> TritonInfoSec News
Home / Jul 09, 2026 / Story
0
#2 The Hacker News general July 08, 2026 at 05:33 UTC

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

By [email protected] (The Hacker News)

AI Summary

CISA added four actively exploited vulnerabilities to its KEV catalog, including CVE-2026-48282 (CVSS 10.0), a path traversal RCE flaw in Adobe ColdFusion, plus flaws in Langflow and two Joomla extensions. Federal agencies were given until July 10 to patch, reflecting confirmed in-the-wild exploitation. Organizations running ColdFusion or Langflow AI agent frameworks should prioritize these patches immediately.

Read full article → https://thehackernews.com/2026/07/cisa-adds-4-acti…

Relevance score: 87.0/100

# More from July 09

  1. 1
    15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros The Hacker News
  2. 3
    Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS The Hacker News
  3. 4
    China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware The Hacker News
  4. 5
    Telco giant KDDI says data breach affects over 12 million people BleepingComputer
  5. 6
    CISA orders feds to patch max severity ColdFusion flaw by Friday BleepingComputer
  6. 7
    Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker The Hacker News
  7. 8
    China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors SecurityWeek
  8. 9
    Felons, Fraudsters Flog Offensive Cybersecurity Startup Krebs on Security
  9. 10
    Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data The Hacker News