CVE-2026-42271 - Vulnerability Details

Related Threat Clusters

Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild
A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

17 articles · Updated June 9, 2026
CISA Issues Urgent Directive to Patch Check Point VPN Vulnerability Exploited by Ransomware
CISA has mandated federal agencies to patch a critical vulnerability in Check Point VPN products within 72 hours due to active exploitation by the Qilin ransomware group. The vulnerability, tracked as CVE-2026-42271,…

8 articles · Updated June 9, 2026

CISA Gives Feds 3 Days to Patch Check Point VPN Bug Exploited as Zero — Ground.News · June 9, 2026
Cve 2026 42271 — www.sentinelone.com · June 9, 2026
CVE-2026-42271 — nvd.nist.gov · June 9, 2026
CVE-2026-42271 Chained with CVE-2026-48710 — horizon3.ai · June 9, 2026
LiteLLM Flaw Chains to CVSS 10 Unauthenticated RCE — Aiweekly.Co · June 9, 2026
Active Exploitation Alert: CVE-2026-42271 and CVE-2026-48710 — Rescana · June 9, 2026
LiteLLM Vulnerability Enables Unauthenticated Remote Code Execution — Letsdatascience · June 9, 2026
LiteLLM Vulnerability Allows Attackers to Execute Arbitrary Commands on Servers — Gbhackers · June 9, 2026