CISA Adds Seven Actively Exploited Vulnerabilities to KEV Catalog, Including SonicWall and LiteLLM Flaws Targeting AI Infrastructure
CISA has added seven vulnerabilities confirmed to be actively exploited in the wild to its Known Exploited Vulnerabilities (KEV) catalog. Two of the flaws carry maximum CVSS scores of 10.0, and several affect AI infrastructure for the first time.
The catalog update includes a critical Server-Side Request Forgery vulnerability in SonicWall SMA 1000 series devices (CVE-2026-83548, CVSS 10.0) that allows unauthenticated remote access to internal sensitive functions. A companion command injection flaw (CVE-2026-83549) enables attackers who obtain administrative privileges to execute arbitrary system commands, forming a complete attack chain.
Another high-severity issue affects JFrog Artifactory (CVE-2026-82329, CVSS 9.8). Under default configurations, network-reachable attackers can obtain full administrator rights, potentially exposing build artifacts, container images, and hardcoded credentials stored in the repository.
Additional entries cover a SQL injection vulnerability in Sangoma Switchvox (CVE-2026-9586, CVSS 9.3), a command injection flaw in the Kestra workflow engine (CVE-2026-49869, CVSS 10.0), an HTTP request smuggling issue in Starlette (CVE-2026-48710), and an authentication bypass in the LiteLLM MCP interface (CVE-2026-59822, CVSS 8.8).
Security researchers from Microsoft and Wiz report that threat actors are now systematically targeting AI infrastructure components including LiteLLM gateways, Flowise, LangChain, Ollama, ChromaDB, and MCP servers. The Qilin ransomware group has already leveraged LiteLLM vulnerability chains to bypass authentication and achieve remote code execution.
After compromising a LiteLLM gateway, attackers query the PostgreSQL database tables LiteLLM_ProxyModelTable and LiteLLM_VerificationToken to exfiltrate model configurations and API keys in bulk. They frequently deploy XMRig cryptocurrency miners and terminate competing mining processes before exiting.
Similar intrusions against Kestra instances have involved establishing reverse shells, enumerating Docker environments, deploying miners, and exfiltrating data through the platform’s own key-value interfaces to minimize filesystem artifacts.
CISA has instructed federal agencies to complete remediation by September 5, giving organizations roughly 48 hours. Recommended actions include immediate asset discovery for all listed products, incorporation of AI gateways into formal asset inventories, rotation of all exposed model API keys, and monitoring for unauthorized mining processes and changes to authorized_keys files.
Related articles
Critical Vulnerabilities Patched in VMware Workstation and Fusion Allowing Host Code Execution
Broadcom has disclosed two vulnerabilities in VMware Workstation and VMware Fusion rated as critical and important respectively. CVE-2026-59346 is an integer overflow flaw in the VMXNET3 virtual network adapter that can be exploited by a local administrator inside a virtual machine to execute arbitrary code on the host system, carrying a CVSS v3.1 base score of 9.3. CVE-2026-59347 is a stack-based buffer overflow in the HGFS file system that permits code execution on the host as the VMX process with a CVSS score of 8.1. Both issues were privately reported and affect users who run virtual machines with local administrative privileges. The flaws have been addressed in VMware Workstation 26H1u1 and VMware Fusion 26H1u1, and Broadcom urges immediate updates via advisory VMSA-2026-0007.
Google Chrome Patches 12 Vulnerabilities Including Actively Exploited V8 Zero-Day
Google has released security updates for Chrome addressing 12 vulnerabilities across Windows, macOS, and Linux platforms. The updates include versions 152.0.7977.83 and 152.0.7977.82 for Windows and macOS, and 152.0.7977.82 for Linux. No critical-rated flaws were fixed in this batch, but ten issues carry a high severity rating. The most notable is CVE-2026-85046, a type confusion flaw in the V8 JavaScript engine that was reported on August 4 and is already being exploited in the wild. Additional high-severity fixes cover a race condition in V8 (CVE-2026-85045), a use-after-free in Compositing (CVE-2026-85048), and another type confusion issue (CVE-2026-85051). This marks the second Chrome security update in three days.
Bcrypt Password Hashing Silently Ignores Characters Beyond 72 Bytes, Breaking Verification Expectations
The bcrypt algorithm, widely used for password hashing in PHP and Python applications, processes only the first 72 bytes of any input password. Additional characters are ignored without error or warning during both hashing with password_hash and verification with password_verify. This behavior stems from the fixed 72-byte P-table size in the underlying Blowfish cipher as defined in the 1999 specification. Long passphrases, especially those using multibyte UTF-8 characters like Cyrillic or emojis, can result in completely different strings producing identical hashes. The limitation creates risks during password manager usage, system migrations, and scenarios involving shared prefixes. Modern libraries such as Python's bcrypt 4.x now explicitly reject passwords exceeding 72 bytes, while older implementations continue silent truncation. Recommended fixes include enforcing byte-length validation or pre-hashing with SHA-256 before bcrypt.
CISA Adds Seven Exploited Vulnerabilities in SonicWall, JFrog and Kestra to KEV Catalog
The US Cybersecurity and Infrastructure Security Agency has added seven known exploited vulnerabilities affecting SonicWall SMA1000, JFrog Artifactory and Kestra OSS products to its KEV catalog. Five of the flaws carry a three-day remediation deadline for federal agencies. Two issues in SonicWall SMA1000 enable unauthenticated server-side request forgery and authenticated OS command execution. A critical authentication bypass in JFrog Artifactory allows remote attackers to obtain administrative privileges. Kestra OSS is affected by an OS command injection vulnerability that can lead to full system compromise. CISA urges immediate patching and incident response actions.