CVE-2026-93355Kavram kanıtı (PoC) yayınlanmış · CISA
LiteLLM Weak JWT Authentication via Email-Based User Lookup
CVSS Skor
7.6
EPSS İhtimal
%0.3
Risk Skoru
0.0
Yayın
20 gün önce
İlgili Siber Güvenlik Haberleri (Newsroom)
Bu zafiyetin basında ve siber güvenlik yayın organlarında yer aldığı makaleler ve analiz bültenleri:
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone do something about it. But speed is only part of the problem. A secure connection didn't always mean a safe destination. People offering to fix a ransomware mess had questions to answer themselves.
İlgili Benzer Açıklar
9.8
CVE-2026-42208 Aktif sömürülüyorSQL injection in Litellm
Yama doğrulandı Public Exploits:6EPSS %6
8.8
CVE-2026-59822 Aktif sömürülüyorLiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
Yama doğrulandı Public Exploits:1EPSS %1
8.7
CVE-2026-47101LiteLLM < 1.83.14 Privilege Escalation via API Key Generation
Yama doğrulandıEPSS %1
8.7
CVE-2026-47102LiteLLM < 1.83.10 Privilege Escalation via User Update
Yama doğrulandıEPSS %1
5.3
CVE-2026-59823LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy
Yama durumu bilinmiyorEPSS %0
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-93355"