Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
10 IOCs
Metasploit Wrap Up: Langflow, MongoDB, and More
Malware Families
Excerpt
This release adds multiple new modules, and 6 of those modules point at a single target: Langflow , the open-source LLM workflow builder. Together they cover an authentication bypass (CVE-2026-93680), 3 unauthenticated remote code execution paths (CVE-2026-0768, CVE-2026-0769, and CVE-2026-10134), and 2 authenticated code execution flaws (CVE-2026-7873 and CVE-2026-93674), spanning Langflow releases from 1.0.0 through 1.11.4. Thanks to the work of rmhowe425 , with research…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →10 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-0768 | Medium | Score 53/100 | First seen |
| CVE | CVE-2026-27960 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-0769 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-10134 | Medium | Score 53/100 | First seen |
| CVE | CVE-2026-93674 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-39980 | Medium | Score 51/100 | First seen |
| CVE | CVE-2024-9264 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-7873 | Medium | Score 53/100 | First seen |
| CVE | CVE-2026-53959 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-93680 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…