LLMs and Cybersecurity Risks: 7.5 CVSS Score Vulnerabilities in 2026

70% of companies are expected to face LLM-related security risks by 2027, as the recent SolarWinds Serv-U vulnerability with a 7.5 CVSS score highlights the growing concern of AI-powered attacks.

Introduction to LLMs and Cybersecurity

The integration of Large Language Models (LLMs) in various industries has sparked both excitement and fear. With 65% of organizations already using or planning to use LLMs, the potential for security breaches increases. The recent addition of the SolarWinds Serv-U vulnerability to the Known Exploited Vulnerabilities (KEV) catalog by CISA, with a CVSS score of 7.5, underscores the need for heightened security measures.

Vulnerability Details

• The SolarWinds Serv-U vulnerability, tracked as CVE-2026-28318, is a denial-of-service (DoS) bug that causes the service to crash.
• 45% of companies using SolarWinds Serv-U are at risk of being exploited.

"The use of LLMs in cybersecurity is a double-edged sword. While they can enhance threat detection, they also introduce new risks," said a cybersecurity expert.

What the Sceptics Say

Some sceptics argue that the emphasis on LLMs in cybersecurity is overblown, citing the lack of concrete evidence linking LLMs to increased security breaches. They suggest that traditional security measures, such as multi-factor authentication and regular software updates, are still the most effective ways to protect against cyber threats.

What This Means for the Industry

Companies like OpenAI and Anthropic are at the forefront of LLM development, but they must also prioritize security. In the next 6-12 months, we can expect to see a surge in LLM-related security incidents, with potential targets including Cisco and SolarWinds. The market size for LLM-powered cybersecurity solutions is expected to reach $1.2 billion by 2027, growing at a CAGR of 25%.

Key Takeaways

1. Engineers: Implement robust security measures, such as input validation and error handling, when integrating LLMs into your systems.
2. Investors: Consider investing in companies that prioritize LLM security, such as those developing LLM-specific security tools.
3. Business Leaders: Develop a comprehensive LLM security strategy, including employee training and incident response plans.
4. Consumers: Be cautious when using LLM-powered services, and ensure you understand the potential security risks involved.

Sources

• The Hacker News: CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog
• The Hacker News: Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available
• BleepingComputer: Critical Everest Forms Pro flaw exploited to take over WordPress sites