// day
Jun 8, 2026
2 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Jun 8, 2026
BerriAI LiteLLM: BerriAI LiteLLM Command Injection Vulnerability
› BerriAI LiteLLM
BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host. CISA added CVE-2026-42271, CVE-2026-48710 to the Known Exploited Vulnerabilities catalog on 2026-06-08 based on evidence of active exploitation.
CVE-2026-42271CVE-2026-48710 - highclosedpatchedclosed Jun 8, 2026
Check Point Security Gateway: Check Point Security Gateway Improper Authentication Vulnerability
› Check Point Security Gateway
Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password. Added to CISA KEV on 2026-06-08.
CVE-2026-50751
