// day
Sep 2, 2026
5 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Sep 2, 2026
BerriAI LiteLLM: BerriAI LiteLLM Improper Authentication Vulnerability
› BerriAI LiteLLM
BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token. Added to CISA KEV on 2026-09-02.
CVE-2026-59822 - highclosedpatchedclosed Sep 2, 2026
JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability
› JFrog Artifactory
JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges. Added to CISA KEV on 2026-09-02.
CVE-2026-82329 - highclosedpatchedclosed Sep 2, 2026
Kestra Kestra OSS: Kestra OSS OS Command Injection Vulnerability
› Kestra Kestra OSS
Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials. Added to CISA KEV on 2026-09-02.
CVE-2026-49869 - highclosedpatchedclosed Sep 2, 2026
Sangoma Switchvox: Sangoma Switchvox SQL Injection Vulnerability
› Sangoma Switchvox
Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution. Added to CISA KEV on 2026-09-02.
CVE-2026-9586 - highclosedpatchedclosed Sep 2, 2026
SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
› SonicWall SMA1000 Appliances
SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations. CISA added CVE-2026-83548, CVE-2026-83549 to the Known Exploited Vulnerabilities catalog on 2026-09-02 based on evidence of active exploitation.
CVE-2026-83548CVE-2026-83549
