As reported by Security Affairs, CISA has updated its Known Exploited Vulnerabilities (KEV) catalog with three newly confirmed actively exploited flaws affecting DD-WRT router firmware, the Langflow AI application builder, and WordPress. This trifecta spans consumer networking hardware, enterprise AI tooling, and the world's most widely deployed CMS — a combination that underscores how threat actors are casting increasingly wide nets across the attack surface.

Security Impact: As reported by Security Affairs, CISA has updated its Known Exploited Vulnerabilities (KEV) catalog with three newly confirmed actively exploited flaws affecting DD-WRT router firmware, the Langflow AI application builder, and WordPress.

Vulnerability Snapshot

DD-WRT (Router Firmware)
Affects a large installed base of consumer and prosumer routers running the popular open-source DD-WRT firmware. Router-level compromises are particularly dangerous because they sit upstream of all connected devices, enabling traffic interception, DNS hijacking, and lateral movement into internal networks without touching endpoint security controls.
Langflow (AI Application Platform)
CVE-2025-3248 — a critical remote code execution vulnerability in the Langflow visual AI workflow builder. Langflow is increasingly deployed by organizations experimenting with LLM-driven automation and agentic AI pipelines. CVSS score reported as Critical (9.8). A patch is available in Langflow v1.3.0 and later. Active exploitation has been confirmed in the wild.
WordPress (CMS Plugin/Core)
WordPress-related flaws continue to dominate KEV additions. Plugin ecosystem sprawl means that even well-maintained core installations are exposed through third-party code. WordPress powers approximately 43% of all websites globally, making each catalog addition a high-impact event for web hosting providers, digital agencies, and any organization running self-hosted WordPress.

Why This Combination Is More Dangerous Than It Looks

At first glance, these three additions appear unrelated. But from a threat actor's operational perspective, they form a coherent attack chain template:

Why This Combination Is More Dangerous Than It Looks
Initial access via WordPress: Compromised WordPress sites serve as persistent footholds, watering holes, or malware distribution points, enabling credential harvesting or drive-by exploitation against visitors.
Pivoting through DD-WRT devices: Home and small-office routers running DD-WRT are frequently used by remote workers and IT staff. A compromised router silently bridges the attacker into corporate environments through VPN tunnels, split-tunnel configurations, or unsegmented home lab networks.
High-value targeting via Langflow: The Langflow RCE is the most alarming addition. Organizations deploying AI automation infrastructure often grant these platforms broad access to internal APIs, databases, and cloud credentials. A successful Langflow exploit doesn't just compromise one server — it can expose entire AI-connected data pipelines.
Shield53 Assessment: The inclusion of an AI platform vulnerability in CISA's KEV catalog for the first time signals a critical maturation of the AI attack surface. Defenders who have not yet inventoried their AI/LLM tooling for exposed instances should treat this as an urgent wake-up call.

Who Is Most at Risk

  • Federal agencies — subject to BOD 22-01 binding remediation deadlines (typically 3 weeks for KEV additions)
  • MSPs and web hosting providers managing WordPress at scale
  • AI/ML engineering teams running Langflow instances, especially internet-exposed development or staging environments
  • Remote workforce environments where DD-WRT routers serve as the network gateway for employees working from home
  • Small and medium businesses running prosumer networking gear without centralized firmware management

Shield53 Recommendations

Immediate Actions

  • Langflow: Upgrade to version 1.3.0 or later immediately. Audit all deployment environments — including dev, staging, and internal tools — for exposed Langflow instances. Review API credentials and connected data sources for signs of unauthorized access. Block external access to Langflow admin interfaces via firewall rules if a patch cannot be applied immediately.
  • DD-WRT: Inventory all DD-WRT devices in your environment, including those used by remote employees. Apply the latest firmware update available from the DD-WRT project. Disable remote management interfaces (web GUI, SSH) if not operationally required. Consider whether consumer-grade router firmware is appropriate for business-critical network paths.
  • WordPress: Run a full plugin and core audit. Use a tool like WPScan or a managed WAF to identify vulnerable plugin versions. Enforce automatic minor updates and configure alerts for plugin update availability. Consider a web application firewall (WAF) with virtual patching capabilities as an interim control.
  • All organizations: Cross-reference your asset inventory against the current CISA KEV catalog on a weekly cadence. Integrate KEV additions into your vulnerability management SLA as a high-priority queue separate from standard CVSS-based triaging.

Detection Guidance

For Langflow specifically, monitor for anomalous outbound connections from application servers, unexpected process spawning from the Langflow service account, and unauthorized API calls to connected data sources. For DD-WRT, monitor DNS query logs for signs of DNS hijacking (unexpected resolver changes) and review DHCP lease logs for unrecognized devices. For WordPress, enable audit logging and monitor for unauthorized admin account creation, file modification events in wp-content, and unexpected PHP execution in upload directories.

CISA's KEV catalog is one of the highest-signal threat intelligence feeds available to defenders — and it's free. If your vulnerability management program isn't treating KEV additions as near-immediate remediation triggers, it's time to revisit your prioritization framework.