CVE-2026-9198

CVSS

—

EPSS

0.287 (98.1th percentile)

CISA KEV

Added 2026-08-04, due 2026-08-07

Exploitation

No report

Public exploits

9 repositories

State

Unknown

Coverage

• ● Actively exploitedCritical 85CISA advisories & alerts04 Aug, 12:00

  CISA Adds Three Known Exploited Vulnerabilities to Catalog

  CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9198 IBM Langflow Code Injection Vulnerability CVE-2026-18556 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability…

  ↗cisa.gov/news-events/alerts/2026/08/04/cisa-add…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:28poc publishedpoc-in-github
2. 24 Sept, 12:14poc publishedpoc-in-github
3. 24 Sept, 11:51poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev