https://threatfrontier.com/articles/langflow-mcp-stdio-cve-2026-105697-cve-2026-105740-rce ThreatFrontier.com en 2026-10-06T01:42:20.455Z Langflow MCP Stdio Flaws Give Any Logged-In User a Shell: CVE-2026-105697 and CVE-2026-105740 https://threatfrontier.com/articles/sagemaker-distribution-cve-2026-104019-startup-script-injection ThreatFrontier.com en 2026-10-05T09:33:06.466Z AWS Patches Critical SageMaker Distribution Flaw That Lets a Project Contributor Hijack Another User's Studio Space https://threatfrontier.com/articles/aws-loom-cve-2026-103956-no-idp-admin-takeover ThreatFrontier.com en 2026-10-05T09:24:03.268Z AWS fixes Loom flaw that gave any network client admin rights on deployments without an identity provider https://threatfrontier.com/articles/mindsearch-planner-agent-code-injection-cve-2026-105135 ThreatFrontier.com en 2026-10-05T01:41:12.384Z MindSearch code-injection flaw (CVE-2026-105135) has a public PoC and no fix https://threatfrontier.com/articles/citrix-netscaler-saml-cve-2026-88779-kev ThreatFrontier.com en 2026-10-05T01:32:28.753Z Citrix NetScaler SAML Memory Flaw CVE-2026-88779 Added to CISA KEV, and Last Month's Patch Does Not Cover It https://threatfrontier.com/articles/github-copilot-business-enterprise-upfront-seat-billing-october-1 ThreatFrontier.com en 2026-10-04T07:10:05.451Z GitHub Copilot Business and Enterprise Now Bill Seats Upfront: What Changed on Oct 1