CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

CISA added four actively exploited vulnerabilities—including multiple CVSS 10.0 flaws—in Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder; attackers have used these flaws to upload web shells, create unauthorized accounts, steal LLM and AWS keys via an IDOR, and deploy payloads consistent with botnet/cryptojacking and agentic ransomware (JADEPUFFER), prompting urgent patching guidance.