Executive Summary
CISA added exploited ColdFusion and Langflow flaws plus two Joomla extension bugs to KEV with a July 10 deadline.
What Happened
Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known Exploited Vulnerabilities catalog, with federal agencies given until July 10 to patch. The post CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws appeared first on SecurityWeek .
Affected Products
- Adobe ColdFusion
- Langflow
- Joomla extensions
Vulnerability / Attack Technique
Exploited vulnerabilities including AI workflow RCE
Technical Mechanism
KEV addition.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
Langflow appears again in KEV.
Recommended Controls
- Update Langflow and ColdFusion
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-coldfusion-langflow-joomla-flaws/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.