CVE-2026-12774
Server-side request forgery in Litellm
CVSS score
6.3
EPSS probability
%0.4
Risk score
0.0
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://gist.github.com/YLChen-007/256c8ff0750e298f89b6b287c90c2981
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2026-42208 Actively exploitedSQL injection in Litellm
Patch verified Public Exploits:8EPSS %89
8.8
CVE-2026-42271 Actively exploitedCommand injection in Litellm
Patch verified Public Exploits:4EPSS %91
8.8
CVE-2026-35029Incorrect authorization in Litellm
Patch status unknown Public Exploits:1EPSS %39
8.8
CVE-2026-40217Code injection in Litellm
Patch status unknown Public Exploits:3EPSS %16
9.8
CVE-2026-49468Vulnerability in Litellm
Patch verified Public Exploits:1EPSS %3
8.8
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-12774"