773 PoCs | 119 CISA KEV

tag

Exec

OpenWebUI "Tools" Unsandboxed exec() Remote Code Execution — CVE-2026-0766 EPSS 26%

CVE-2026-0766 (ZDI-26-032, GHSA-cggw-334c-f4mj) web Unverified

CVE-2026-0766webHIGH 8.8Unverified2026-07-05Langflow Unauthenticated Remote Code Execution via `validate/code` Endpoint (CVE-2026-0770) KEV EPSS 63%

CVE-2026-0770 web Patched

CVE-2026-0770webCRITICALPatched2026-07-05