CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: IBM Langflow code injection vulnerability CVE-2026-9198, N-able N-central authentication bypass vulnerability CVE-2026-18556, and Apache Tomcat missing encryption of sensitive data vulnerability CVE-2026-34486.