NewsPublished 22 May 2026

In Other News: Industrial Router Exploitation, CISA KEV Nomination Form, Gas Station Hacking

Source SecurityWeek

Mentions 2 CVEs

Mentioned vulnerabilities

Description

Other noteworthy stories that might have slipped under the radar: CISA contractor exposes credentials, Mythos testing and new features, Huawei router flaw triggered telecom blackout. The post In Other News: Industrial Router Exploitation, CISA KEV Nomination Form, Gas Station Hacking appeared first on SecurityWeek .

Impact

The Iranian hacker activity on gas station tank monitors altered displayed fuel levels but did not affect actual fuel volumes or cause physical damage, though it raises concerns about potential risks to critical infrastructure. The CISA contractor credential exposure could have allowed lateral movement or tampering within government systems if exploited, but no unauthorized access has been detected so far. The Huawei router zero-day caused a significant telecom outage affecting landline and mobile services for hundreds of thousands, disrupting emergency communications. The Four-Faith router authentication bypass vulnerability is being aggressively exploited to conscript devices into botnets, increasing risk of further attacks. The Open WebUI SSRF vulnerability allows attackers to access internal resources, including cloud metadata endpoints, potentially leading to information disclosure or further compromise. Overall, these incidents demonstrate active exploitation of industrial and enterprise network device vulnerabilities with impacts ranging from service disruption to potential unauthorized access.

Defensive guidance

For the Open WebUI SSRF vulnerability, apply vendor patches or updates addressing CVE-2026-45401. Regarding the CISA credential exposure, no evidence of compromise has been found, but organizations should audit credential usage, rotate exposed keys and passwords, and enforce strict access controls. For the gas station ATG systems, secure internet-connected devices by enforcing strong authentication, network segmentation, and monitoring for unauthorized changes. CISA’s new KEV nomination form should be used to report actively exploited vulnerabilities to facilitate rapid response. Patch status for some vulnerabilities remains unclear; organizations should monitor vendor advisories closely for updates.

Summary

The input describes a range of cybersecurity threats and incidents reported by SecurityWeek on May 22, 2026. Additionally, a high-severity SSRF vulnerability (CVE-2026-45401) in Open WebUI allows bypass of URL validation via redirect chains. CISA has launched a new nomination form to accelerate reporting and cataloging of known exploited vulnerabilities. Patch status for some vulnerabilities, such as the Huawei router flaw, is unclear. The Four-Faith router vulnerability is actively exploited at scale. The CISA credential exposure incident currently shows no evidence of compromise.

References

securityweek.com/in-other-news-industrial-router-exploitation-cisa-kev-nomination-form-gas-station-hacking/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 22 May 2026, 14:14 UTC

References

Community reviews

Related threats