U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog

This collection highlights multiple high-impact security developments: CISA added two high-severity vulnerabilities to its Known Exploited Vulnerabilities catalog — CVE-2026-33634 (Aqua Security Trivy, CVSS 9.3) and CVE-2026-33017 (Langflow, CVSS 9.3) — reflecting active exploitation and widespread risk. TP-Link issued firmware updates for Archer NX routers to fix an authentication bypass/firmware takeover (CVE-2025-15517, CVSS 8.6). Threat activity includes a China-linked Red Menshen APT deploying stealthy BPFDoor implants in telecom networks for long-term espionage, and Kaspersky linking Cor