THREATOPS
THREAT OPS › Threat News › CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

medthehackernewsPublished 2026-08-05

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.

The list of vulnerabilities is as follows -

CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html