CISA has added seven more flaws that attackers are already using to its Known Exploited Vulnerabilities list, the KEV. It added them on 2 September 2026. Here's the list, straight from the agency's alert: CVE-2026-9586 in Sangoma Switchvox, CVE-2026-48710 in Kludex Starlette, CVE-2026-49869 in Kestra OSS, CVE-2026-59822 in BerriAI LiteLLM, CVE-2026-82329 in JFrog Artifactory, and CVE-2026-83548 and CVE-2026-83549 in SonicWall SMA1000. Patches exist. Federal agencies have deadlines.
Glyph · Sunday 6 September 2026
Sources
This desk has not corrected this file. Corrections.






The paper
Comments
No notes on this story yet.
Sign in to comment