<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-23T11:51:32.287047+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/580b0f04-4a90-4127-beca-adc5071ff036/export</id>
    <title>580b0f04-4a90-4127-beca-adc5071ff036</title>
    <updated>2026-06-23T11:51:32.306630+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "580b0f04-4a90-4127-beca-adc5071ff036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42271", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnw6x4ijcc2h", "content": "LiteLLM vulnerability under active attack, CISA warns (CVE-2026-42271)\n\nA command injection vulnerability (CVE-2026-42271) in BerryAI\u2019s LiteLLM open-source AI gateway is being exploited by attackers, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed b\u2026\n#hackernews #llm #openai", "creation_timestamp": "2026-06-10T07:31:10.046087Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/580b0f04-4a90-4127-beca-adc5071ff036/export"/>
    <published>2026-06-10T07:31:10.046087+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e949d339-b4cb-4942-9f96-c8f4142e8d96/export</id>
    <title>e949d339-b4cb-4942-9f96-c8f4142e8d96</title>
    <updated>2026-06-23T11:51:32.306525+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e949d339-b4cb-4942-9f96-c8f4142e8d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42271", "type": "seen", "source": "https://bsky.app/profile/ins-aisolutions.bsky.social/post/3mnwfjdxo2j2e", "content": "A reminder this week that the AI stack has single points of failure: CISA flagged an actively exploited LiteLLM flaw (CVE-2026-42271) in its KEV catalog. A respected tool -- and proof any one component can fail. We built LLM Counsel on the opposite instinct: more than one model in the room. #AI #LLM", "creation_timestamp": "2026-06-10T09:28:44.513272Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e949d339-b4cb-4942-9f96-c8f4142e8d96/export"/>
    <published>2026-06-10T09:28:44.513272+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1908e8ab-7f87-409b-a066-a971fd91598f/export</id>
    <title>1908e8ab-7f87-409b-a066-a971fd91598f</title>
    <updated>2026-06-23T11:51:32.306431+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1908e8ab-7f87-409b-a066-a971fd91598f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42271", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mnwo7edztm2j", "content": "TSUITE INTEL: Critical vulnerability CVE-2026-42271 hits LiteLLM enterprise routing and n8n pipelines. Active CISA KEV exploitation verified. Deploy this forensic playbook for immediate environment sandboxing and egress security controls. Read at https://thecybermind.co/3jgn", "creation_timestamp": "2026-06-10T12:04:12.902141Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1908e8ab-7f87-409b-a066-a971fd91598f/export"/>
    <published>2026-06-10T12:04:12.902141+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f7b5a22a-0366-46ec-a50d-2040032a9d5f/export</id>
    <title>f7b5a22a-0366-46ec-a50d-2040032a9d5f</title>
    <updated>2026-06-23T11:51:32.306329+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f7b5a22a-0366-46ec-a50d-2040032a9d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42271", "type": "seen", "source": "https://bsky.app/profile/ins-aisolutions.bsky.social/post/3mnzcx5k6pe2f", "content": "A reminder from this week's news for anyone building on AI infrastructure: a widely used LLM gateway, LiteLLM, is patching an actively exploited remote-code-execution flaw (CVE-2026-42271), now on CISA's known-exploited list. No schadenfreude here -- every team running this layer should patch and", "creation_timestamp": "2026-06-11T13:20:44.869392Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f7b5a22a-0366-46ec-a50d-2040032a9d5f/export"/>
    <published>2026-06-11T13:20:44.869392+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d496f796-cb31-40a4-abed-df8ac92b489e/export</id>
    <title>d496f796-cb31-40a4-abed-df8ac92b489e</title>
