Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without AuthenticationThe Hacker News·Jul 22, 15:38 UTC · Jul 22, 2026Exploit / PoC in the wildCVE-2026-29059CVE-2026-60137CVE-2026-63030+2 CVEs60
U.S. CISA adds DD-WRT, Langflow and WordPress flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jul 22, 10:45 UTC · Jul 22, 2026Exploit / PoC in the wildCVE-2021-27137CVE-2026-0770CVE-2026-63030+1 CVEs60
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEVThe Hacker News·Jul 9, 10:22 UTC · Jul 9, 2026Exploit / PoC in the wildCVE-2026-48282CVE-2026-56290CVE-2026-55255+7 CVEs60