Full Report
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 (CVSS score: 10.0) - A server-side request forgery vulnerability in SonicWall SMA 1000 Appliances that could allow a remote unauthenticated
Analysis Summary
# Morning News Roll-up September 03, 2026
## Overview
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog by adding seven new flaws currently being weaponized by threat actors. These vulnerabilities span critical infrastructure appliances, AI development frameworks, and enterprise management tools, with several carrying maximum severity ratings (CVSS 10.0). Attackers are actively utilizing these flaws to deploy reverse shells, bypass authentication, and conduct unauthorized remote code execution.
## Top Stories
### CISA Adds Seven Exploited Flaws to KEV Catalog
- Summary: CISA has mandated the patching of seven vulnerabilities affecting SonicWall, Sangoma, JFrog, Starlette, Kestra, and LiteLLM. Notable flaws include CVE-2026-83548 and CVE-2026-49869, both rated CVSS 10.0, which allow unauthenticated remote attackers to execute arbitrary workflows or gain unauthorized access to sensitive functionality.
- Source: hxxps://thehackernews[.]com/2026/09/cisa-adds-seven-exploited-flaws-as.html
### Attackers Target SonicWall SMA 1000 Appliances
- Summary: Two vulnerabilities (CVE-2026-83548 and CVE-2026-83549) in SonicWall Secure Mobile Access (SMA) 1000 series are under active exploitation. The flaws allow for Server-Side Request Forgery (SSRF) and OS command injection, enabling remote code execution (RCE) and unauthorized administrative operations.
- Source: hxxps://thehackernews[.]com/2026/09/attackers-exploit-two-sonicwall-sma[.]html
### AI Infrastructure and Frameworks Under Active Attack
- Summary: Threat actors, including those linked to Qilin ransomware, are exploiting vulnerabilities in AI-related tools like Berri LiteLLM (CVE-2026-59822) and Kestra OSS (CVE-2026-49869). Exploitation efforts involve bypassing authentication to probe model endpoints and establishing reverse shells for environment discovery and defense evasion.
- Source: hxxps://thehackernews[.]com/2026/09/cisa-adds-seven-exploited-flaws-as[.]html
---
# Main Topic
CISA Catalog Expansion and Active Exploitation of Seven Multi-Vendor Vulnerabilities.
## Key Points
- **Severity:** Two of the seven vulnerabilities (SonicWall and Kestra) carry a CVSS score of 10.0, indicating maximum risk to affected organizations.
- **AI Targeting:** A significant trend is the exploitation of AI orchestration and LLM gateway tools (LiteLLM, Kestra), showing that threat actors are pivotting toward AI infrastructure.
- **Exploitation Chains:** Attackers are chaining vulnerabilities, such as using Starlette flaws to bypass authentication in downstream applications like LiteLLM.
- **Post-Exploitation:** Common objectives observed include the deployment of reverse shells, administrative token minting, and environment enumeration for follow-on attacks.
## Threat Actors
- **Qilin (aka Agenda) Ransomware:** Linked to the active exploitation of LiteLLM vulnerability chains (CVE-2026-48710 and CVE-2026-42271).
- **Unknown Threat Actors:** Observed weaponizing Sangoma and JFrog flaws for credential theft and network enumeration.
## TTPs
- **Reverse Shells:** Establishing persistent remote access to compromised hosts.
- **SQL Injection:** Executing arbitrary statements against backend PostgreSQL databases (CVE-2026-9586).
- **Request Smuggling:** Injecting paths into host headers to bypass authentication (CVE-2026-48710).
- **Environment Discovery:** Using compromised containers to discover Docker environments and federated access topologies.
- **Defense Evasion:** Executing commands to disable or bypass security monitoring during the initial breach phase.
## Affected Systems
- **SonicWall:** SMA 1000 Series Appliances.
- **Sangoma:** Switchvox (PostgreSQL backend).
- **JFrog:** Artifactory (under default configurations).
- **Kludex:** Starlette (HTTP handling components).
- **Kestra:** OSS (Open Source Edition).
- **Berri AI:** LiteLLM (Model Context Protocol endpoints).
## Mitigations
- **Patch Management:** Immediate application of vendor-supplied security updates for all products listed in the CISA KEV.
- **Configuration Hardening:** Review JFrog Artifactory default authentication settings to prevent unauthorized admin access.
- **Credential Rotation:** Minted admin tokens suggest a need to rotate secrets and audit user/group permissions if compromise is suspected.
- **Network Segmentation:** Isolate AI development frameworks and orchestration tools from high-value production data.
## Conclusion
The inclusion of these vulnerabilities in the CISA KEV catalog underscores their immediate risk to enterprise and government networks. The focus on AI-related infrastructure by ransomware groups like Qilin suggests a maturing threat landscape where AI tools are high-priority targets. Organizations should prioritize patching the SonicWall and Kestra flaws due to their unauthenticated RCE capabilities.