CISA flags seven actively exploited flaws, including two in SonicWall SMA1000 boxes

Key points

• CISA added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, all with evidence of active attacks in the wild.
• Two of the seven sit in SonicWall SMA1000 remote access appliances, the kind of internet-facing box attackers love.
• Federal civilian agencies must patch these under Binding Operational Directive 26-04, which prioritises fixes for bugs granting full control of exposed systems.
• The list also covers Sangoma Switchvox, JFrog Artifactory, BerriAI LiteLLM, Kestra OSS and the Starlette Python framework.
• CISA is urging every organisation, not just government, to treat KEV entries as top of the patch queue.

The US Cybersecurity and Infrastructure Security Agency has added seven fresh bugs to its Known Exploited Vulnerabilities catalog, a public list of software flaws that criminals are already using to break into systems. If your name is on that list, patching is no longer a next-sprint problem.

In practice, the KEV catalog is the closest thing the industry has to a shared "fix this now" queue. CISA only adds a flaw once there is real evidence someone is exploiting it, not just theory.

Which products are affected?

Seven bugs across seven products, spanning phone systems, developer tooling, AI plumbing and remote access gear. The two SonicWall entries are the ones that will make on-call engineers groan first, because SMA1000 appliances sit on the public internet by design.

A quick translation for the non-engineers reading. SQL injection means an attacker types database commands into a form field and the app runs them. Command injection means the same trick but against the underlying operating system. Server-side request forgery, or SSRF, tricks a server into making network requests on the attacker's behalf, often to reach internal systems the attacker cannot touch directly. Request smuggling abuses the way web servers and proxies disagree about where one request ends and the next begins.

Why does the SonicWall pair matter most?

Because SMA1000 appliances are remote access gateways, meaning they are the front door staff use to reach internal company systems from home. Chain an SSRF with a command injection on a box like that and you are not talking about a data leak, you are talking about a foothold inside the corporate network.

The failure mode here is familiar. Edge appliances get deployed, then quietly age. One thing the post-mortem will say, if one of these gets popped, is that nobody owned the patch cadence for the VPN box.

What about the AI and developer tools?

The LiteLLM and JFrog Artifactory entries are worth calling out separately. LiteLLM is a popular proxy that sits in front of large language model APIs, and Artifactory is where a huge number of shops store their build artefacts and container images. An authentication bypass on either is a supply chain problem waiting to happen, because whatever the attacker plants downstream gets pulled into production builds.

Kestra is a workflow orchestrator, Starlette is the async Python framework that underpins FastAPI, and Sangoma Switchvox runs business phone systems. Different worlds, same story: internet-reachable software with a bug that lets a stranger run code or read data they should not.

Who has to act?

Federal civilian agencies are on the clock under Binding Operational Directive 26-04, which tells them to prioritise KEV-listed bugs on publicly exposed assets that would hand over total control if exploited. The directive also tells agencies to check whether they were already breached before the patch went on.

Per the CISA advisory, everyone else is "encouraged" to do the same. Read that as: your auditor and your insurer already treat the KEV list as the minimum bar.

Operational takeaway: if you run SonicWall SMA1000, Artifactory, LiteLLM, Kestra, Starlette, or Switchvox, pull the vendor advisories today and check your exposure before you check your inbox tomorrow.