CISA adds two known exploited vulnerabilities to catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation:

CVE-2026-42271 BerriAI LiteLLM Command Injection Vulnerability, CVE-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability.

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.

Return to Alerts