LiteLLM Vulnerability Chain Enables Full Server Takeover by Low-Privilege Users
A chain of three vulnerabilities in LiteLLM, a widely deployed open-source AI gateway, allows low-privilege users to escalate to full admin and…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities…
Cisco Patches Actively Exploited SD-WAN Manager Vulnerability CVE-2026-20262
Cisco has released security updates to address a medium-severity vulnerability in its Catalyst SD-WAN Manager (formerly SD-WAN vManage) that is being actively…
CVE-2026-20122: Previously Exploited Cisco SD-WAN Flaw
One of eight Cisco SD-WAN vulnerabilities actively exploited in 2026, attributed to APT actor UAT-8616.
CVE-2026-20128: Previously Exploited Cisco SD-WAN Flaw
One of eight Cisco SD-WAN vulnerabilities actively exploited in 2026, attributed to APT actor UAT-8616.
CVE-2026-20133: Previously Exploited Cisco SD-WAN Flaw
One of eight Cisco SD-WAN vulnerabilities actively exploited in 2026, attributed to APT actor UAT-8616.
CVE-2022-20775: Previously Exploited Cisco SD-WAN Flaw
One of eight Cisco SD-WAN vulnerabilities actively exploited in 2026, attributed to APT actor UAT-8616.
China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth
China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth Ravie LakshmananJun 16, 2026Malware / Cyber Espionage Cybersecurity researchers have flagged two previously…
CVE-2023-24932 — Vulnerability brief
CVE-2023-24932 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
Threat actors are actively exploiting three security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. The flaws include CVE-2026-39813…