U.S. CISA adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-33017 | Unauthenticated RCE in Langflow AI Workflow Builder | 9.3 | 96% | KEVPoC ×6 | KEV |
| CVE-2026-48282 | Path Traversal Leading to RCE in Adobe ColdFusion | 10.0 | 42% | KEV | KEV |
| CVE-2026-48908 | Unauthenticated File Upload RCE in JoomShaper SP Page Builder for Joomla | 10.0 | 89% | KEVPoC | KEV |
| CVE-2026-55255 | IDOR Authorization Bypass in Langflow Lets Attackers Run Other Users' Flows | 8.4 | <1% | KEVPoC | KEV |
| CVE-2026-56290 | Improper Access Control Enables Unauthenticated RCE in Joomlack Page Builder | 10.0 | 31% | KEVPoC | KEV |
From the original article
3 min read at securityaffairs.com
U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalog.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.