CISA flags seven actively exploited flaws, including two in SonicWall SMA1000 boxes
The US cyber agency's Known Exploited Vulnerabilities catalog picks up bugs in Sangoma, JFrog, LiteLLM, Kestra, Starlette and a pair in SonicWall's remote access appliances.
Key points
- CISA added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, all with evidence of active attacks in the wild.
- Two of the seven sit in SonicWall SMA1000 remote access appliances, the kind of internet-facing box attackers love.
- Federal civilian agencies must patch these under Binding Operational Directive 26-04, which prioritises fixes for bugs granting full control of exposed systems.
- The list also covers Sangoma Switchvox, JFrog Artifactory, BerriAI LiteLLM, Kestra OSS and Starlette.
- CISA is urging every organisation, not just government, to treat KEV entries as top of the patch queue.
The US Cybersecurity and Infrastructure Security Agency has added seven fresh bugs to its Known Exploited Vulnerabilities catalog, a public list of software flaws that criminals are already using to break into systems. Patching is no longer a next-sprint problem.
CISA only adds a flaw once there's real evidence someone is exploiting it. Not theory.
Which products are affected?
Seven bugs, spanning phone systems, developer tooling, AI infrastructure and remote access gear. The two SonicWall entries are the ones that'll make on-call engineers groan first, because SMA1000 appliances sit on the public internet by design.
| CVE | Product | Flaw type |
|---|---|---|
| CVE-2026-9586 | Sangoma Switchvox | SQL injection |
| CVE-2026-48710 | Kludex Starlette | HTTP request smuggling |
| CVE-2026-49869 | Kestra OSS | OS command injection |
| CVE-2026-59822 | BerriAI LiteLLM | Improper authentication |
| CVE-2026-82329 | JFrog Artifactory | Improper authentication |
| CVE-2026-83548 | SonicWall SMA1000 | Server-side request forgery |
| CVE-2026-83549 | SonicWall SMA1000 | OS command injection |
SQL injection means an attacker types database commands into a form field and the app runs them. Command injection is the same trick but against the underlying operating system. Server-side request forgery, or SSRF, tricks a server into making network requests on the attacker's behalf, often reaching internal systems the attacker can't touch directly. Request smuggling abuses the way web servers and proxies disagree about where one HTTP request ends and the next begins.
Why does the SonicWall pair matter most?
SMA1000 appliances are remote access gateways: the front door staff use to reach internal company systems from home. Chain an SSRF with a command injection on a box like that and you're not talking about a data leak. You're talking about a foothold inside the corporate network.
The failure mode here is familiar. Edge appliances get deployed, then quietly age. If one of these gets popped, the post-mortem will say nobody owned the patch cadence for the VPN box. We've covered SonicWall across eleven stories in the last 90 days, and the pattern holds: these devices accumulate exposure faster than most teams track.
What about the AI and developer tools?
The LiteLLM and JFrog Artifactory entries deserve separate attention. LiteLLM is a popular proxy that sits in front of large language model APIs. Artifactory is where a large number of shops store build artefacts and container images. An authentication bypass on either is a supply chain problem, because whatever an attacker plants downstream gets pulled into production builds.
Kestra is a workflow orchestrator. Starlette is the async Python framework that underpins FastAPI. Sangoma Switchvox runs business phone systems. Different stacks, same story: internet-reachable software with a bug that lets a stranger run code or read data they shouldn't.
Who has to act?
Federal civilian agencies are on the clock under Binding Operational Directive 26-04, which tells them to prioritise KEV-listed bugs on publicly exposed assets that would hand over total control if exploited. The directive also requires agencies to check whether they were already breached before the patch went on.
Per the CISA advisory, everyone else is "encouraged" to do the same. Read that as: your auditor and your insurer already treat the KEV list as the minimum bar.
Should you worry?
Yes, if you run any of these products. The honest read on this batch is that the SonicWall pair is the immediate fire, and the LiteLLM and Artifactory authentication bypasses are the slow-burn risk most teams will underestimate. Supply chain exposure from a compromised Artifactory instance doesn't announce itself. Pull the vendor advisories today, check your exposure, and don't let the SonicWall headlines bury the AI tooling entries.
