Kestra

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 2, 2026
Last mentionedSep 3, 2026

Timeline

2 articles · newest first

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

CISA added seven actively exploited vulnerabilities to its KEV catalog, including SonicWall SMA 1000 SSRF CVE-2026-83548, amid campaigns deploying reverse shells and crypto miners.

The Hacker NewsSep 3, 05:19 UTC · Sep 3, 2026Exploit / PoCExploitedCVE-2026-83548 CVE-2026-83549 CVE-2026-9586+104 · 1 read

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA added seven actively exploited vulnerabilities to its KEV catalog, including SonicWall SMA1000 SSRF and command injection flaws.

CISA AdvisoriesSep 2, 12:00 UTC · Sep 2, 2026Exploit / PoCExploitedCVE-2026-9586 CVE-2026-48710 CVE-2026-49869+41

Related CVEs

by mentions

CVE-2026-835488%10.0
Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
published Sep 1, 2026SonicWall SMA1000 appliance Workplace interfaceKEVPoC ×3
CVE-2026-498692%10.0
Authentication bypass leading to unauthenticated RCE in Kestra OSS
published Jun 26, 2026Kestra OSS (kestra)KEVPoC ×2
CVE-2026-8232914%9.8
Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access
published Aug 28, 2026jfrog artifactoryKEVPoC ×2
CVE-2026-958619%9.3
Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition
published Jul 17, 2026Sangoma Switchvox SMB EditionKEVPoC
CVE-2026-59822<1%8.8
Unauthenticated MCP Endpoint Authentication Bypass in BerriAI LiteLLM
published Jul 8, 2026BerriAI LiteLLMKEV
CVE-2026-8354910%7.8
Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
published Sep 1, 2026SonicWall SMA1000 series appliances - Appliance Management Console (AMC)KEV
CVE-2026-4871070%6.5
HTTP Request Smuggling in Kludex Starlette (CVE-2026-48710)
published May 26, 2026Kludex (Encode) StarletteKEVPoC ×3
CVE-2026-45312<1%9.9
RAGFlow: In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows any authenticated…
published May 29, 2026
CVE-2026-247701%9.8
RAGFlow: In version 0.23.1 and possibly earlier versions, the MinerU parser contains a "Zip Slip" vulnerability, allowing an attacker to…
published Jan 27, 2026infiniflow ragflowPoC
CVE-2025-68700<1%8.6
RAGFlow: A low-privileged authenticated user (normal login account) can execute arbitrary system commands on the server host process via…
published Dec 31, 2025infiniflow ragflowPoC

Appears with

CISAorganization · 2
LiteLLMproduct · 2
Sangomavendor · 2
JFrogvendor · 2
SonicWallvendor · 2
Qilinthreat actor · 1
Starlettevendor · 1
SonicWall SMA1000product · 1
SonicWallorganization · 1
Sangoma Switchvoxproduct · 1
BerriAIorganization · 1
RAGFlowproduct · 1
JFrog Artifactoryproduct · 1
Kestraproduct · 1
CISAvendor · 1
Artifactoryproduct · 1

Entities are extracted by the model from each article. First seen Sep 2, 2026, last mentioned Sep 3, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.