NewNormal Security turns the last 24 hours of CVEs into new detections, every day. 𝗗𝗮𝗶𝗹𝘆 𝗖𝗩𝗘 𝗥𝗲𝗽𝗼𝗿𝘁 — 29 Aug 2026 𝗔𝗱𝗱𝗲𝗱 to NewScan 𝘁𝗼𝗱𝗮𝘆: 📦 Outdated AI workflow builder — code execution on the server, some of it with no login at all (IBM Langflow OSS CVE-2026-19286, CVE-2026-19295, CVE-2026-18729, CVE-2026-18891, CVE-2026-18904, CVE-2026-18899, CVE-2026-19294, CVE-2026-18545) 🖥️ Admin API shipped with authentication off — anonymous superuser on the cluster: add users, rewrite ACLs, drop brokers (Redpanda CVE-2026-82266) 🔑 API hands out the app's own web UI password — along with the host's model and data paths (Stable Diffusion WebUI CVE-2026-82288) Test your stack with NewScan — free, self-hosted: https://newnormalsecurity.com/newscan?utm_source=x&utm_medium=social&utm_campaign=daily-cve #infosec #AppSec #RCE #CSO #REDTEAM
Post summary
The post releases a list of new CVEs with basic technical details such as code execution and authentication bypass, but it does not provide PoC, exploit code, patch information, or evidence of active exploitation.