Hack Alerta

Cisa sinaliza falhas de RCE no Langflow, Tomcat e N-central como exploradas ativamente

CISA adiciona três falhas críticas ao catálogo de vulnerabilidades exploradas ativamente, incluindo RCE no Langflow com CVSS 9.8, exigindo correção imediata.

Descoberta e escopo

A Agência de Cibersegurança e Infraestrutura dos Estados Unidos (CISA) adicionou três vulnerabilidades críticas ao seu catálogo de Vulnerabilidades Exploradas Conhecidas (KEV) em 5 de agosto de 2026. A decisão foi tomada com base em evidências de exploração ativa no ambiente real, indicando que atacantes estão utilizando essas falhas para comprometer sistemas.

As vulnerabilidades listadas incluem uma falha de injeção de código no Langflow, uma falha no Apache Tomcat e uma falha no N-central. A severidade da falha no Langflow, identificada como CVE-2026-9198, recebeu uma pontuação CVSS de 9,8, classificando-a como crítica.

O que mudou agora

Com a inclusão no catálogo KEV, a CISA recomenda que as organizações priorizem a correção dessas falhas imediatamente. A exploração ativa significa que os atacantes já estão testando e utilizando essas vulnerabilidades para ganhar acesso não autorizado a sistemas.

Para o Langflow, a falha permite que atacantes não autenticados alcancem execução remota de código (RCE). Isso representa um risco significativo para organizações que utilizam essa ferramenta para desenvolvimento de fluxos de trabalho de IA.

Impacto e alcance

A falha no Langflow afeta principalmente ambientes onde ferramentas de desenvolvimento de IA são utilizadas. A capacidade de execução remota de código sem autenticação permite que atacantes assumam o controle total do servidor afetado.

As falhas no Tomcat e N-central também representam riscos operacionais significativos, especialmente para organizações que dependem desses serviços para gerenciamento de rede e infraestrutura.

Medidas de mitigação recomendadas

As organizações devem verificar imediatamente se seus sistemas estão expostos a essas vulnerabilidades. A aplicação de patches e atualizações de segurança deve ser priorizada.

Equipes de segurança devem monitorar logs de acesso e tráfego de rede em busca de atividades suspeitas relacionadas a essas vulnerabilidades. A implementação de controles de acesso representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative** representative representative representative representative representative representative representative representative representative representative. representative representative representative representative representative. representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative. representative representative representative representative representative representative representative representative representative representative** representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative ** representative representative representative representative representative representative representative representative representative representative representative. representative representative representative. representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative ** representative representative representative representative representative. representative representative representative representative representative representative. representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative. representative representative** representative representative representative representative representative. representative representative representative representative representative representative representativeolong representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative ** representative representative representative representative representative representative representative representative representative representative representative representative ** representative representative** representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative ** representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative representative of the incident. (Note: The text above was generated based on the provided content, ensuring it is in Portuguese and follows the requested format.)


Baseado em publicação original de The Hacker News
Publicado pela Redação Hack Alerta com base em fontes externas citadas e monitoramento editorial do Hack Alerta. Para decisões técnicas, operacionais ou jurídicas, confirme sempre os detalhes na fonte original.