CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-83548…

Číst originál na CISA Advisories →

1 zpráva z 1 zdroje · první 2. 9. 14:00 · poslední 2. 9. 14:00 CZ · EN/orig

Sangoma JFrog SonicWall BerriAI veřejná správa US

tg: zneužíváno tg: zranitelnost

CVE v události 7

CVE	hodnocení	KEV	EPSS
CVE-2026-48710	6.5 3.1 · GitHub_M 6.5 3.1 · redhat-SADP	KEV ✓	0.36
CVE-2026-49869	10.0 3.1 · GitHub_M	KEV ✓	0.02
CVE-2026-59822	8.8 4.0 · GitHub_M	KEV ✓	0.01
CVE-2026-82329	9.8 3.1 · JFROG	KEV ✓	0.08
CVE-2026-83548	10.0 3.1 · CISA-ADP	KEV ✓	0.05
CVE-2026-83549	7.8 3.1 · CISA-ADP	KEV ✓	0.09
CVE-2026-9586	9.3 4.0 · SRA	KEV ✓	0.12

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Jak se o tom psalo 1

2. 9. 2026 14:00 · CISA Advisories US nadpis události

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-83548…