A known Oracle WebLogic Server flaw is being exploited in network environments, showing how quickly patch debt turns into an operational risk for exposed enterprise middleware.
ACN CSIRT Italia flagged active exploitation of CVE-2025-34291 in Langflow, a reminder that session handling and CORS mistakes can turn an AI platform into a high-value target.