CISA Adds Seven Actively Exploited Flaws Affecting Enterprise and AI Tools
Summary
CISA added seven actively exploited flaws affecting SonicWall, Sangoma, JFrog, Starlette, Kestra and LiteLLM to its KEV catalog. Reports describe attacks involving admin access, command execution, credential theft, persistence and crypto mining.
Key points
- CISA added seven vulnerabilities to its Known Exploited Vulnerabilities catalog; the article also says CVE-2026-42271 was added around the same time.
- The flaws affect SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS and Berri LiteLLM.
- SonicWall reported investigating active exploitation of CVE-2026-83548 and CVE-2026-83549.
- Reports from Horizon3.ai and watchTowr describe exploitation of Sangoma Switchvox and JFrog Artifactory flaws to gain access and deploy reverse shells.
- Microsoft reported likely exploitation of the Kestra flaw for reverse-shell access, container discovery, cryptocurrency mining and data collection.
- Microsoft and Wiz described LiteLLM attacks involving credential and API-key theft, persistence and XMRig mining; Wiz linked the exploitation chain to actors associated with Qilin, also known as Agenda.
- Federal civilian agencies were directed to patch most listed flaws by September 5, 2026, and the Starlette and LiteLLM flaws by September 16, 2026.
Article Details
- Vulnerability Types
- Server-side request forgery
- Post-authentication operating system command injection
- SQL injection
- Improper authentication
- HTTP request/response smuggling
- Operating system command injection
- Severity
- Reported CVSS scores range from 6.5 to 10.0.
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- available
MITRE ATT&CK
T1059.004 · Unix ShellKestra exploitation was used to execute shell commands and establish a reverse shell.T1098.004 · SSH Authorized KeysAttackers established persistence by modifying ~/.ssh/authorized_keys.T1190 · Exploit Public-Facing ApplicationAttackers exploited vulnerabilities in internet-accessible SonicWall, Sangoma, JFrog, Kestra, and LiteLLM deployments.T1496 · Resource HijackingAttackers deployed cryptocurrency miners, including XMRig, to monetize compromised hosts.T1613 · Container and Resource DiscoveryIn the reported Kestra compromise, the threat actor performed Docker container environment discovery.
CVE
Threat Actors
Malware
Vendors
JFrogCISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM.MicrosoftThe addition of CVE-2026-49869 to the KEV catalog is driven by a Microsoft report last week in which the vulnerability was likely exploited by a threat actor in late June 2026 to establish a reverse shell, conductSangomaCISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM.SonicWallCISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM.
Products
ChromaDBindicate artificial intelligence (AI) infrastructure, such as LiteLLM, Flowise, LangChain, Langflow, ChromaDB, Ollama, Marimo, and MCP servers, has become a lucrative target to steal API keys, gain access toFlowiseattacks, Microsoft and Wiz said, indicate artificial intelligence (AI) infrastructure, such as LiteLLM, Flowise, LangChain, Langflow, ChromaDB, Ollama, Marimo, and MCP servers, has become a lucrative target to stealJFrog ArtifactoryCISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM.Kestra OSSCISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM.LangChainMicrosoft and Wiz said, indicate artificial intelligence (AI) infrastructure, such as LiteLLM, Flowise, LangChain, Langflow, ChromaDB, Ollama, Marimo, and MCP servers, has become a lucrative target to steal API keys,Langflowand Wiz said, indicate artificial intelligence (AI) infrastructure, such as LiteLLM, Flowise, LangChain, Langflow, ChromaDB, Ollama, Marimo, and MCP servers, has become a lucrative target to steal API keys, gain accessLiteLLMCISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM.Sangoma SwitchvoxCISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM.SonicWall SMA1000CISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM.StarletteCISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM.