Vulnerability intelligence

CVE-2026-9198

Official description is being retrieved from NVD — refresh shortly.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.0%

Riskier than 0% of all CVEs

Exploitation

Confirmed in the wild

KEV since 2026-08-04

Remediation

Patch available

Federal deadline 2026-08-07

NVD entry Vendor patch PoC / advisory CISA KEV

2 articles across 2 outlets · first covered Aug 4, 2026 · latest Aug 4, 2026

Tracked incidents

vulnerability open 2 articles

IBM Langflow Code Injection Vulnerability (CVE-2026-9198) added to CISA KEV list

Coverage timeline

CISA Flags IBM Langflow CVE-2026-9198 Code Injection in KEV List
www.cisa.gov · Aug 4, 2026
Critical IBM Langflow Flaw Exploited, Patch Urged by CISA
cisa.gov · Aug 4, 2026