MAXHUB Pivot App Exposes Tenant Emails via Hardcoded Key
Critical vulnerability allows attackers to decrypt tenant email addresses and cause denial-of-service conditions
Year: 2026
CISA adds LiteLLM SQL injection vulnerability to KEV catalog
Federal agencies must patch CVE-2026-42208 in BerriAI LiteLLM by 11 May or discontinue use
CISA adds two vulnerabilities to known exploited catalog
Palo Alto Networks PAN-OS and BerriAI LiteLLM vulnerabilities now require federal agency remediation