AI Summary

CISA announced that two vulnerabilities—CVE‑2026‑42271, a command‑injection flaw in BerriAI LiteLLM, and CVE‑2026‑50751, an improper authentication issue in Check Point Security Gateway—have been added to its Known Exploited Vulnerabilities (KEV) Catalog after evidence of active exploitation. The catalog, established by Binding Operational Directive 22‑01, requires Federal Civilian Executive Branch agencies to remediate listed vulnerabilities by a set deadline to protect federal networks. CISA also urges all organizations to prioritize timely remediation of KEV items as part of broader vulnerability‑management efforts.

AI summaries can be wrong sometimes—always verify important details using the source article.