CISA adds seven KEV entries: the specific flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added seven vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after evidence of active or observed exploitation. The entries and their short descriptions listed by CISA are:
- CVE-2026-83548 (CVSS 10.0) — a server-side request forgery in SonicWall SMA 1000 Appliances that could let an unauthenticated remote attacker access sensitive functionality and perform unauthorized operations.
- CVE-2026-83549 (CVSS 7.8) — a post-authentication operating system command injection in SonicWall SMA 1000 Appliances enabling a remote authenticated administrator to execute arbitrary OS commands.
- CVE-2026-9586 (CVSS 9.3) — an SQL injection in Sangoma Switchvox allowing an unauthenticated attacker to execute arbitrary SQL statements against the backend PostgreSQL database with a single crafted request, including database operations and potential remote code execution.
- CVE-2026-82329 (CVSS 9.8) — an improper authentication vulnerability in JFrog Artifactory that, under default configuration, could permit an unauthenticated attacker on the network to obtain administrative privileges.
- CVE-2026-48710 (CVSS 6.5) — an HTTP request/response smuggling issue in Kludex Starlette that can allow attackers to inject paths into the host portion of requests, possibly enabling authentication bypass when authentication depends on the reconstructed URL path.
- CVE-2026-49869 (CVSS 10.0) — an operating system command injection in Kestra OSS that could let an unauthenticated attacker create and execute arbitrary workflows without credentials.
- CVE-2026-59822 (CVSS 8.8) — an improper authentication flaw in Berri LiteLLM's Model Context Protocol (MCP) Streamable HTTP endpoint that could let an unauthenticated attacker establish an authenticated MCP session using an arbitrary Bearer token.
SonicWall SMA 1000: vendor confirms active exploitation
SonicWall disclosed that it had "investigated a case indicating the active exploitation" of CVE-2026-83548 and CVE-2026-83549. Both flaws affect SonicWall SMA 1000 Appliances; one is an unauthenticated server-side request forgery rated CVSS 10.0 and the other a post-authentication command-injection rated CVSS 7.8. CISA’s KEV addition follows that vendor disclosure and signals priority remediation for affected customers.
This site is the portfolio.
OSINTSights runs on Cloudflare Workers, D1, R2, and Vectorize, with an AI pipeline on Hetzner ARM. Nubivance designed, built, and operates it. We do the same for clients.
See what we buildSangoma Switchvox and JFrog Artifactory: reverse shells and admin token abuse
Reports from Horizon3.ai and watchTowr show unknown threat actors weaponizing CVE-2026-9586 (Sangoma Switchvox) and CVE-2026-82329 (JFrog Artifactory). Those reports describe attackers deploying reverse shells and minting administrative tokens to carry out follow-on enumeration of users, groups, credential sets, and federated access topologies—activity that supports lateral investigation and escalation inside compromised environments.
Kestra OSS (CVE-2026-49869): Microsoft outlines four impact paths
Microsoft reported that a likely exploitation of CVE-2026-49869 in late June 2026 allowed threat actors to establish a reverse shell, perform Docker container environment discovery, evade defenses, deploy a cryptocurrency miner, and harvest data. Microsoft summarized the Kestra incident in four impact paths: "shell execution through the workflow engine, container-environment exposure through Docker socket access, host resource hijacking through miner deployment, and follow-on collection through workflow task execution." The vendor also described a "curl-pipe-shell" event that encoded collected output and stored it through Kestra's key-value interface, reducing reliance on standalone file artifacts.
LiteLLM, Berri, and AI infrastructure: chained flaws, miners, and database theft
Multiple sources described a pattern of attacks against AI infrastructure. Horizon3.ai reported that CVE-2026-48710 (Starlette) can be chained with CVE-2026-42271 (Berri LiteLLM, CVSS 8.7) to bypass authentication and reach remote code execution. Google-owned Wiz reported that threat actors associated with the Qilin (aka Agenda) ransomware group have been linked to active exploitation of that chain.
Microsoft also documented attackers breaking into LiteLLM gateways using CVE-2026-42271 and CVE-2026-48710 to deliver an XMRig miner via an ELF binary after fingerprinting the host and terminating competing miners. The adversaries reportedly abused previously collected database information to access LiteLLM-backed PostgreSQL tables—including LiteLLM_ProxyModelTable and LiteLLM_VerificationToken—to harvest model configuration records, upstream provider key material, provider endpoints, and proxy-issued virtual keys. Microsoft and Wiz said the attacks show AI infrastructure such as LiteLLM, Flowise, LangChain, Langflow, ChromaDB, Ollama, Marimo, and MCP servers are being targeted to steal API keys, gain backend access, maintain persistence, conduct blind prompt injections and AI-native post-exploitation, and monetize hosts via illicit crypto mining.
What this means for technologists, FCEB agencies, and enterprises
Technologists and security teams: Expect active exploitation behaviors including reverse shells, minted administrative tokens, container and host reconnaissance, miner deployment, and database extraction. The telemetry described shows attackers move from initial access to token theft and persistence, then to resource monetization.
Federal Civilian Executive Branch agencies and policymakers: Under "Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk," agencies are recommended to apply patches for all the vulnerabilities except CVE-2026-48710 and CVE-2026-59822 by September 5, 2026; they have until September 16, 2026, to address the Starlette and LiteLLM flaws.
Affected enterprises and procurement leaders: Products named in the KEV additions—SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kestra OSS, Kludex Starlette, and Berri LiteLLM—should be tracked in inventories and prioritized for patching and compensating controls where immediate patching is impractical.
These additions to CISA’s KEV catalog stitch together multiple exploit chains: unauthenticated request-forgery and command-injection, SQLi leading to backend compromise, improper authentication enabling admin-token issuance, and request smuggling that can unlock authentication bypasses. The calendar is short for many defenders—the federal directive sets deadlines in the coming days—while attackers continue to combine cloud-native, container, and AI platform weaknesses to monetize access and harvest keys.
