CVE-2026-21445 2

Vulnerability (CVE)

Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE

VulnCheck found active exploitation of CVE-2026-5027, a path traversal flaw (CVSS 8.8) in Langflow's 'POST /api/v2/files' endpoint that fails to sanitize the 'filename' parameter, allowing file writes to arbitrary locations; Tenable, which discovered the...

Vulnerabilities & Patching

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

Cyber Risks The Hacker News

CISA added four flaws to its KEV catalog on Tuesday, citing active exploitation: CVE-2026-48282, which saw an exploitation attempt from an IP geolocated to India within hours of disclosure; CVE-2026-48908, exploited as a zero-day in SP Page Builder to...

Zero-Days & Exploits