CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

2026-05-22T07:24:06Zc30b9b05a31de1578a4b34ddec236fd4b8dde038ab5131ba1605240a10c5b879
CISACiscoDrupalGitHub-breachMicrosoftactive-exploitationcriticalcvelinux-kernelmalwareprivilege-escalationremote-code-executionsecurity-updatessupply-chainvulnerabilitieszero-day

What happened

Multiple high-impact security incidents and vulnerabilities reported: CISA added Langflow (CVE-2025-34291) and Trend Micro Apex One flaws to its KEV catalog for active exploitation; Cisco patched a CVSS 10.0 Secure Workload REST API flaw (CVE-2026-20223) allowing unauthenticated sensitive-data access; Microsoft disclosed actively exploited Defender flaws including CVE-2026-41091 (local privilege escalation); a 9-year-old Linux kernel vulnerability (CVE-2026-46333) enables root command execution on major distros; proof-of-concept exploit published for Linux kernel LPE CVE-2026-31635 (DirtyDecry

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
c30b9b05a31de1578a4b34ddec236fd4b8dde038ab5131ba1605240a10c5b879
Enrichment time
2026-05-22T07:24:06Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV · Baitaphish