U.S. CISA adds DD-WRT, Langflow and WordPress flaws to its Known Exploited Vulnerabilities catalog
2026-07-22T14:51:46Z•df5d44d530fbd5e72a309aa2cecad66d255bd0c190a6a965eac246c786f13d7d
7-zipCISA-KEVPoCactive-exploitationai-securitycritical-vulnerabilitiesdd-wrthugging-facelangflownation-state-espionagenginxopenaipan-ospatchesransomwareservicenowsharepointwordpresszero-dayzimbra
What happened
Multiple high‑impact vulnerabilities and active exploitation events reported: CISA added DD-WRT, Langflow and WordPress flaws to its Known Exploited Vulnerabilities catalog; a public PoC for SharePoint RCE (CVE-2026-50522, CVSS 9.8) has triggered active exploitation; ServiceNow pre-auth RCE (CVE-2026-6875) is being exploited against self-hosted instances; Qilin ransomware affiliates are abusing PAN-OS GlobalProtect authentication bypass (CVE-2026-0257) to gain VPN access; F5/NGINX patched a critical heap overflow (CVE-2026-42533) that can lead to RCE; 7‑Zip fixed an XZ handling RCE; Zimbra 10.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- df5d44d530fbd5e72a309aa2cecad66d255bd0c190a6a965eac246c786f13d7d
- Enrichment time
- 2026-07-22T14:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.