CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Adds Four Known Exploited Vulnerabilities to Catalog
Advisory ID: node-25194
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability CVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability   CVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability   CVE-2026-60137 WordPress Core SQL
Severity: moderate
Published (UTC): 2026-07-21T12:00:00.000Z
Source: CERT
Original source: https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog