CISA Adds One Known Exploited Vulnerability to Catalog
2026-09-04T19:24:01Z•8d722d45502dc28f825ced7bb618833d47d9541b645669d47a2d9c5396beb362
CVE-2015-3246CVE-2015-5287CVE-2019-1068CVE-2021-23758CVE-2022-0995CVE-2023-49105CVE-2026-21962CVE-2026-48710CVE-2026-49869CVE-2026-53362CVE-2026-59822CVE-2026-60004CVE-2026-66384CVE-2026-81578CVE-2026-82078CVE-2026-82329CVE-2026-83548CVE-2026-83549CVE-2026-8452CVE-2026-85046CVE-2026-9586CISA KEVSQL injectionactive exploitationcommand injectiondeserializationimproper authenticationknown exploited vulnerabilitymemory corruptionnetwork appliancespath traversalremote code executionserver-side request forgeryurgent patchingvulnerability managementweb application security
What happened
CISA reports recent additions to its Known Exploited Vulnerabilities (KEV) Catalog, all supported by evidence of active exploitation. The entries affect Chromium V8, Sangoma Switchvox, Starlette, Kestra, LiteLLM, JFrog Artifactory, SonicWall SMA1000, PaperCut, ownCloud, Linux Kernel, Microsoft SQL Server, Citrix NetScaler, Gitea, Oracle WebLogic/HTTP Server, and other products. Organizations should urgently prioritize remediation, assess internet-exposed systems, and investigate potential compromise before patching.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 8d722d45502dc28f825ced7bb618833d47d9541b645669d47a2d9c5396beb362
- Enrichment time
- 2026-09-04T19:24:01Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.