The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.
The list of vulnerabilities is as follows –
- CVE-2026-9198 (CVSS score: 9.8) – A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. (Fixed in July 2026 with version 1.10.1)
- CVE-2026-34486 (CVS score: 7.5) – A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes. (Fixed in April 2026 with versions 11.0.21, 10.1.54, and 9.0.117)
Also added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It’s worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).
While CVE-2026-18577 was placed in the KEV catalog on Monday, the latest development signals that both vulnerabilities are being exploited by threat actors.
There are currently no details on how the Langflow flaw is being exploited. However, security defects in the open-source artificial intelligence (AI) application development platform have been repeatedly weaponized by bad actors in recent months.
Telemetry data from KEVIntel shows that 650 exploitation attempts against CVE-2026-9198 have been recorded starting July 6, 2026, from 244 unique attacker IP addresses from 41 countries.
The exploitation of CVE-2026-34486, on the other hand, has been attributed to an AI-enabled autonomous hacking campaign orchestrated by a Chinese-speaking threat actor operating under the aliases knaithe and KnYuan. The threat actor, based in Zhuhai, China, is said to have leveraged DeepSeek, via the Hermes Agent framework, as an offensive operator to target internet-exposed devices.
When initial attempts to exploit a Langflow flaw (CVE-2026-33017, CVSS 9.8) breach failed due to the target environment’s restrictive configurations, the AI agent is said to have conducted autonomous research to identify other higher-value vulnerabilities, including flaws in n8n, to find a way in.
Separately, the Chinese-speaking adversary has been found conducting manual operations using known vulnerabilities in Citrix NetScaler (CVE-2026-3055), Marimo (CVE-2026-39987), Apache Tomcat (CVE-2026-34486), and IKE VPN (CVE-2026-33824) endpoints.
“This actor attempted to exploit over 460 targets, leveraging a mix of autonomous and manual techniques,” Palo Alto Networks Unit 42 said. “What’s interesting is that the actor appeared to allow DeepSeek to narrow the targeting scope, likely to conserve AI compute.”
“This autonomous process of target identification, sampling and narrowing of scope is notable because the system executed hundreds of hours of manual targeting analysis in mere minutes, while also managing its own compute resources.”
CVE-2026-34486 has also been weaponized in attacks mounted by a China-nexus threat actor targeting government and commercial infrastructure across more than 100 countries to deliver SNOWLIGHT, a lightweight, C-based Linux dropper and loader. The campaign is assessed to have taken place between late April and early June 2026.
The activity was discovered by SOCRadar following an analysis of an exposed adversary-operated staging server containing reconnaissance lists, nine weaponized CVEs, a cracked Chinese version of Cobalt Strike dubbed GoCobaltStrike, tunneling tooling, and other payloads.
“The toolkit comprises a purpose-built reconnaissance pipeline, eleven distinct exploit chains, two tunneling tools, and four C2/RAT/malware families, including a verified SNOWLIGHT instance,” the cybersecurity company said. “These components were primarily assembled using public GitHub proof-of-concepts, alongside one pirated commercial C2 product and a single instance of a tracked, named malware family.”
The threat actors have been found to exploit nine distinct CVEs to breach 107 endpoints, including 16 root-level cPanel/WHM takeovers (CVE-2026-41940) and one Domain Admin-level compromise via ProxyShell.
“The campaign demonstrates a highly opportunistic and automated ‘spray-and-check’ tactical model employed by China-nexus threat actors to compromise a broad spectrum of global government and commercial infrastructure,” SOCRadar noted.
“By leveraging a centralized, multi-platform attack infrastructure (including cracked Cobalt-Strike derivatives and a sophisticated loader ecosystem) these operators have successfully achieved high-impact takeovers across more than 100 countries.”
Federal Civilian Executive Branch (FCEB) agencies have until August 7, 2026, to apply the necessary fixes and safeguard their networks from active threats.
(The story was updated after publication on August 8, 2026, to include details of exploitation attempts targeting CVE-2026-9198.)
