Daily Threat Briefing
← All briefings

BerriAI LiteLLM Proxy · Dalfox Server

DAILY THREAT INTELLIGENCE BRIEFING Date: 2026-06-29 Prepared for: SOC Analysts | Incident Responders | Vulnerability Management | Security Leadership

EXECUTIVE SUMMARY

Today’s most significant new developments are the addition of new Metasploit exploit modules for CVE-2026-42208 (LiteLLM pre-auth SQL injection, CISA KEV) and CVE-2026-45087 (Dalfox Server unauthenticated RCE), materially lowering the barrier to exploitation for both. A large-scale data breach at Japanese ISP KDDI exposed up to 14.2 million email credentials. The CISA KEV deadline for Cisco Catalyst SD-WAN Manager (CVE-2026-20262, CVE-2026-20245) falls today; confirm remediation is complete.

CRITICAL VULNERABILITIES

NEW

CVE-2026-42208 (BerriAI LiteLLM Proxy)

  • Affected products: BerriAI LiteLLM Proxy (all versions prior to fix; on CISA KEV)
  • Severity: CVSS 9.3
  • EPSS: Not yet scored; CISA KEV listing indicates confirmed exploitation
  • Technical detail: A pre-authentication SQL injection in the LiteLLM Proxy allows an unauthenticated remote attacker to query or manipulate the backend database without any credentials. LiteLLM is widely deployed as an AI/LLM gateway in enterprise environments, often with broad access to API keys and model configurations. A Metasploit detection module (auxiliary/scanner/http/litellm_proxy_sqli) was published this week, making mass scanning and exploitation trivially accessible to low-skilled attackers.
  • Exploitation status: Actively exploited; confirmed by CISA KEV listing.
  • Remediation: Apply vendor patch immediately. Restrict LiteLLM Proxy management interfaces to trusted networks. Rotate all API keys and credentials stored in or accessible via the proxy. Scan for exploitation using the published Metasploit module in detection mode.

CVE-2026-45087 (Dalfox Server)

  • Affected products: Dalfox Server versions 2.12.0 and earlier
  • Severity: Not yet assigned (unauthenticated RCE)
  • EPSS: Not yet scored
  • Technical detail: An unauthenticated deserialization vulnerability in the found-action POST parameter allows a remote attacker to send arbitrary commands that are deserialized and executed in the context of the user running the Dalfox server process. A working Metasploit exploit module (linux/http/dalfox_server_rce_cve_2026_45087) was published this week, providing reliable remote code execution without authentication. Dalfox is used in security testing pipelines; exposed instances in CI/CD or shared tooling environments represent an elevated risk.
  • Exploitation status: Public exploit available; no confirmed in-the-wild exploitation reported, but weaponized module significantly raises risk.
  • Remediation: Upgrade Dalfox Server beyond version 2.12.0 immediately. Ensure Dalfox server interfaces are not exposed to untrusted networks. Review CI/CD pipeline access controls.

STATUS CHANGE

CVE-2026-20262 and CVE-2026-20245 (Cisco Catalyst SD-WAN Manager)

  • CISA KEV deadline is today, 2026-06-29. Federal agencies must confirm remediation is complete. All other organizations should treat this as an emergency patch.

ONGOING

  • CVE-2026-58053 (Gitea act_runner): container escape risk; upgrade beyond 0.262.0, restrict shared runner access.
  • CVE-2026-58050 and CVE-2026-58051 (libssh2): heap memory flaws; update libssh2 and all bundled applications.
  • CVE-2026-58049 (FFmpeg RASC decoder): out-of-bounds write; update FFmpeg, sandbox media pipelines.
  • CVE-2026-12415 (WordPress Invoice Generator): EPSS 0.66 privilege escalation; update or disable plugin.
  • CVE-2026-46331 (Linux kernel pedit COW): public working exploit; apply distribution kernel patches.
  • CVE-2026-43503 (Linux kernel DirtyClone): public exploit walkthrough; apply distribution kernel patches.
  • CVE-2026-49869 / CVE-2026-53576 (Kestra): CVSS 10.0; upgrade to 1.0.45 or 1.3.21.
  • CVE-2026-54350 (Budibase): CVSS 10.0; upgrade to 3.39.12.
  • CVE-2026-52785 (OpenProject): SQL injection and RCE batch; upgrade to 17.3.3 or 17.4.1.

