CPAI-2026-4008

Advisories.Checkpoint • May 11, 2026

This protection detects attempts to exploit this vulnerability. In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05 , click on Protection tab and select the version of your choice.

In the IPS tab, click Protections and find the Langflow Remote Code Execution (CVE-2026-0769) protection using the tool and Edit the protection's settings. Install policy on all Security Gateways.

This protection's log will contain the following information: Attack Name: Application Intelligence. Attack Information: Langflow Remote Code Execution (CVE-2026-0769)

Attack Name: Application Intelligence. Attack Information: Langflow Remote Code Execution (CVE-2026-0769)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Remote Code Execution Vulnerabilities in Veeam and Langflow Detected Two critical remote code execution vulnerabilities have been identified in Veeam Backup and Replication (CVE-2025-23121) and Langflow (CVE-2026-0769). The Veeam vulnerability, published on June 18, 2025, allows attackers to exploit the system if not patched. The Langflow vulnerability was published on January 23, 2026, and similarly poses a significant risk. Both vulnerabilities require users to update their Security Gateway products to the latest IPS updates to activate protections. The attack vectors include web server enforcement violations for Veeam and application intelligence for Langflow. Security professionals are advised to implement the necessary updates immediately to mitigate risks. The advisories emphasize the importance of monitoring logs for specific attack names related to these vulnerabilities. Current status indicates that protections are available but require immediate action from affected organizations. 48 sources 72

Extracted Entities

CPAI-2026-4008

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Vulnerabilities (1)