RaqibCTI
Search the threat graph — actor, CVE, technique, victim…
⌘K
◇ SIGN IN
Knowledge
/
KEV Catalog
/
CVE-2026-49869
Corpus
+ Request intel
workspace
CVE
CVE-2026-49869
P2
Kestra OSS OS Command Injection Vulnerability
Kestra · Kestra OSS
Date added (CISA)
2026-09-02
Remediation due
2026-09-05
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Associated with
Related to
←
payload · Amatera
campaign
Correlated cluster
2026-09-21
←
payload · XMRig
campaign
Correlated cluster
2026-09-03
←
payload · XMRig
campaign
Correlated cluster
2026-08-26
Overview
ATT&CK
Related
ATT&CK mapping
No ATT&CK mapping yet
The CTID Mappings Explorer hasn't published an exploitation/impact technique mapping for this CVE yet.
Source:
NVD ↗
·
CISA KEV Catalog ↗
CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability · RaqibCTI