EUROPEAN ADVISORIES

No new BSI WID or CERT-EU advisories were published in the last 24 hours.

Heise Security reports a critical vulnerability in Arista EOS network operating system that allows attackers to manipulate system data. Not all updates are yet available from Arista. Organizations running Arista EOS-based network infrastructure should monitor the Arista Security Advisory portal for patch availability and apply updates as soon as they are released. In the interim, restrict management plane access to trusted hosts and review change-detection controls on affected devices.

Previously reported open BSI advisories remain in effect: WID-SEC-2026-2093 (Keycloak), WID-SEC-2026-2091 (PowerDNS), WID-SEC-2026-2096 (Fluentd), WID-SEC-2026-2085 (WSO2 API Manager), and WID-SEC-2026-2089 (Coolify) — apply vendor patches per prior guidance.

Confirm that remediation of CVE-2026-12569 (PTC Windchill/FlexPLM) and CVE-2026-20230 (Cisco Unified CM) is complete; CISA KEV deadlines for both passed on 2026-06-28.

ACTIVE THREATS AND CAMPAIGNS

STATUS CHANGE — Russian Intelligence Signal and Messaging Credential Theft CISA and FBI updated their advisory on 2026-06-26 with a material new development: threat actors have added a step specifically targeting Signal Backup Recovery Keys. Obtaining this key allows attackers to restore the full account backup, access complete private and group message history, and maintain persistent account access even after a password change. European government, diplomatic, and military organizations using Signal should immediately audit whether any staff have received unsolicited support messages requesting backup keys, and enforce organizational policies prohibiting sharing of recovery keys via any channel.

ONGOING — SharkLoader / StrikeShark: Cobalt Strike loader targeting government and diplomatic organizations; apply Kaspersky IOCs to EDR and SIEM. ONGOING — Turla STOCKSTAY: .NET backdoor targeting Ukrainian government and Italian foreign policy entities; apply GTIG IOCs. ONGOING — Miasma supply chain malware: targeting npm packages and GitHub Actions; audit CI/CD pipeline dependencies. ONGOING — Microsoft-tracked hotel phishing campaign: photo ZIP lures dropping Node.js implant targeting European hospitality sector. ONGOING — Unit 42 large-scale credential attacks: ongoing campaigns targeting security vendor devices; enforce MFA and review exposed management interfaces.

SECURITY NEWS AND CONTEXT

KDDI Corporation disclosed a data breach affecting up to 14.2 million email login credentials across six Japanese ISPs; organizations with Japanese business relationships or shared infrastructure should assess exposure and enforce credential rotation. A browser extension, Adblock for YouTube, with over 11 million installations has been found capable of injecting arbitrary script code into any page, representing a significant enterprise endpoint risk; security teams should consider blocking or removing the extension via endpoint management policy.

RECOMMENDED ACTIONS

  1. Confirm Cisco Catalyst SD-WAN Manager (CVE-2026-20262, CVE-2026-20245) remediation is complete — CISA KEV deadline is today, 2026-06-29.
  2. Patch BerriAI LiteLLM Proxy (CVE-2026-42208) immediately — CISA KEV, pre-auth SQL injection, Metasploit module now public; rotate all stored API keys.
  3. Upgrade Dalfox Server beyond version 2.12.0 (CVE-2026-45087) — public Metasploit RCE exploit; ensure server is not internet-exposed.
  4. Monitor Arista EOS security advisories and apply patches as released — restrict management plane access in the interim.
  5. Brief staff on updated Russian intelligence Signal campaign — prohibit sharing of Signal Backup Recovery Keys via any channel; treat all unsolicited support messages as phishing.
  6. Audit enterprise endpoints for Adblock for YouTube browser extension — consider blocking via endpoint management policy.
  7. Assess exposure from KDDI credential breach if Japanese ISP email services are in use — enforce credential rotation where applicable.
  8. Continue remediation of previously reported items: CVE-2026-58053 (Gitea), CVE-2026-58050/58051 (libssh2), CVE-2026-58049 (FFmpeg), CVE-2026-12415 (WordPress), CVE-2026-46331 and CVE-2026-43503 (Linux kernel), Kestra, Budibase, OpenProject, Keycloak, PowerDNS, Fluentd, WSO2 API Manager.