CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

AI Summary

CISA added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog on August 5, 2026, including CVE-2026-9198 (CVSS 9.8), a code injection flaw in Langflow enabling unauthenticated RCE, alongside critical flaws in N-central and Apache Tomcat. Federal agencies were given three days to remediate, underscoring the active exploitation risk across these widely deployed platforms.

Read full article → https://thehackernews.com/2026/08/cisa-flags-langf…

Relevance score: 85.0/100

# More from August 06

1
Ransom Cartel ransomware creator sentenced to 16 years in prison BleepingComputer
2
Canadian pleads guilty to Snowflake cloud data-theft attacks BleepingComputer
3
Thousands of servers can be backdoored by exploiting buggy motherboard controllers Ars Technica Security
5
Cyberattacks on water systems expand to 12 states as South Dakota, Georgia announce incidents The Record
6
Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself The Hacker News
7
CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws BleepingComputer
8
Water Sector Cyberattacks Reportedly Hit at Least 12 States SecurityWeek
9
New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts SecurityWeek
10
Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data The Hacker News