CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

6 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 6 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-47102	8.8	—	—	—	litellm / litellm	LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint.	159d ago
CVE-2026-47101	8.8	—	—	—	litellm / litellm	LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their	159d ago
CVE-2026-59822zero day	8.2	0.84%	3/3	same day	litellm / litellm	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.	111d ago
CVE-2026-12795	7.3	—	—	—	litellm / litellm	A vulnerability was determined in BerriAI litellm up to 1.82.2.	128d ago
CVE-2026-12773	7.3	—	—	—	litellm / litellm	A weakness has been identified in BerriAI litellm up to 1.59.8.	129d ago
CVE-2026-59821exploited	7.2	0.90%	1/3	+18d	litellm / litellm	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.	111d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker