/
initial_access_vector:exploit_public_facing × latest_source_host:infosecurity-magazine.com × limpar

Resultados

2 casos · pág. 1/1

infosecurity-magazine.com · high

Check Point discloses LiteLLM flaws CVE-2026-35029 and CVE-2026-59823 enabling gateway takeover and RCE

Check Point researchers disclosed two high-risk vulnerabilities in LiteLLM, an open-source LLM gateway with almost 100,000 downloads a month. The gateway connects enterprise AI applications to providers such as OpenAI, Google and Anthropic. The flaws, CVE-2026-35029 and CVE-2026-59823, could let any user with an account on a vulnerable de…

CVE-2026-35029 CVE-2026-59823 technology
infosecurity-magazine.com · · 2 fontes · 2 atualizações critical

China-nexus Armory Castle exploited BeyondTrust Remote Support flaw CVE-2026-102764 as zero-day since August 2026

Google warns that Armory Castle, a suspected PRC state-sponsored espionage actor, exploited the critical BeyondTrust Remote Support vulnerability CVE-2026-102764 (CVSS 9.3) in August 2026, well before BeyondTrust disclosed it on October 15. The actor escalated privileges to root and established persistent access on compromised appliances.…

CVE-2026-102764 Armory Castle legal services technology