The U.S. Cybersecurity and Infrastructure Security Agency (Cybersecurity and Infrastructure Security Agency) has added two newly identified vulnerabilities affecting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog. U.S. federal agencies are required to apply patches by June 4, 2026.