Forwarding Taiwan Computer Emergency Response Team / Coordination Center (TWCERT/CC) Security Alert TWCERTCC-200-202603-00000023
[CVE-2026-33017] Langflow Code Injection Vulnerability (CVSS v3.1: 9.8)
[Ransomware Exploitation: Unknown] Langflow contains a code injection vulnerability, which could lead to the creation of public flows without authentication.
[CVE-2026-33634] Aquasecurity Trivy Embedded Malicious Code Vulnerability (CVSS v3.1: 8.8)
[Ransomware Exploitation: Unknown] Aquasecurity Trivy contains an embedded malicious code vulnerability, which could allow an attacker to gain full access to the CI/CD environment, including all tokens, SSH keys, cloud credentials, database passwords, and any sensitive settings in memory.
[CVE-2025-53521] F5 BIG-IP Unspecified Vulnerability (CVSS v3.1: 9.8)
[Ransomware Exploitation: Unknown] F5 BIG-IP AMP contains an unspecified vulnerability that could allow an attacker to execute remote code.