CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
2026-05-22T07:24:06Z•c30b9b05a31de1578a4b34ddec236fd4b8dde038ab5131ba1605240a10c5b879
CISACiscoDrupalGitHub-breachMicrosoftactive-exploitationcriticalcvelinux-kernelmalwareprivilege-escalationremote-code-executionsecurity-updatessupply-chainvulnerabilitieszero-day
What happened
Multiple high-impact security incidents and vulnerabilities reported: CISA added Langflow (CVE-2025-34291) and Trend Micro Apex One flaws to its KEV catalog for active exploitation; Cisco patched a CVSS 10.0 Secure Workload REST API flaw (CVE-2026-20223) allowing unauthenticated sensitive-data access; Microsoft disclosed actively exploited Defender flaws including CVE-2026-41091 (local privilege escalation); a 9-year-old Linux kernel vulnerability (CVE-2026-46333) enables root command execution on major distros; proof-of-concept exploit published for Linux kernel LPE CVE-2026-31635 (DirtyDecry
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- c30b9b05a31de1578a4b34ddec236fd4b8dde038ab5131ba1605240a10c5b879
- Enrichment time
- 2026-05-22T07:24:06Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.