Buttondown CISA Warns of Critical Exploits in Langflow, Tomcat, and N-central Flaws
Article Content
- •CISA added critical vulnerabilities to its KEV catalog, requiring urgent patches.
- •The Tomcat flaw is exploited by a Chinese-speaking actor using AI techniques.
- •Federal agencies have a deadline of August 7, 2026, to apply necessary fixes.
CISA has added critical vulnerabilities in IBM Langflow, Apache Tomcat, and N-able N-central to its Known Exploited Vulnerabilities catalog, with a deadline for federal agencies to patch by August 7, 2026. The Langflow flaw (CVE-2026-9198) allows remote code execution, while the Tomcat flaw (CVE-2026-34486) enables an EncryptInterceptor bypass. Both vulnerabilities are being actively exploited, with the Tomcat flaw linked to a Chinese-speaking actor using AI-driven techniques to target over 460 systems. The N-central flaw involves an authentication bypass that has been previously patched but exploited again. Organizations using these products are urged to apply fixes immediately to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Knaithe, Snowlight and IBM in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
AI-Discovered Vulnerabilities Surge, Increasing RCE Threats Google's Threat Intelligence Group (GTIG) reports that software vulnerability disclosures doubled from 5,045 in January 2026 to 10,740 in August 2026, largely influenced by AI-assisted discovery. Notably, 50% of AI-discovered vulnerabilities enable remote code execution (RCE), compared to 26% of non-AI… 
Apache Tomcat Vulnerability CVE-2026-34486 Enables Remote Code Execution A vulnerability in Apache Tomcat, tracked as CVE-2026-34486, allows unauthenticated remote code execution due to a flaw in the EncryptInterceptor that bypasses encryption checks. This flaw was introduced by a code refactor on March 13, 2026, which moved a line of code, changing the encryption layer's behavior from…