CISA 2026-07-07

CISA Adds Three Known Exploited Vulnerabilities to Catalog

Machine-generated analysis · WAYSCloud LLM

The advisory adds three vulnerabilities involving page builders and a low-code platform, all tied to web-facing components with access control or file upload flaws.

Context

The affected products include JoomShaper SP Page Builder, Langflow, and Joomlack Page Builder, which are tools used for website and application development. The advisory states these vulnerabilities are under active exploitation and allows for unauthorized access or file upload. Worth noting is that two of the three are page builders for Joomla, suggesting a potential concentration of risk in Joomla-based web environments. The advisory does not specify sectors or deployment patterns beyond public exposure.

Operator considerations

Check: whether JoomShaper SP Page Builder, Langflow, or Joomlack Page Builder are deployed on publicly exposed systems.
Patch: apply available updates to address the unrestricted file upload and access control vulnerabilities if mitigation guidance exists.
Log: monitor web server logs for unauthorized file uploads or unusual access patterns tied to these applications.

From Cybersecurity and Infrastructure Security Agency ↗

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

CVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability

CVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifi...

Read the full advisory on CISA →