Last seen May 11, 2026

Microsoft database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter Vulnerability

U.S. CISA adds a flaw in BerriAI LiteLLM to its Known Exploited Vulnerabilities catalog Security Affairs

Technical Severity
High severity
Lifecycle Status

STABLE

Sources

What Happened

U.S. CISA adds a flaw in BerriAI LiteLLM to its Known Exploited Vulnerabilities catalog Security Affairs

Why This Matters

Publisher reporting describes a security event affecting may. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.

Recommended Action

Confirm whether may is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

May 11, 2026 12:30

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: ACTIVELY_EXPLOITED

Primary entities:

MicrosoftData LeakageFCEB agenciesfederal agenciesprivate organizationsSysdig Threat Research Team (TRT)

Authoritative Intelligence

CVE CVE-2026-42208 Incident identifier

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Public GitHub References

Search GitHub for public repositories that mention this CVE. BugSkan only lists repository metadata as a defensive awareness signal — it does not fetch or display exploit code.

CVE-2026-42208 on GitHub

Timeline

  • Incident first seen
    May 11, 2026 12:30

    BugSkan first recorded this incident.

  • U.S. CISA adds a flaw in BerriAI LiteLLM to its Known Exploited Vulnerabilities catalog - Security Affairs
    May 11, 2026 12:30

    news.google.com · Data Leak

Sources

U.S. CISA adds a flaw in BerriAI LiteLLM to its Known Exploited Vulnerabilities catalog - Security Affairs

news.google.com · May 11, 2026 12:30

U.S. CISA adds a flaw in BerriAI LiteLLM to its Known Exploited Vulnerabilities catalog Security Affairs

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence