CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
CISA added seven actively exploited vulnerabilities to its KEV catalog, including SonicWall SMA 1000 SSRF CVE-2026-83548, amid campaigns deploying reverse shells and crypto miners.
CISA's KEV additions cover flaws in SonicWall SMA 1000 (CVE-2026-83548, CVE-2026-83549), Sangoma Switchvox (CVE-2026-9586), JFrog Artifactory (CVE-2026-82329), Kludex Starlette (CVE-2026-48710), Kestra OSS (CVE-2026-49869) and Berri LiteLLM's MCP endpoint (CVE-2026-59822). SonicWall confirmed active exploitation of the SMA 1000 flaws, while Microsoft and Wiz reported attackers chaining LiteLLM flaws CVE-2026-42271 and CVE-2026-48710 to fingerprint hosts, steal provider API keys and deploy XMRig miners on AI infrastructure. Wiz linked exploitation of the LiteLLM chain to the Qilin ransomware group, and Microsoft detailed a Kestra compromise chain ending in cryptocurrency mining and data harvesting via exposed RAGFlow flaws.
- CISA added seven exploited flaws to KEV, including CVSS 10.0 SonicWall SSRF CVE-2026-83548.
- SonicWall confirmed active exploitation of CVE-2026-83548 and CVE-2026-83549 in SMA 1000 appliances.
- Attackers chain LiteLLM flaws CVE-2026-42271 and CVE-2026-48710 to steal API keys and deploy XMRig.
- Wiz linked LiteLLM chain exploitation to the Qilin ransomware group; Kestra flaw used for reverse shells and miners.
- Microsoft warns AI infrastructure (LiteLLM, RAGFlow, MCP servers) is targeted for keys, persistence and mining.
- CVEs
- CVE-2026-83548CVE-2026-83549CVE-2026-9586CVE-2026-82329CVE-2026-48710CVE-2026-49869CVE-2026-59822CVE-2026-42271CVE-2026-45312CVE-2026-28797CVE-2026-24770CVE-2025-68700CVE-2025-69286
- Threat actors
- Qilin
- Organizations
- CISAMicrosoftWizHorizon3.aiwatchTowr
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-69286+1 related CVE | RAGFlow: The use of an insecure key generation algorithm in the API key and beta (assistant/agent share auth) token generation process… | 8.9 group max | <1% | PoC | |
| CVE-2026-24770 | RAGFlow: In version 0.23.1 and possibly earlier versions, the MinerU parser contains a "Zip Slip" vulnerability, allowing an attacker to… | 9.8 | 1% | PoC | |
| CVE-2026-28797 | RAGFlow: In versions 0.24.0 and prior, a Server-Side Template Injection (SSTI) vulnerability exists in RAGFlow's Agent workflow Text… | 8.7 | <1% | PoC | |
| CVE-2026-42271 | Command Injection in BerriAI LiteLLM AI Gateway Exploited in the Wild | 8.7 | 91% | KEV | KEV |
| CVE-2026-45312 | RAGFlow: In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows any authenticated… | 9.9 | <1% | ||
| CVE-2026-48710 | HTTP Request Smuggling in Kludex Starlette (CVE-2026-48710) | 6.5 | 70% | KEVPoC ×3 | KEV |
| CVE-2026-49869 | Authentication bypass leading to unauthenticated RCE in Kestra OSS | 10.0 | 2% | KEVPoC ×2 | KEV |
| CVE-2026-59822 | Unauthenticated MCP Endpoint Authentication Bypass in BerriAI LiteLLM | 8.8 | <1% | KEV | KEV |
| CVE-2026-82329 | Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access | 9.8 | 14% | KEVPoC ×2 | KEV |
CVE-2026-83548+1 related CVE | Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface | 10.0 group max | 8% | KEVPoC ×3 | KEV |
| CVE-2026-9586 | Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition | 9.3 | 19% | KEVPoC | KEV |
From the original article
4 min read at thehackernews.com
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers' crosshairs.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.