CVE-2026-90898Vulnerability
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 26 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats“…Press), CVE-2026-89775 (Linux kernel), CVE-2026-93616, CVE-2026-85102 (Check Point), CVE-2026-93952 (Arista VeloCloud Orchestrator), CVE-2026-90898 (Bifrost), CVE-2026-86555, CVE-2026-86554, CVE-2026-86553, CVE-2026-86552 (ZTE H188A/H288A firmware), CVE-2026-94545 (Next.js), CVE-…”
-
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials“The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is disabled, which is the default configuration.”
Indicators reported together
named in the same reports- third-party[.]comin 1 report
- fbijobs[.]govin 1 report
Copy these 2 indicators · defanged
Also named with it: CVE-2026-63077, CVE-2026-28324, CVE-2026-28325, CVE-2026-87902, CVE-2026-95281, CVE-2026-95284, CVE-2026-95310, CVE-2026-95313, CVE-2026-95322, CVE-2026-95329, CVE-2026-95339, CVE-2026-95349, CVE-2026-95350, CVE-2026-95356, CVE-2026-95357, CVE-2026-93616, CVE-2026-94127, CVE-2026-87899
Thanks — we review every report.