berriai LiteLLM

Name: berriai LiteLLM
Brand: berriai

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical7high2medium0low

updated 2026-10-26

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-42271US	high8.8OT critical	91.4% (100th)	KEV	1.83.7	2026-05-08	2 versions
CVE-2026-42208US	critical9.8OT critical	89.4% (100th)	KEV	1.83.7	2026-05-08	2 versions
CVE-2026-59822US	high8.2OT critical	0.84% (57th)	KEV	no fix	2026-07-08	≤ < 1.84.0
CVE-2026-35029US	high8.8OT high	38.6% (99th)	Exploit	no fix	2026-04-06	≤ < 1.83.0
CVE-2026-40217US	—	15.5% (97th)	Exploit	no fix	2026-04-10	≤ bb0639701796218a3447160e55c0f1097446e4e6085df7dfd39f476d4143743f
CVE-2026-49468US	critical9.8	3.03% (87th)	Exploit	no fix	2026-06-22	≤ < 1.84.0
CVE-2026-47101US	—OT elevated	1.19% (68th)	Exploit	1.83.14	2026-05-21	0 → 1.83.14
CVE-2026-47102US	—OT elevated	0.65% (51st)	Exploit	1.83.10	2026-05-21	0 → 1.83.10
CVE-2026-35030US	—	0.63% (50th)	Exploit	no fix	2026-04-06	≤ < 1.83.0
CVE-2026-42203US	high8.8	0.37% (31st)	Exploit	1.83.7	2026-05-08	1.80.5, → 1.83.7
CVE-2026-12773US	critical9.8	1.02% (63rd)	—	no fix	2026-06-21	9 versions
CVE-2026-59821US	high7.2	0.90% (60th)	—	no fix	2026-07-08	≤ < 1.82.0-stable
CVE-2026-12795US	—OT elevated	0.80% (56th)	—	no fix	2026-06-21	3 versions
CVE-2026-59820US	medium6.5	0.59% (48th)	—	no fix	2026-07-08	≤ < 1.83.7-stable
CVE-2026-59819US	medium4.9	0.57% (47th)	—	no fix	2026-07-08	≤ < 1.83.10-stable
CVE-2026-12796US	—	0.57% (47th)	—	no fix	2026-06-21	3 versions
CVE-2026-12770US	high8.8	0.57% (47th)	—	no fix	2026-06-21	2 versions
CVE-2026-12771US	high7.5	0.43% (37th)	—	no fix	2026-06-21	3 versions
CVE-2026-12799US	—	0.43% (37th)	—	no fix	2026-06-21	3 versions
CVE-2026-12798US	—	0.40% (34th)	—	no fix	2026-06-21	3 versions
CVE-2026-12797US	—OT elevated	0.40% (34th)	—	no fix	2026-06-21	6 versions
CVE-2026-12774US	—	0.40% (34th)	—	no fix	2026-06-21	3 versions
CVE-2026-12772US	—	0.40% (34th)	—	no fix	2026-06-21	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-285Improper Authorization4 CVEs
CWE-287Improper Authentication4 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-266Incorrect Privilege Assignment3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-613Insufficient Session Expiration2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)23 CVEs
NLNCSC-NL (CSAF)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan