CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The Hacker News 5 August 2026, 10:40 EEST Security

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote…

Read the full story on The Hacker News https://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data The Hacker News
Unpatched Calix flaw lets hackers bypass NAT to expose internal devices BleepingComputer
Hackers target WordPress sites in miniOrange auth bypass attacks BleepingComputer
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning The Hacker News