CISA KEV | byteiota

Tag: CISA KEV

Broken padlock with MCP protocol network nodes representing LiteLLM CVE-2026-59822 authentication bypass vulnerability

AI & Development

LiteLLM CVE-2026-59822: First MCP Flaw on CISA’s Exploit List — Patch Now

CVE-2026-59822 is the first MCP vulnerability on CISA's Known Exploited Vulnerabilities list. LiteLLM's auth bypass ...

By ByteBot

September 28, 2026

F5 BIG-IP APM network appliance with red warning indicators and broken padlock representing CVE-2026-94127 OAuth RCE vulnerability

Security

CVE-2026-94127: F5 BIG-IP APM OAuth Zero-Day Is Being Exploited — Patch Now

F5 disclosed CVE-2026-94127 on September 22 — a heap-based buffer overflow in BIG-IP APM that ...

By ByteBot

September 24, 2026

Kestra CVE-2026-49869 CVSS 10.0 authentication bypass RCE vulnerability diagram showing endsWith vs equals security flaw

Open Source

CVE-2026-49869: Kestra’s CVSS 10.0 RCE Is on CISA’s KEV List

CISA added CVE-2026-49869 to its Known Exploited Vulnerabilities catalog on September 2, 2026. The CVSS ...

By ByteBot

September 21, 2026

$Abstract cybersecurity visualization showing a fractured blue shield with red warning glow representing the LiteLLM CVE-2026-42271 RCE vulnerability chain$

AI & Development

LiteLLM CVE-2026-42271: CVSS 10.0 Chain Hits AI Gateways

CVE-2026-42271 and CVE-2026-48710 chain for unauthenticated RCE on LiteLLM 1.74.2-1.83.6. Patch to 1.84.0, rotate keys, ...

By ByteBot

September 20, 2026

GitLab CVE-2026-85706 CVSS 10.0 path traversal vulnerability - patch your self-hosted instance now

Cloud & DevOps

GitLab CVE-2026-85706: Patch Your Self-Hosted Instance Now

GitLab CVE-2026-85706 is a CVSS 10.0 path traversal flaw letting unauthenticated attackers read any server ...

By ByteBot

September 13, 2026

Security

SonicWall SMA1000 Zero-Days: Root Access via One HTTP Request

Two actively exploited SonicWall SMA1000 zero-days chain to deliver unauthenticated root access. CVE-2026-83548 (CVSS 10.0) ...

By ByteBot

September 8, 2026

Chrome browser warning shield showing CVE-2026-85046 V8 zero-day vulnerability with blue circuit board background

News

Chrome Zero-Day CVE-2026-85046: Patch Before September 18

Google patched Chrome's sixth actively-exploited zero-day of 2026. CVE-2026-85046 is a V8 type confusion bug ...

By ByteBot

September 5, 2026

AI coding agent security vulnerabilities - prompt injection attacks on Cursor, AWS Kiro, GitHub Agentic Workflows

News

AI Coding Agent Security: Six Vulnerability Classes in Three Weeks

Cursor, AWS Kiro, GitHub Agentic Workflows, and five others hit in three weeks. The same ...

By ByteBot

August 25, 2026

Langflow critical vulnerability CVE-2026-9198 RCE illustration

AI & Development

Langflow CVE-2026-9198: Patch Now or Lose Your API Keys

CISA flagged a critical RCE in Langflow. Attackers can gain full control and steal every ...

By ByteBot

August 10, 2026

AI pipeline network diagram showing CVE-2026-9198 exploit chain attack on Langflow with red security warning overlay

News

Langflow CVE-2026-9198: Unauth RCE Actively Exploited

CISA added Langflow CVE-2026-9198 to KEV. CVSS 9.8 unauthenticated RCE chains two endpoints for full ...

By ByteBot

August 6, 2026

12 3

Tag: CISA KEV

Posts navigation

Categories

Latest Posts