KEV: ColdFusion, Langflow, and Joomla
NEOSEC enrichment — no mirror of the original source
The US Cybersecurity and Infrastructure Security Agency (CISA) added four CVEs to the Known Exploited Vulnerabilities (KEV) database on Tuesday, July 7. Federal Civilian Executive Branch (FCEB) agencies are expected to mitigate all four vul
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Dukes, Neely.
Linked advisories
- CVE-2026-48908JoomShaper SP Page Builder — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
- CVE-2026-55255Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
- CVE-2026-55255Langflow: Umgehung der Autorisierung über nutzergesteuerten Schlüssel
- CVE-2026-55255OSV-Eintrag
- CVE-2026-48282Adobe ColdFusion: Mehrere Schwachstellen
- CVE-2026-55255Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
- CVE-2026-48908Joomshaper.net SP Page Builder extension for Joomla: uneingeschränkter Dateiupload
- CVE-2026-56290Joomlack Page Builder — Joomlack Page Builder Improper Access Control Vulnerability
- CVE-2026-48282Adobe ColdFusion 2025: Pfadüberschreitung (Path Traversal)
- CVE-2026-55255Langflow: Mehrere Schwachstellen
- CVE-2026-56290JoomlaCK.fr Page Builder CK extension for Joomla: uneingeschränkter Dateiupload
- CVE-2026-48282Adobe ColdFusion — Adobe ColdFusion Path Traversal Vulnerability
- CVE-2026-55255Langflow Langflow — Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Affected vendors and products
More on ColdFusion
Other advisories
- CriticalCVE-2026-106615Adobe ColdFusion: Mehrere Schwachstellen
- CriticalCVE-2026-48440Adobe ColdFusion: Mehrere Schwachstellen
- HighCVE-2026-75996Adobe ColdFusion 2025: unkontrollierter Ressourcenverbrauch
- CriticalCVE-2026-75994Adobe ColdFusion 2025: fehlerhafte Autorisierung
- HighCVE-2026-34634Adobe ColdFusion 2025: Server-Side-Request-Forgery (SSRF)
- CriticalCVE-2026-106624Adobe ColdFusion 2025: Code-Injection
- HighCVE-2026-106623Adobe ColdFusion 2025: fehlerhafte Autorisierung
- CriticalCVE-2026-106622Adobe ColdFusion 2025: Server-Side-Request-Forgery (SSRF)
Other news entries
- NCSC-2026-0435 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusionNewsNCSC-NL
- Adobe ColdFusion: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Adobe ColdFusion: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Adobe Patches 176 Vulnerabilities Across 11 ProductsNewsSecurityWeek
- NCSC-2026-0362 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusionNewsNCSC-NL
- Adobe ColdFusion: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Adobe ColdFusion: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- NCSC-2026-0294 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusionNewsNCSC-NL
ID