The Cybersecurity and Infrastructure Security Agency (CISA) on July 7 added four bugs to its Known Exploited Vulnerabilities (KEV) catalog and told federal agencies to patch by July 10.Three of the four bugs were critical — one from Adobe ColdFusion was CVSS 10.0, while the other two from Joomla were CVSS 9.8. The Langflow bug came in at CVSS 8.4, but was considered by some experts even more impor...