CISA adds two known exploited vulnerabilities to catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation:

CVE-2025-34291 Langflow Origin Validation Error Vulnerability and CVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability.

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Return to Alerts