🔴 Critical: CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
-
CISA has added seven new flaws to its Known Exploited Vulnerabilities (KEV) catalog this week, following confirmed reports of active exploitation. Among the additions is a critical flaw in SonicWall SMA 1000 appliances, tracked as CVE-2026-83548 with a CVSS score of 10.0. This vulnerability is a server-side request forgery (SSRF) issue that could allow a remote, unauthenticated attacker to probe internal systems or trigger unintended requests from the affected device.
The inclusion in the KEV catalog means Federal Civilian Executive Branch (FCEB) agencies are required to apply patches by the mandated deadline, but the advisory serves as a broader warning for all organizations using affected products. According to the advisory, threat actors have been observed leveraging these flaws to deploy reverse shells and cryptocurrency miners on compromised hosts, indicating a shift from initial access to rapid monetization and persistence.
- CVE-2026-83548 (CVSS: 10.0) – SSRF in SonicWall SMA 1000 appliances, exploitable without authentication.
The full list includes additional vulnerabilities across various vendors, though technical details for the remaining entries were not fully disclosed in the initial report. CISA urges administrators to review the full KEV entry and prioritize remediation, especially for internet-facing devices. Organizations should also audit their environments for indicators of compromise related to reverse shell traffic or unexpected mining processes, as these post-exploitation activities often leave distinct forensic traces.
Source: The Hacker News
Is your organization currently running SonicWall SMA 1000 appliances, and if so, how are you prioritizing the patching of this SSRF vulnerability against potential operational downtime?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login