New that day
- highpatchedexploited N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass. Added to CISA KEV on 2026-08-04 (federal deadline 2026-08-07).
- highpatchedexploited Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813. Added to CISA KEV on 2026-08-04 (federal deadline 2026-08-07).
- highpatchedexploited IBM Langflow Code Injection Vulnerability Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. Added to CISA KEV on 2026-08-04 (federal deadline 2026-08-07).