#CVE-2026-48908

Unauthenticated remote code execution flaws in Joomla and Langflow added to CISA KEV catalog

CISA has added three critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following evidence of active exploitation.