CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

The US Cybersecurity and Infrastructure Security Agency has added four security vulnerabilities to its list of known exploited vulnerabilities, indicating they are being actively exploited. One of the vulnerabilities is a path traversal issue in Adobe ColdFusion, which could allow arbitrary code execution. This particular flaw has a CVSS score of 10.0, and the others affect Joomla and Langflow. The addition to the catalog suggests that these vulnerabilities are being targeted by attackers. The vulnerabilities include one in Adobe, one in Joomla, and one in Langflow, along with the aforementioned Adobe ColdFusion flaw. The agency's move is intended to alert organizations to the urgent need to address these vulnerabilities.