    <updated>2026-06-23T11:51:32.306227+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d496f796-cb31-40a4-abed-df8ac92b489e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42271", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mo24ebkqd42m", "content": "CVE-2026-42271 enables unauthenticated remote code execution in LiteLLM via command injection, requiring rapid federal patching by June 22.\n", "creation_timestamp": "2026-06-11T20:55:29.248179Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d496f796-cb31-40a4-abed-df8ac92b489e/export"/>
    <published>2026-06-11T20:55:29.248179+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/62c77b78-368c-4458-8b31-6fa88d142786/export</id>
    <title>62c77b78-368c-4458-8b31-6fa88d142786</title>
    <updated>2026-06-23T11:51:32.306115+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "62c77b78-368c-4458-8b31-6fa88d142786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42271", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mo727krbma26", "content": "LiteLLM (CVE-2026-42271) is in CISA KEV for active exploitation. Patch immediately, restrict access so no untrusted users can reach the service, and monitor command injec\u2026 #Cybersecurity #Vulnerability #ThreatIntel\n\nSource: https://thehackernews.com/2026/06/litellm-flaw-cve-2026-42271-exploited.html", "creation_timestamp": "2026-06-13T20:00:49.113781Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/62c77b78-368c-4458-8b31-6fa88d142786/export"/>
    <published>2026-06-13T20:00:49.113781+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5840d3ab-4b0a-4be2-a4d9-85893bfc0449/export</id>
    <title>5840d3ab-4b0a-4be2-a4d9-85893bfc0449</title>
    <updated>2026-06-23T11:51:32.306016+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5840d3ab-4b0a-4be2-a4d9-85893bfc0449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42271", "type": "seen", "source": "MISP/d511a704-eba2-411a-9543-41e0e130f522", "content": "", "creation_timestamp": "2026-06-15T17:02:26.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5840d3ab-4b0a-4be2-a4d9-85893bfc0449/export"/>
    <published>2026-06-15T17:02:26+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/40578aae-b7fe-4ca4-a08d-db7cd8df2bb6/export</id>
    <title>40578aae-b7fe-4ca4-a08d-db7cd8df2bb6</title>
    <updated>2026-06-23T11:51:32.305911+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "40578aae-b7fe-4ca4-a08d-db7cd8df2bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42271", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3moigwteso32i", "content": "LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE thehackernews.com/2026/06/lite...", "creation_timestamp": "2026-06-17T13:42:06.612636Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/40578aae-b7fe-4ca4-a08d-db7cd8df2bb6/export"/>
    <published>2026-06-17T13:42:06.612636+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bc4cbddb-3273-4a41-bd29-c83d4f9c8058/export</id>
    <title>bc4cbddb-3273-4a41-bd29-c83d4f9c8058</title>
    <updated>2026-06-23T11:51:32.305765+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bc4cbddb-3273-4a41-bd29-c83d4f9c8058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42271", "type": "seen", "source": "https://bsky.app/profile/apemanor.bsky.social/post/3momuthz6re2e", "content": "\ud83d\udcf0 LiteLLM CVE-2026-42271: Essential Steps to Mitigate RCE Vulnerability\n\nhttps://apemanor.com/article/fc300c82-26ca-42a8-9a26-86f1a0cdbec7\n\n#Tech #News #Discussion", "creation_timestamp": "2026-06-19T08:01:24.115652Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bc4cbddb-3273-4a41-bd29-c83d4f9c8058/export"/>
    <published>2026-06-19T08:01:24.115652+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e40ce4a9-9ea5-4d09-a9e2-d7b2f8f21a16/export</id>
    <title>e40ce4a9-9ea5-4d09-a9e2-d7b2f8f21a16</title>
    <updated>2026-06-23T11:51:32.303743+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e40ce4a9-9ea5-4d09-a9e2-d7b2f8f21a16", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42271", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2dffeba4-d318-4ca1-82b1-e5c5157901a4", "content": "", "creation_timestamp": "2026-06-19T12:45:07.902172Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e40ce4a9-9ea5-4d09-a9e2-d7b2f8f21a16/export"/>
    <published>2026-06-19T12:45:07.902172+00:00</published>
  </entry>
</feed>
