CVE-2026-42271

notes

CVE-2026-48710 — Kludex Starlette: Kludex Starlette HTTP Request/Response Smuggling Vulnerability

1. Executive summary CVE-2026-48710 is an HTTP request/response smuggling vulnerability in Kludex Starlette (CVSS 6.5, MEDIUM) that allows an attacker to inject

02 Sep 2026 · 7 min read read →

notes

When AI infrastructure becomes the target: Securing gateways and control points

1. Executive summary Microsoft Threat Intelligence reports active exploitation targeting three distinct AI infrastructure workloads: LiteLLM, RAGFlow, and Kestra. Attackers compromised these systems to steal credentials,

26 Aug 2026 · 9 min read read →

notes

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

Issuer: Adverse Trace Date issued: 2026-06-09 Version: 1.0 1. Executive summary Active exploitation of CVE-2026-42271, a command injection flaw in BerriAI

09 Jun 2026 · 4 min read read →