Critical 10.0
CVE-2026-49869
Kestra CVE-2026-49869 Added to CISA Known Exploited Vulnerabilities Catalog
Vendor / product: Kestra
Event date: 2026-09-02
Public PoC: Yes
First tracked by RiskWire: 2026-09-20
Sources & citations (1)
- Suffix Matching Is Not Authorization: Lessons from CVE-2026-49869 in Kestra dev.to · 2026-09-21
References
See CVE-2026-49869 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →