// day
Aug 4, 2026
3 new incidents, 1 with updates.
## started
- highclosedpatchedclosed Aug 4, 2026
Apache Tomcat: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
› Apache Tomcat
Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813. Added to CISA KEV on 2026-08-04.
CVE-2026-34486 - highclosedpatchedclosed Aug 4, 2026
IBM Langflow: IBM Langflow Code Injection Vulnerability
› IBM Langflow
Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. Added to CISA KEV on 2026-08-04.
CVE-2026-9198 - criticalclosedpartial fixclosed Aug 15, 2026
CHAINDROP / Mini Shai-Hulud npm worm (keyv + 400+ packages)
› npm ecosystem (keyv, cacheable, flat-cache, cache-manager, and 400+ packages)
In early August 2026 a Mini Shai-Hulud / CHAINDROP worm compromised keyv and related cache packages, then self-propagated via stolen npm tokens to 400+ packages (1B+ monthly downloads across the graph). Payload runs via preinstall (disabled by default on npm 12+), steals npm/GitHub/cloud/CI secrets, and republishes backdoored versions. Microsoft, Elastic, JFrog and Wiz published analyses.
