SECURITYJul 8 · 05:33 UTCTHE HACKER NEWS[email protected] (The Hacker News)

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

CISA added four actively exploited vulnerabilities to its KEV catalog, including a critical path traversal flaw in Adobe ColdFusion (CVE-2026-48282) that could enable arbitrary code execution. The other flaws affect Joomla and Langflow, with all vulnerabilities being actively exploited.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

CISAorganizationAdobeorganizationJoomlatopicLangflowtopicCVE-2026-48282topic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYApr 29 · 08:46 UTC
CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV
SECURITYMay 22 · 05:47 UTC
CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
SECURITYApr 14 · 05:39 UTC
CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software
SECURITYJun 16 · 10:30 UTC
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
SECURITYMay 9 · 07:16 UTC
cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now