THREATOPS
THREAT OPS › Threat News › CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

lowthehackernewsPublished 2026-07-08

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The vulnerabilities are listed below -

CVE-2026-48282 (CVSS score: 10.0) - A path traversal vulnerability in Adobe ColdFusion that could lead to arbitrary code execution in the context of the

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://thehackernews.com/2026/07/cisa-adds-4-actively-exploited-adobe.html