Kestra

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 2, 2026
Last mentionedSep 2, 2026

Timeline

1 articles · newest first

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA added seven actively exploited vulnerabilities to its KEV catalog, including SonicWall SMA1000 SSRF and command injection flaws.

CISA AdvisoriesSep 2, 12:00 UTC · Sep 2, 2026Exploit / PoCExploitedCVE-2026-9586 CVE-2026-48710 CVE-2026-49869+41

Related CVEs

by mentions

CVE-2026-835488%10.0
Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
published Sep 1, 2026SonicWall SMA1000 appliance Workplace interfaceKEVPoC ×3
CVE-2026-498692%10.0
Authentication bypass leading to unauthenticated RCE in Kestra OSS
published Jun 26, 2026Kestra OSS (kestra)KEVPoC ×2
CVE-2026-8232914%9.8
Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access
published Aug 28, 2026jfrog artifactoryKEVPoC ×2
CVE-2026-958619%9.3
Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition
published Jul 17, 2026Sangoma Switchvox SMB EditionKEVPoC
CVE-2026-59822<1%8.8
Unauthenticated MCP Endpoint Authentication Bypass in BerriAI LiteLLM
published Jul 8, 2026BerriAI LiteLLMKEV
CVE-2026-8354910%7.8
Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
published Sep 1, 2026SonicWall SMA1000 series appliances - Appliance Management Console (AMC)KEV
CVE-2026-4871070%6.5
HTTP Request Smuggling in Kludex Starlette (CVE-2026-48710)
published May 26, 2026Kludex (Encode) StarletteKEVPoC ×3

Appears with

JFrog Artifactoryproduct · 1
SonicWallvendor · 1
CISAorganization · 1
Starletteproduct · 1
JFrogorganization · 1
LiteLLMproduct · 1
Sangomavendor · 1
BerriAIvendor · 1
CISAvendor · 1
JFrogvendor · 1
SonicWall SMA1000product · 1
Kludexvendor · 1
SonicWallorganization · 1
Sangoma Switchvoxproduct · 1
BerriAIorganization · 1
Kestravendor · 1

Entities are extracted by the model from each article. First seen Sep 2, 2026, last mentioned Sep 2, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.