The Hacker News June 9, 2026

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

CISA added CVE-2026-42271, a high-severity LiteLLM command injection flaw, to its KEV catalog after evidence of active exploitation.

More like this

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

The Hacker News

Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

The Hacker News

Anthropic Launches Claude Fable 5, Its First Public Mythos-Class Model

Mac Rumors