CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-05 07:40 UTC
  • Importiert: 2026-08-10 16:18 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: 978746ea22eb0955544678c1b99fff782191b85f2758e83ba16778b996d3957f
The Hacker News

Inhalt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.

The list of vulnerabilities is as follows -

CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-9198

CRITICAL

9.8

CRITICAL

9.8

2026-07-17

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste