CISA Warns of Critical Exploits in Langflow, Tomcat, and N-central Flaws

CISA has added critical vulnerabilities in IBM Langflow, Apache Tomcat, and N-able N-central to its Known Exploited Vulnerabilities catalog, with a deadline for federal agencies to patch by August 7, 2026. The Langflow flaw (CVE-2026-9198) allows remote code execution, while the Tomcat flaw (CVE-2026-34486) enables an EncryptInterceptor bypass. Both vulnerabilities are being actively exploited, with the Tomcat flaw linked to a Chinese-speaking actor using AI-driven techniques to target over 460 systems. The N-central flaw involves an authentication bypass that has been previously patched but exploited again. Organizations using these products are urged to apply fixes immediately to mitigate risks.

Key Points: • CISA added critical vulnerabilities to its KEV catalog, requiring urgent patches. • The Tomcat flaw is exploited by a Chinese-speaking actor using AI techniques. • Federal agencies have a deadline of August 7, 2026, to apply necessary fixes.