CVE-2026-49869

Vendor

Kestra

Product

Kestra OSS

EPSS

1.00 (p100)

CISA KEV

listed

Exposure class

Developer platform, AI infrastructure, Collaboration

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 51
   KEV CISA KEV 2 Sep 2026

   Kestra OSS OS Command Injection Vulnerability

   Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.

   KEV Fix available CVE-2026-49869 Kestra
2. 46
   CISA advisory CISA 2 Sep 2026

   CISA Adds Seven Known Exploited Vulnerabilities to Catalog

   CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette…

   Exploited CVE-2026-9586CVE-2026-48710CVE-2026-49869+4 more
3. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more