CISA adds 4 actively exploited Adobe, Joomla and Langflow vulnerabilities to KEV

Colleagues, I’d like to highlight a cybersecurity update: CISA has added four actively exploited vulnerabilities to the KEV catalog.

The issues affect Adobe ColdFusion, Joomla Page Builder, JoomShaper SP Page Builder, and Langflow.

Importantly, some attacks have already been confirmed in the wild: threat actors are leveraging path traversal, access-control bypass, IDOR, and unsafe file upload to achieve RCE, deploy web shells, and steal keys.

For organizations, this is a clear signal to urgently verify updates and remediate exposed instances.

Why it matters: such chains quickly lead to server and data compromise.

Have you already checked your CMS and AI platforms for these CVEs?

#cybersecurity #CISA #vulnerability #Langflow