CISA added three critical vulnerabilities to its Known Exploited Vulnerabilities catalog on August 5, 2026, including a severe code injection flaw in Langflow (CVE-2026-9198) with a CVSS score of 9.8, along with vulnerabilities in Apache Tomcat and N-central. All three flaws are being actively exploited in the wild, enabling unauthenticated remote code execution and posing significant risks to ent
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
