CVE-2026-42208: BerriAI LiteLLM SQL Injection Vulnerability
CVE-2026-42208 affects BerriAI LiteLLM and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-08.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2026-42208 affects BerriAI LiteLLM and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-08.
CVE-2026-20182 affects Cisco Catalyst SD-WAN and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-14.
CVE-2026-42897 affects Microsoft Microsoft and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-15.
CVE-2026-45498 affects Microsoft Defender and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-20.
CVE-2026-41091 affects Microsoft Defender and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-20.
CVE-2010-0806 affects Microsoft Internet Explorer and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-20.
CVE-2010-0249 affects Microsoft Internet Explorer and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-20.
CVE-2009-3459 affects Adobe Acrobat and Reader and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-20.
CVE-2009-1537 affects Microsoft DirectX and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-20.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.