NewsThe Hacker News2026-09-03 05:19 UTCEnergy & Utilities Public Sector

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 (CVSS score: 10.0) - A server-side request forgery vulnerability in SonicWall SMA 1000 Appliances that could allow a remote unauthenticated

CVE-2026-83548SonicWall SMA1000 Appliances — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVE-2026-83548sonicwall sma6210_firmware: Server-Side-Request-Forgery (SSRF)
CVE-2026-83548SonicWall SMA: Mehrere Schwachstellen

Other advisories

CVE-2026-107804medium
Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout
CVE-2026-107804none
Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout
osv:CLEANSTART-2026-GK10724none
crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can all...
osv:CLEANSTART-2026-VG72480none
ReverseProxy can forward queries containing parameters not visible to Rewrite functions
CVE-2026-106120medium
LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration
CVE-2026-106120none
LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration
osv:CVE-2026-106120none
LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration
osv:CLEANSTART-2026-MC77082none
ReverseProxy can forward queries containing parameters not visible to Rewrite functions

Other news entries

Newsthehackernews2026-09-22
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
Newssans-isc-diary2026-09-21
TerminalFix: PNG Steganography, (Mon, Sep 21st)
Newsdarkreading2026-09-08
Cybercriminals Hack Brazilian Government Servers to Host Phishing Sites
Newsbleepingcomputer2026-09-02
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells
Newsthehackernews2026-09-02
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Newsdarkreading2026-08-31
'TerminalFix' Campaign Weaponizes PowerShell for Enterprise Attacks
Newsbleepingcomputer2026-08-31
Microsoft warns of TerminalFix attacks deploying reverse tunnels
Newstheregister-security2026-08-31
Attack hides malware in PNGs and drops custom reverse tunnel on victims' machines

Source: https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html

Linked advisories

More on Reverse