CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency has added four critical vulnerabilities to its Known Exploited Vulnerabilities catalog due to evidence of active exploitation in the wild. Among them, CVE-2026-48282, a path traversal flaw in Adobe ColdFusion, carries a CVSS score of 10.0, indicating a severe risk. This move underscores the urgency for organizations to patch these flaws to prevent potential attacks that could lead to arbitrary code execution. Adding these vulnerabilities to the KEV catalog highlights the ongoing threat landscape and emphasizes the importance of proactive cybersecurity measures.