threat/intelligence

Index

All dossiers

Every published dossier and chain dossier. Filter by exploitation status or vendor.

StatusAll Active exploitation PoC public Patched, monitoring Archived

VendorAll Adobe BerriAI BeyondTrust Cisco Citrix Collabora Drupal GitLab Ivanti Linux Node.js (Google Brotli)PHP Group SonicWall WordPress

Dossiers

CVE-2026-59822HIGH

BerriAI LiteLLM MCP authentication bypass (CVE-2026-59822) in CISA KEV

LiteLLM before 1.84.0 lets any fabricated Bearer token open an MCP session; exploited per CISA KEV, fix 1.84.0, rotate gateway secrets.

Updated 2026-11-09

Chain dossiers

No published chain dossiers match these filters.