CVE-2026-24266: Use After Free

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-56300 Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functions

Capgo before 12.128.2 contains unauthenticated security definer RPC functions getuserid and getorgpermforapikey that expose API key validity oracles and user UUID disclosure. Unauthenticated attackers using the public API key can validate leaked keys, enumerate users and apps, and determine...

Security Bulletin: NVIDIA Triton Inference Server - June 2026

NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, clone or update this software to Triton Server r26.04 or later from the NVIDIA Triton Inference Server GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potentia...

A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems

Large language models are no longer only text generators. They are increasingly embedded in retrieval pipelines, enterprise assistants, coding environments, robotic systems, security-operation workflows, and autonomous agents that can read private data, call tools, write files, execute code, and...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the SortingImpl.getValidSortingRules process. An attacker can infer the values of restricted fields by analyzing the order of rows returned through both JSON:API and GraphQL read paths. Remediation There is no...

CVE-2026-53923

A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Nvidia Triton_Inference_Server

CVE-2026-24207 / 24206 — NVIDIA Triton Inference Server SageMa...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Nvidia Triton_Inference_Server

CVE-2026-24207 / 24206 — NVIDIA Triton Inference Server SageMa...

Critical: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (CUDA)

Red Hat AI Inference Server 3.3.5 CUDA is now available. Red Hat® AI Inference Server...

Critical: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (ROCm)

Red Hat AI Inference Server 3.3.5 ROCm is now available. Red Hat® AI Inference Server...

Critical: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (Spyre)

Red Hat AI Inference Server 3.3.5 Spyre is now available. Red Hat® AI Inference Server...

Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.5 (CUDA)

Red Hat AI Inference Server Model Optimization Tools 3.3.5 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...

Your AI Cost Model Stops at the Token Price. The Bill Doesn't.

Your AI cost model stops at the token price, but the bill doesn't. Discover why almost 80% of production AI spend sits in inference and how to optimize your setup...

CVE-2026-54235

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.23.1rc0, ll temperature validation gates use comparison operators , which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagat...

CVE-2026-53923

vLLM is an inference and serving engine for large language models LLMs. From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels csrc/quantization/gguf/ggufkernel.cu causes partial tensor processing. The output tensor is allocated at full size via...

CVE-2026-54235 vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.23.1rc0, ll temperature validation gates use comparison operators , which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagat...

mlopspython-inference (>=67580760626172675.0.0, <=757069802391466481559610331145) potentially affected by CVE-2026-12479 via keras (2.12.0rc0)

keras PYPI version 2.12.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - mlopspython-inference =67580760626172675.0.0, =757069802391466481559610331145 Source cves: CVE-2026-12479 Source advisory: OSV:GHSA-GH82-F9X8-5FRX...

CITADEL: CSI-Based Jamming Detection and Open-Set Classification for IIoT Networks

Radio frequency jamming poses a critical threat to the availability of wireless Industrial Internet of Things IIoT networks. Existing detection and classification techniques are poorly suited to this setting: coarse signal-strength and cross-layer features lack information richness, while raw I/Q...

pharia-inference-sdk (0.1.0), solace-agent-mesh (>=1.8.0, <=1.28.4) potentially affected by CVE-2026-55865 via python-liquid (>=2.0.2, <=2.2.0)

python-liquid PYPI version =2.0.2, =1.8.0, =1.28.4 Source cves: CVE-2026-55865 Source advisory: SNYK:PYTHON-PYTHONLIQUID-17458912...

pharia-inference-sdk (0.1.0), solace-agent-mesh (>=1.8.0, <=1.28.4) potentially affected by CVE-2026-55865 via python-liquid (>=2.0.2, <=2.2.0)

python-liquid PYPI version =2.0.2, =1.8.0, =1.28.4 Source cves: CVE-2026-55865 Source advisory: GHSA-VQ2F-VCC9-J8MV...