CVE-2026-86242Vulnerability
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials“CVE-2026-86242 (CVSS score: 8.1) allows an unauthenticated attacker to register a custom plugin whose path is an HTTP URL.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-90898, CVE-2026-55245
Thanks — we review every report.