| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-70472 🧪 | Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store | FlowiseAI | Flowise | High | 7.1 | 2026-08-04 17:46:05 | Deep Dive |
| CVE-2026-70471 🧪 | Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure | FlowiseAI | Flowise | High | 7.1 | 2026-08-04 17:43:29 | Deep Dive |
| CVE-2026-47623 🧪 | NVIDIA Dynamo 反序列化注入漏洞 | NVIDIA | Dynamo | High | 8.2 | 2026-08-04 17:33:54 | Deep Dive |
| CVE-2026-47618 🧪 | NVIDIA Dynamo 服务端请求伪造漏洞 | NVIDIA | Dynamo | High | 7.5 | 2026-08-04 17:31:45 | Deep Dive |
| CVE-2026-47617 🧪 | NVIDIA Dynamo 服务端请求伪造漏洞 | NVIDIA | Dynamo | High | 7.5 | 2026-08-04 17:31:23 | Deep Dive |
| CVE-2026-70470 🧪 | Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE | FlowiseAI | Flowise | Critical | 9.5 | 2026-08-04 17:30:54 | Deep Dive |
| CVE-2026-47616 🧪 | NVIDIA Dynamo 服务端请求伪造漏洞 | NVIDIA | Dynamo | High | 7.5 | 2026-08-04 17:30:51 | Deep Dive |
| CVE-2026-47615 🧪 | NVIDIA Dynamo 服务端请求伪造漏洞 | NVIDIA | Dynamo | High | 7.5 | 2026-08-04 17:30:18 | Deep Dive |
| CVE-2026-47614 🧪 | NVIDIA Dynamo 服务端请求伪造漏洞 | NVIDIA | Dynamo | High | 7.5 | 2026-08-04 17:26:20 | Deep Dive |
| CVE-2026-47613 🧪 | NVIDIA Dynamo 服务端请求伪造漏洞 | NVIDIA | Dynamo | High | 7.5 | 2026-08-04 17:25:53 | Deep Dive |
| CVE-2026-47612 🧪 | NVIDIA Dynamo 路径遍历漏洞 | NVIDIA | Dynamo | High | 7.5 | 2026-08-04 17:24:17 | Deep Dive |
| CVE-2026-24255 🧪 | NVIDIA Dynamo 处理逻辑错误漏洞 | NVIDIA | Dynamo | High | 7.5 | 2026-08-04 17:23:47 | Deep Dive |
| CVE-2026-24254 🧪 | NVIDIA Dynamo 授权问题漏洞 | NVIDIA | Dynamo | Critical | 9.8 | 2026-08-04 17:23:07 | Deep Dive |
| CVE-2026-69264 🧪 | Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation | FlowiseAI | Flowise | Critical | 9.4 | 2026-08-04 17:22:37 | Deep Dive |
| CVE-2026-24253 🧪 | NVIDIA Dynamo 缓冲区错误漏洞 | NVIDIA | Dynamo | High | 8.2 | 2026-08-04 17:22:33 | Deep Dive |
| CVE-2026-18788 🧪 | Trippo ResponsiveFilemanager dialog.php unrestricted upload | Trippo | ResponsiveFilemanager | High | 7.3 | 2026-08-04 17:15:09 | Deep Dive |
| CVE-2026-18787 🧪 | GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection | GL.iNet | AX1800 | High | 8.8 | 2026-08-04 17:00:09 | Deep Dive |
| CVE-2026-69263 🧪 | Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) | FlowiseAI | Flowise | High | 8.7 | 2026-08-04 16:54:37 | Deep Dive |
| CVE-2026-69262 🧪 | Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type | FlowiseAI | Flowise | High | 7.1 | 2026-08-04 16:50:13 | Deep Dive |
| CVE-2026-69259 🧪 | Flowise RCE via SQLite Record Manager Node | FlowiseAI | Flowise | Critical | 9.4 | 2026-08-04 16:05:19 | Deep Dive |