CISA Updates KEV Catalog with Seven Critical Vulnerabilities Exploited by Attackers

CISA added seven critical vulnerabilities to its KEV catalog, as threat actors exploit them to deploy reverse shells, crypto miners, and gain unauthorized access to systems. The flaws affect AI infrastructure, cloud platforms, and enterprise software, prompting urgent patching recommendations.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers' crosshairs.

The vulnerabilities are as follows -

CVE-2026-83548 (CVSS score: 10.0) - A server-side request forgery vulnerability in SonicWall SMA 1000 Appliances that could allow a remote unauthenticated

Read original article