Prompt-Injection

Langflow Pre-Auth RCE Mass Scanner (CVE-2026-27966) new EPSS 34%CVE-2026-27966webCRITICAL 9.8Patched2026-07-06Microsoft Semantic Kernel In-Memory Vector Store Filter eval() Sandbox Bypass RCE (CVE-2026-26030) newCVE-2026-26030miscCRITICALPatched2026-07-05Claude Code WebFetch Hardcoded HuggingFace Bare-Hostname Allow-List Bypass — CVE-2026-54316 newCVE-2026-54316miscMEDIUMPatched2026-07-05adx-mcp-server KQL Injection via table_name Parameter (CVE-2026-33980) newCVE-2026-33980webHIGH 8.8Patched2026-07-05Firefox Smart Window Private URL Exfiltration newNone assigned as of 2026-07-03webHIGHUnverified2026-07-03