X.Org is the open-source organization responsible for the X Window System, the fundamental display server used in most Linux and Unix environments. This vulnerability has a CVSS score of 7.8 (HIGH) and requires local access with low-privilege user authentication to exploit, but once successful, it grants an attacker high-level compromises to confidentiality, integrity, and availability with no user interaction needed. Security teams should prioritize patching X.Org systems after the April 17, 2026 vendor deadline and monitor for any suspicious local privilege escalation attempts on systems still running vulnerable versions.

Cisco, a major networking and cybersecurity equipment manufacturer, has a high-severity vulnerability (CVSS 7.2) that can be exploited remotely over the network by an authenticated attacker with high privileges, potentially compromising confidentiality, integrity, and availability of affected systems. The attack requires no user interaction and impacts only the vulnerable system itself. Security teams should monitor for this vulnerability across their Cisco infrastructure and prepare for patching once Cisco releases fixes by the April 2026 deadline.

LiteLLM, a popular open-source library that provides a unified interface for multiple large language models, has a high-severity vulnerability (CVSS 7.2) that can be exploited remotely by authenticated users with high privileges to achieve complete compromise of confidentiality, integrity, and authenticity. The attack requires network access and high-level permissions but no user interaction, making it a significant risk in environments where LiteLLM is deployed with administrative access. Security teams should monitor for patches after the April 2026 vendor deadline and assess whether their implementations expose LiteLLM to trusted internal users who could potentially abuse elevated privileges.

Bosch Rexroth is a major industrial automation and hydraulics manufacturer whose products are widely deployed in manufacturing and infrastructure environments. This high-severity local vulnerability (CVSS 7.8) requires no authentication and user interaction to execute, allowing an attacker with local access to achieve complete compromise including confidentiality, integrity, and availability impacts on affected systems. Security teams should monitor for exploitation attempts targeting Bosch Rexroth industrial control systems and ensure local access controls are strictly enforced until patches become available after April 2026.