CVE-2026-49869

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-83548…

KEV ✓ EPSS 0.02 CVE-2026-48710 CVE-2026-49869 CVE-2026-59822 CVE-2026-82329 CVE-2026-83548 CVE-2026-83549 CVE-2026-9586 Sangoma SonicWall JFrog Kestra veřejná správa US

tg: zneužíváno tg: zranitelnost

CISA Advisories · 2. 9. 14:00

Kestra OSS OS Command Injection Vulnerability (CVE-2026-49869)

CISA added CVE-2026-49869 to the Known Exploited Vulnerabilities catalog. Affected product: Kestra Kestra OSS. Remediation due date: 2026-09-05.

KEV ✓ EPSS 0.01 CVE-2026-49869 Kestra US

tg: zneužíváno tg: zranitelnost

CISA KEV · 2. 9. 02:00

When AI infrastructure becomes the target: Securing gateways and control points

In this article AI workloads are becoming high-value control pointsCase study 1: LiteLLM gateway compromiseCase study 2: RAGFlow compromiseCase study 3: Kestra compromiseMitigation and protection guidanceMITRE ATT&CK techniques observedReferencesLearn more AI is creating a new layer of enterprise infrastructure. Gateways, retrieval platforms, orchestration services, and containerized runtimes now sit between users, applications, data, and models. These systems concentrate credentials, data…

KEV ✓ EPSS 0.84 CVE-2026-42271 CVE-2026-48710 CVE-2026-49869 Microsoft US

Microsoft Security Blog · 26. 8. 18:43