CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability CVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability CVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability CVE-2026-60137 WordPress Core SQL Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-
Read at CISA Cybersecurity Advisories
- Product
- WordPress core, AI / LLM tooling
- Exploitation
- observed in the wild
- Exposure class
- Web platform, AI infrastructure
Why it ranks 46 (High)
- Exploitation observed in the wild
- Product class: web platform, AI infrastructure
- Covered by 2 independent sources
- Government advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Cybersecurity Advisories (cisa.gov)
- CVE-2021-27137 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-0770 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-63030 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-60137 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.