflow Unauthenticated Remote Code Execution CVE ID: CVE-2026-0768Product: LangflowVulnerability Type: Unauthenticated Remote Code Execution (RCE)Severity:…

CVE: CVE-2026-0759Severity: CriticalCVSS v3.1 Score: 9.8 (Critical – unauthenticated remote code execution)Type: OS Command Injection → Unauthenticated…

CVE-2026-24061 — Legacy Telnet Authentication Bypass CVE ID: CVE-2026-24061Vulnerability Type: Authentication Bypass / Improper Input HandlingSeverity: CriticalCVSS…