Cyber

What changed

Recent assessments have revealed two critical vulnerabilities, CVE-2026-35029 and CVE-2026-59823, in the LiteLLM gateway tool. These vulnerabilities could potentially allow unauthorized access and manipulation of data transmitted between AI applications and service providers.

Enterprises utilizing LiteLLM for integration with AI platforms such as OpenAI and Anthropic are particularly at risk, as these flaws compromise the security of sensitive information.

Who is affected

The vulnerabilities impact a range of organizations and products that rely on LiteLLM for AI application connectivity. Enterprises using this tool must be vigilant.

Specifically, the following groups are at risk:

• Organizations leveraging LiteLLM for AI integration.
• Developers and IT teams managing AI applications connected to OpenAI.
• Businesses utilizing LiteLLM to interface with Anthropic's services.
• Any enterprise relying on LiteLLM for data transmission between AI systems.

What to do

Organizations should prioritize immediate assessment of their LiteLLM implementations to identify exposure to these vulnerabilities. It is crucial to apply any available patches or mitigations as soon as they are released.

Additionally, monitoring for unusual activity and reviewing security protocols related to AI application connectivity is recommended.

• Conduct a vulnerability assessment of LiteLLM deployments.
• Implement security patches as they become available.
• Enhance monitoring for suspicious activities related to AI integrations.
• Review and strengthen security policies governing data transmission.

What changed

A critical vulnerability has been discovered in the QNAP TS-453E, identified as ZDI-26-776. This flaw permits network-adjacent attackers to execute arbitrary code on affected devices without requiring authentication.

The vulnerability has been assigned a CVSS score of 7.5, indicating its severity and potential impact on device security.

Who is affected

The primary product affected by this vulnerability is the QNAP TS-453E NAS device. Users of this device should be particularly vigilant.

Organizations utilizing QNAP products in their network infrastructure may also be at risk, especially if these devices are exposed to untrusted networks.

• QNAP TS-453E users
• Organizations using QNAP network-attached storage solutions
• IT departments managing QNAP devices in enterprise environments

What to do

It is crucial for affected users to assess their systems for the presence of this vulnerability and take immediate action to mitigate risks.

Regularly update firmware and monitor for security patches released by QNAP to address this and other vulnerabilities.

• Review and apply any available security updates from QNAP.
• Limit network access to the QNAP TS-453E devices to trusted sources only.
• Implement monitoring for unusual activity on affected devices.