CVE-2026-42208 exploited within 36 hours of disclosure, exposing LiteLLM credentials, risking cloud account compromise.

A critical SQL injection vulnerability in the open-source AI gateway LiteLLM, tracked as CVE-2026-42208, was exploited less than two days after being listed in the GitHub Advisory Database. Attackers ...

A critical-severity authentication bypass vulnerability in cPanel & WHM has been exploited as a zero-day since February 2026.

Under a new model announced by the National Institute of Standards and Technology, NVD will no longer enrich every CVE.

NIST limits CVE enrichment after 263% surge since 2020, prioritizing KEV and federal software, shifting thousands to “Not ...

NIST’s shift toward selective CVE enrichment creates significant visibility gaps for teams relying solely on the National Vulnerability Database. As AI accelerates vulnerability disclosure rates, ...

Flaws in OpenEMR's platform — used by more than 100,000 healthcare providers — enabled database compromise, remote code ...

Industry and ad hoc coalitions appear poised to help fill the gap created by NIST's decision to cut back on CVE data ...

NIST shifts National Vulnerability Database to risk-based triage as CVE submissions hit record levels - SiliconANGLE ...

The National Institute of Standards and Technology has implemented changes to how it processes cybersecurity vulnerabilities ...

Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by ...

NIST announces big changes to the way it categorises and manages CVEs, set to have a big impact on how organisations manage patching and remediation.