CISA Adds DD-WRT, Langflow, and WordPress Vulnerabilities to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added vulnerabilities in DD-WRT, Langflow, and WordPress to its Known Exploited Vulnerabilities (KEV) catalog. The inclusion indicates these flaws are actively being exploited in the wild, though specific technical details such as CVE IDs, affected versions, or exact attack vectors were not disclosed in the notice. No dates for the additions or deadlines for federal agencies to remediate were provided. The move underscores the urgency for organizations using these platforms to prioritize patching or mitigation efforts. The announcement was published by Security Affairs, citing CISA as the authoritative source.