CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added seven vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming active real-world attacks. Among the critical additions are CVE-2026-83548 and CVE-2026-83549 in SonicWall SMA 1000 Appliances, alongside CVE-2026-82329 in JFrog Artifactory and CVE-2026-9586 in Sangoma Switchvox. Microsoft and other researchers report that threat actors are leveraging these flaws to deploy reverse shells and cryptocurrency miners, with particular focus on AI infrastructure components like Kestra OSS and LiteLLM.