CVE-2026-42208

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 28, 2026

Last Seen

October 23, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

AI-Driven Ransomware Ecosystem Exposed by Security Researchers74.6

Cybersecurity researchers have uncovered an AI-assisted ransomware operation linked to the INC and The Gentlemen groups. The exposed infrastructure includes seven servers used for orchestrating attacks on 62 organizations, with over $23,920 spent on AI services. The operation employs an 'Autonomous...

Critical SQL Injection Vulnerability in LiteLLM Actively Exploited72.8

Hackers are exploiting a critical SQL injection vulnerability in the LiteLLM open-source large-language model gateway, tracked as CVE-2026-42208. This pre-authentication flaw allows attackers to access sensitive information, including API keys and provider credentials, without authentication by send...