Alerta · Publicado 08/05/2026 · Actualizado 18/05/2026
La Agencia de Seguridad Cibernética e Infraestructura Crítica de EE.UU. (CISA) ha añadido la vulnerabilidad CVE-2026-42208 a su catálogo de vulnerabilidades activamente explotadas. Esta vulnerabilidad afecta sistemas críticos y requiere atención inmediata de los equipos de TI en México y América Latina para evitar compromisos de seguridad en infraestructuras estratégicas.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-42208 BerriAI LiteLLM SQL Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB ne
Alerta publicada por CISA / US-CERT. Consulta el advisory completo para detalles técnicos, indicadores de compromiso y mitigaciones específicas.