// day
Jul 7, 2026
3 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Jul 7, 2026
Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerability
› Adobe ColdFusion
Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user. Added to CISA KEV on 2026-07-07.
CVE-2026-48282 - highclosedpatchedclosed Jul 7, 2026
Joomlack Page Builder: Joomlack Page Builder Improper Access Control Vulnerability
› Joomlack Page Builder
Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload. Added to CISA KEV on 2026-07-07.
CVE-2026-56290 - highclosedpatchedclosed Jul 7, 2026
Langflow Langflow: Langflow Authorization Bypass Through User-Controlled Key Vulnerability
› Langflow Langflow
Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request. Added to CISA KEV on 2026-07-07.
CVE-2026-55255
