CISA Warns of Actively Exploited Vulnerabilities in Langflow, Apache Tomcat, and N-central

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three critical vulnerabilities to its Known Exploited Vulnerabilities catalog, indicating active exploitation. These include a code injection flaw in Langflow (CVE-2026-9198), a missing encryption vulnerability in Apache Tomcat (CVE-2026-34486), and an authentication bypass in N-able N-central (CVE-2026-18556). Organizations must patch these immediately to mitigate significant security risks.