CVE-2026-42208 — BerriAI LiteLLM SQL Injection Vulnerability
BerriAI LiteLLM SQL Injection Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-6973 — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services,…
CVE-2026-0300 — Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue…
CVE-2026-31431: Copy Fail Linux Kernel Vulnerability
A Linux kernel flaw known as Copy Fail that allows local privilege escalation. It was one of four 2026 kernel flaws the…
CVE-2026-41940: Authentication Bypass in cPanel and WHM
CVE-2026-41940 is an authentication bypass vulnerability in cPanel and WebHost Manager (WHM) that allows remote attackers to gain elevated control of the…
CVE-2024-1708 — ConnectWise ScreenConnect Path Traversal Vulnerability
ConnectWise ScreenConnect Path Traversal Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of…
CVE-2026-32202 — Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft Windows Protection Mechanism Failure Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use…
CVE-2024-57726 — SimpleHelp Missing Authorization Vulnerability
SimpleHelp Missing Authorization Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the…
CVE-2025-29635 — D-Link DIR-823X Command Injection Vulnerability
D-Link DIR-823X Command Injection Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of…
CVE-2024-7399 — Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung MagicINFO 9 Server Path Traversal Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue…