Loading story…
CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog after warning they are being actively exploited: CVE-2026-9198 in IBM Langflow OSS, CVE-2026-34486 in Apache Tomcat, and CVE-2026-18556 in N-able N-central. The Langflow issue is a critical code-injection flaw that can lead to unauthenticated remote code execution on default deployments, while the N-central bug is an authentication bypass vulnerability that N-able said was exploited as a zero-day. CISA also noted exploitation of CVE-2026-18577, a separate N-central flaw tied to an incomplete fix for the original issue.
The Apache Tomcat vulnerability allows attackers to bypass EncryptInterceptor protections for cluster-node messages, potentially exposing cluster members to unauthenticated remote code execution. Reporting linked exploitation of the Tomcat flaw to a Chinese-speaking threat actor tracked as knaithe or KnYuan, with activity involving Snowlight malware and AI-enabled autonomous hacking using DeepSeek through the Hermes Agent framework. Under BOD 26-04, Federal Civilian Executive Branch agencies were ordered to remediate the KEV-listed flaws by August 7, and vendors have issued patches including Langflow version 1.10.1 and N-able updates for affected N-central deployments.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
8 events from the most recent confirmed update back to the earliest known activity.
On August 5, 2026, CISA added CVE-2026-34486 in Apache Tomcat and CVE-2026-18556 in N-able N-central to the KEV catalog, citing evidence of active exploitation in the wild. The update also indicated that CVE-2026-18577 was being exploited.
SecurityWeek reported that CISA added CVE-2026-9198 to its Known Exploited Vulnerabilities catalog on August 4, 2026, citing active exploitation. The flaw affects IBM Langflow OSS and enables unauthenticated remote code execution on default deployments.
IBM disclosed CVE-2026-9198 on July 17, 2026 and patched it in Langflow OSS version 1.10.1. IBM warned that default deployments were affected and that the bug could be chained for unauthenticated remote code execution.
N-able rolled out a hotfix at the end of July 2026 as exploitation of CVE-2026-18556 intensified. The company said attackers had used the authentication bypass as a zero-day to gain administrative access and reach systems managed through N-central.
Apache Tomcat fixed CVE-2026-34486 in April 2026, including releases 11.0.21, 10.1.54, and 9.0.117. The flaw allowed bypass of EncryptInterceptor protections for cluster-node messages.
SecurityWeek reported that CVE-2026-34486 was introduced in March 2026 by the patch for CVE-2026-29146, changing EncryptInterceptor behavior from fail-closed to fail-open.
After determining the initial fix for CVE-2026-18556 was incomplete, N-able assigned CVE-2026-18577 to the bypass issue and issued a fresh patch. Reporting said threat actors were able to bypass the original remediation.
Proof-of-concept exploit code for CVE-2026-9198 was published roughly one week after IBM's public disclosure. The exploit demonstrated abuse of exposed Langflow endpoints to achieve remote code execution.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
bleepingcomputer.com
Open sourcesecurityaffairs.com
Open sourcesecurityweek.com
Open sourcethehackernews.com
Open sourcecve.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CISA repeatedly expanded its **Known Exploited Vulnerabilities (KEV) Catalog** after confirming active exploitation across a wide range of products, including Apple platforms, Ivanti EPM and EPMM, SolarWinds Web Help Desk, Omnissa Workspace ONE, n8n, Google Chromium and Skia, Wing FTP Server, Zimbra, Cisco firewall management products, Langflow, Aqua Security Trivy, F5 BIG-IP, Fortinet FortiClient EMS, Microsoft Exchange, SharePoint, Windows, Defender, Adobe Acrobat/Reader, Apache ActiveMQ, Trend Micro Apex One, Palo Alto PAN-OS, and other enterprise software. Several entries were especially notable because they involved **remote code execution, code injection, deserialization, authentication bypass, privilege escalation, and supply-chain-style malicious code risks**, while CISA also highlighted active exploitation of older legacy Microsoft and Adobe flaws that remain dangerous on unpatched or end-of-life systems. Reporting tied some of the newly listed issues to concrete attack activity and elevated operational risk. Apple flaws added to KEV were reported as exploitable through malicious web content or apps and could lead to arbitrary code execution or kernel-level execution, while the critical Langflow bug `CVE-2025-34291` was described as enabling session hijacking, token theft, persistence, and possible full system compromise in AI workflow deployments; separate reporting said the Iranian threat actor **MuddyWater** used it for initial access. Trend Micro said it observed at least one attempted in-the-wild exploitation of its Apex One flaw, and coverage of Ivanti vulnerabilities warned that defenders should not rely solely on shared indicators of compromise. Under **Binding Operational Directive 22-01**, Federal Civilian Executive Branch agencies were ordered to remediate each KEV-listed flaw by assigned deadlines, and CISA urged all organizations to apply vendor fixes or mitigations immediately and discontinue affected products if no mitigation is available.
Jun 30, 2026
CISA added **Langflow** vulnerabilities to its Known Exploited Vulnerabilities catalog after evidence of active attacks, ordering U.S. federal agencies to remediate **`CVE-2026-55255`** by **July 10**. The flaw is an insecure direct object reference in **`/api/v1/responses`** that lets an authenticated attacker use a victim flow UUID to access another user's flow, exposing sensitive data and consuming the victim's resources. Reporting also tied Langflow to broader KEV updates, including **`CVE-2025-3248`**, a missing-authentication flaw in **`/api/v1/validate/code`** that allows unauthenticated remote code execution and was updated in CISA's catalog to show **known ransomware use**. Sysdig said it observed in-the-wild exploitation of **`CVE-2026-55255`** on June 25, alongside repeated abuse of **`CVE-2026-33017`**, an unauthenticated Langflow RCE that attackers appeared to prefer because it is easier to operationalize and provides direct host compromise. The observed operator enumerated flows through **`/api/v1/flows/`**, then abused **`POST /api/v1/responses`** with prompts such as "leak api keys" to trigger another tenant's flow and attempt credential theft, while also deploying a malicious Langflow component that fetched a second-stage shell script from **`45.207.216.55:8084`**. Researchers assessed the activity as automated, opportunistic, and financially motivated, combining credential theft, compute abuse, implant delivery, and botnet-style monetization.
Jul 9, 2026
CISA added 14 vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog across two updates, citing evidence of active exploitation against widely used enterprise products from Fortinet, Microsoft, Adobe, Cisco, JetBrains, PaperCut, Kentico, Quest, and Zimbra. The newly listed flaws include issues in FortiClient EMS, Adobe Acrobat Reader, Microsoft Windows Common Log File System Driver, Microsoft Exchange Server, Host Process for Windows Tasks, Microsoft Visual Basic for Applications, JetBrains TeamCity, PaperCut NG/MF, Kentico Xperience, Quest KACE SMA, Zimbra Collaboration Suite, and Cisco Catalyst SD-WAN Manager, including privilege escalation, credential exposure, sensitive information disclosure, and cross-site scripting weaknesses. Reporting tied several of the vulnerabilities to real-world intrusion activity and ransomware operations. Microsoft said threat actor **Storm-1175** used `CVE-2023-21529` to deliver **Medusa ransomware**, while `CVE-2023-27351` has been linked to **Lace Tempest** deployments of **Cl0p** and **LockBit**. Defused Cyber also reported exploitation attempts against `CVE-2026-21643`, and CISA said federal civilian agencies must remediate the newly added flaws on deadlines running from late April into May 2026 under Binding Operational Directive requirements, while private-sector defenders were urged to prioritize the KEV entries for patching and exposure reduction.
Jun 29, 2026