Forensia CTI Core

Summary

Ingested excerpt (first ~500 chars of normalized text).

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-48282 (CVSS score: 10.0) - A path traversal vulnerability in Adobe ColdFusion that could lead to arbitrary code execution in the context of the CISA Adds 4 Active…

https://thehackernews.com/2026/07/cisa-adds-4-actively-exploited-adobe.html

sha256:1c636b05df2bdae759f40061a023ffb52c422e3f43eb1db63c281a215db87e32

What we pulled out

Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).

cve12
md50
url0
ipv42
ipv60
sha10
domain4
sha2560
malware_token1
attack_pattern0
threat_actor_token1

Indicators

Linked with report → mentions → indicator. Values open the indicator workspace.

Type	Value	Link
domain	index.php	Open →
cve	CVE-2026-33017	Open →
cve	CVE-2025-34291	Open →
ip	45.207.216.55	Open →
cve	CVE-2026-55255	Open →
cve	CVE-2026-46817	Open →
cve

Malware families

Allowlist token matches only.

Metasploitmalware-family

Threat actors mentioned

Allowlist mentions — not a formal attribution verdict.

Turla

ATT&CK techniques

MITRE IDs referenced in text and present in local technique table.

None linked (import ATT&CK or adjust text).

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

All reports
Browse the report corpus.
Intel graph (first IOC)
Neighborhood from the first linked indicator.

← Back to reports