Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
BerriAI LiteLLM
CVSS EPSS %ile KEV
— .8301 99.6 YES
AFFECTED
Product Versions Fixed
LiteLLM unspecified —
TIMELINE
Jun 8 Added to CISA KEV, remediation due 2026-06-22
Jun 8 Published
Jun 23 DUE DATE PASSED — CVE-2026-42271 (BerriAI LiteLLM). CISA remediation deadline was June 22, 2026; still in catalog.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| June 8, 2026 | KEV ADDED | Added to CISA KEV, remediation due 2026-06-22 |
| June 8, 2026 | Published | Published |
| June 23, 2026 | DUE DATE PASSED | DUE DATE PASSED — CVE-2026-42271 (BerriAI LiteLLM). CISA remediation deadline was June 22, 2026; still in catalog. |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| BerriAI | LiteLLM | — | — | — |
References
No references recorded.
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-42271 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.