EI
Product
Exploit Intelligence
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 5High 10Medium 7Low 1
Watch
Add Exploit Intelligence to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49468 | 9.8 | Jun 22 | LiteLLM: Authentication Bypass via Host Header Injection Affected: All versions, or not specified |
| CVE-2026-12773 | 9.8 | Jun 21 | BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication Affected: All versions, or not specified |
| CVE-2026-27459 | 9.8 | Mar 17 | pyOpenSSL DTLS cookie callback buffer overflow Affected: All versions, or not specified |
| CVE-2026-87744 | 9.1 | Oct 12 | Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations Affected: All versions, or not specified |
| CVE-2026-48746 | 9.1 | Jun 22 | vLLM: OpenAI auth bypass Affected: All versions, or not specified |
Showing 5