Vendor
BerriAI
- CVEs tracked · all time
- 8
- in CISA KEV · all time
- 3
- articles · since 11 Sep
- 3
- articles · all time
- 37
3 articles since 11 Sep.
Show as table
| Day (UTC) | Articles |
|---|---|
| Wed 30 Sep | 1 |
| Thu 15 Oct | 1 |
| Fri 23 Oct | 1 |
Products: litellm
CVEs
8 CVEsCVE-2026-59822BerriAI LiteLLM Improper Authentication VulnerabilityCVSS8.8HighExploited0.8%EPSS1article
CVE-2026-59823LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM ProxyCVSS5.3Medium–Not in KEV0.4%EPSS1article
CVE-2026-59821LiteLLM: Custom Code Guardrails production endpoints bypass code safety checksCVSS2.1Low–Not in KEV0.9%EPSS1article
CVE-2026-49468LiteLLM: Authentication Bypass via Host Header InjectionCVSS9.5Critical–Not in KEV3.0%EPSS1article
- AI Agents Power Ransomware Affiliates’ Attacks on Edge DevicesThe Hacker News
- LiteLLM flaws could hand attackers admin access and expose AI keysInfosecurity
- Google Warns N Day Flaws Are Driving a Surge in ExploitationGoogle Cloud
- LiteLLM Flaw Exposes AI Gateway Keys and Cloud CredentialsThe Hacker News
- CVE-2026-35029 Exploited for Full LiteLLM Server TakeoverSecurityOnline
- LiteLLM bug lets attackers bypass auth via Host header, CVSS 9.5SecurityOnline
- CISA warns of exploits in LiteLLM and Check Point VPN flawsSOCRadar
- LiteLLM, Check Point Flaws Hit as MagicAd Trojan SurgesSecurityOnline
- Check Point VPN flaw under attack as Google slashes AI Plus priceSecurityOnline
- CISA Flags Critical Flaws in LiteLLM and Check Point VPN GatewaysSecurity Affairs
- Check Point VPN bug lets attackers hijack open source downloadsSecurityOnline
- Critical flaws CVE-2026-42271/50751 exploited in Zlibrary mirrorsSecurityOnline
- Microsoft updates OneDrive policy amid LiteLLM, Check Point flawsSecurityOnline
- LiteLLM flaw CVE-2026-42271 lets hackers execute code remotelyThe Hacker News
- Apple iOS 27 Adds AI Password Reset Amid Two Critical CVEsSecurityOnline
- Check Point VPN exploit active as Apple Notes adds Markdown exportSecurityOnline
- Check Point VPN flaw hits as OpenAI files for $1 trillion IPOSecurityOnline
- Apache MINA Patches Critical Framework VulnerabilitiesSecurityOnline
- Pragmatic Refinement: Apple Rebalances Aesthetics and Performance at WWDC 2026SecurityOnline
- Sovereign Synthesis: Apple Unveils Gemini-Powered Siri AI and macOS Golden GateSecurityOnline
- Apache HTTP Server 2.4.68 fixes critical bugs to protect systemsSecurityOnline
- Critical Flaws Hit LiteLLM Check Point and TP Link DevicesSecurityOnline
- CISA warns of LiteLLM command injection flaw CVE-2026-42271CISA · official notice
- CISA Active Exploit Catalog Expands with Critical Gateway FlawsSecurityOnline
- New Chrome Security Update Addresses Critical V8 Exploit in the WildSecurityOnline
- Malicious PyPI Package Wave Spreads Evolving Supply Chain AttacksSecurityOnline
- Sovereign Intelligence: Apple Reimagines Siri with Gemini Core Integration at WWDC 2026SecurityOnline
- Unveils AI Powered iOS 27 and macOS 27 Amid Critical CVE AlertsSecurityOnline
- CISA warns of LiteLLM command injection flaw CVE-2026-42271CISA · official notice
- CISA flags LiteLLM SQLi flaw exploited hours after disclosureSecurity Affairs
- CISA Adds One Known Exploited Vulnerability to CatalogCISA · official notice
- BerriAI LiteLLM Flaw Exposes Proxy Data, CISA Adds KEV EntryCISA · official notice
- CISA adds LiteLLM SQLi flaw to KEV as active exploits emergeCISA · official notice
- Dark web lists WhatsApp data, Indian bank VPN for saleSOCRadar
- LiteLLM flaw CVE-2026-42208 exploited within hours of disclosureSecurity Affairs
- LiteLLM SQL injection flaw (CVE-2026-42208) exposes API keysSecurityWeek
- LiteLLM SQL flaw CVE‑2026‑42208 exploited hours after disclosureThe Hacker News · first in our coverage