CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added three vulnerabilities to its Known Exploited Vulnerabilities catalog on August 5, 2026, including critical flaws in Langflow, Apache Tomcat, and N-able N-central. These vulnerabilities are actively exploited by threat actors, including an AI-enabled hacking campaign linked to a Chinese-speaking group using autonomous agents to target exposed systems. Patches have been issued for these flaws, but exploitation continues, unders