PoeLLM malware infects exposed AI servers in cryptomining attacks
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads. [...]
Kludex Starlette HTTP Request/Response Smuggling Vulnerability (CVE-2026-48710)
CVE-2026-48710
KEV ✓ EPSS 0.07 EPSS k 18. 10. 2026 náprava do 16. 9. 2026
Hodnocení závažnosti
zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost
Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu. Fakta o samotném CVE jsou nahoře.
· zachyceno
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-83548…
KEV ✓ EPSS 0.19 CVE-2026-48710 CVE-2026-49869 CVE-2026-59822 CVE-2026-82329 CVE-2026-83548 CVE-2026-83549 CVE-2026-9586 Sangoma JFrog SonicWall BerriAI veřejná správa US
· zachyceno
Kludex Starlette HTTP Request/Response Smuggling Vulnerability (CVE-2026-48710)
CISA added CVE-2026-48710 to the Known Exploited Vulnerabilities catalog. Affected product: Kludex Starlette. Remediation due date: 2026-09-16.
KEV ✓ EPSS 0.07 CVE-2026-48710 Kludex US
When AI infrastructure becomes the target: Securing gateways and control points
In this article AI workloads are becoming high-value control pointsCase study 1: LiteLLM gateway compromiseCase study 2: RAGFlow compromiseCase study 3: Kestra compromiseMitigation and protection guidanceMITRE ATT&CK techniques observedReferencesLearn more AI is creating a new layer of enterprise infrastructure. Gateways, retrieval platforms, orchestration services, and containerized runtimes now sit between users, applications, data, and models. These systems concentrate credentials, data…
KEV ✓ EPSS 0.93 CVE-2026-42271 CVE-2026-48710 CVE-2026-49869 LiteLLM RAGFlow Kestra US