<![CDATA[🔴 Critical: CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners]]>

<![CDATA[🔴 Critical: CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners]]>CISA has added seven new flaws to its Known Exploited Vulnerabilities (KEV) catalog this week, following confirmed reports of active exploitation. Among the additions is a critical flaw in SonicWall SMA 1000 appliances, tracked as CVE-2026-83548 with a CVSS score of 10.0. This vulnerability is a server-side request forgery (SSRF) issue that could allow a remote, unauthenticated attacker to probe internal systems or trigger unintended requests from the affected device.

The inclusion in the KEV catalog means Federal Civilian Executive Branch (FCEB) agencies are required to apply patches by the mandated deadline, but the advisory serves as a broader warning for all organizations using affected products. According to the advisory, threat actors have been observed leveraging these flaws to deploy reverse shells and cryptocurrency miners on compromised hosts, indicating a shift from initial access to rapid monetization and persistence.

CVE-2026-83548 (CVSS: 10.0) – SSRF in SonicWall SMA 1000 appliances, exploitable without authentication.

The full list includes additional vulnerabilities across various vendors, though technical details for the remaining entries were not fully disclosed in the initial report. CISA urges administrators to review the full KEV entry and prioritize remediation, especially for internet-facing devices. Organizations should also audit their environments for indicators of compromise related to reverse shell traffic or unexpected mining processes, as these post-exploitation activities often leave distinct forensic traces.

Source: The Hacker News

Is your organization currently running SonicWall SMA 1000 appliances, and if so, how are you prioritizing the patching of this SSRF vulnerability against potential operational downtime?

]]>https://xploitlk.com/topic/232/critical-cisa-adds-seven-exploited-flaws-as-attackers-deploy-reverse-shells-and-crypto-minersRSS for NodeSat, 12 Sep 2026 06:27:29 GMTSun, 06 Sep 2026 02:30:20 GMT60