CISA adds 4 actively exploited flaws to KEV catalog

CISA added four security flaws to its Known Exploited Vulnerabilities catalog, citing active exploitation. The vulnerabilities affect SharePoint Server, Joomla extensions SP Page Builder and Page Builder CK, and Langflow. Federal agencies must patch by July 10 or July 17, 2026, depending on the flaw. Attackers are using the flaws for remote code execution, credential theft, and malware deployment.