CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

20610 matches found

Rapid7 Vulnerability Database (full)•added 2026/04/20 12:00 a.m.•7 views

CVE-2026-6599: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function getclientip/installmcpconfig of the file src/backend/base/langflow/api/v1/mcpprojects.py of the component Model Context Protocol Configuration API. Performing a manipulation of the argument...

6.5CVSS6.3AI score0.00393EPSS

SaveExploits0References3

Packet Storm News•added 2026/04/20 12:00 a.m.•46 views

ARES: Adaptive Red-Teaming and End-To-End Repair of Policy-Reward System

Reinforcement Learning from Human Feedback RLHF is central to aligning Large Language Models LLMs, yet it introduces a critical vulnerability: an imperfect Reward Model RM can become a single point of failure when it fails to penalize unsafe behaviors. While existing red-teaming approaches...

5.8AI score

SaveExploits0

CNNVD•added 2026/04/20 12:00 a.m.•24 views

Serge security vulnerabilities

Serge is an open-source web interface for chatting through llama.cpp. Versions of Serge prior to 1.4TB contain security vulnerabilities. These vulnerabilities stem from improper handling of the downloadmodel/deletemodel function in the file api/src/serge/routers/model.py, which may lead to lack o...

6.9CVSS6.6AI score0.00723EPSS

SaveExploits0References1

CNNVD•added 2026/04/20 12:00 a.m.•34 views

SGLang security vulnerabilities

SGLang is a programming language and runtime system developed by SGL-project, aimed at accelerating large model inference. SGLang has a security vulnerability. This vulnerability arises from loading model files that contain malicious tokenizer/chattemplate components. As a result, the Jinja2 chat...

9.8CVSS9AI score0.01141EPSS

SaveExploits2References2

CERT•added 2026/04/20 12:00 a.m.•33 views

SGLang is vulnerable to remote code execution when rendering chat templates from a model file

Overview A remote code execution vulnerability has been discovered in the SGLang project, specifically in the reranking endpoint /v1/rerank. A CVE has been assigned to track the vulnerability; CVE-2026-5760. An attacker can create a malicious model for SGLang to achieve RCE. Successful exploitati...

9.8CVSS9.1AI score0.01141EPSS

SaveExploits2References6

Packet Storm News•added 2026/04/19 12:00 a.m.•42 views

SDLLMFuzz: Dynamic-Static LLM-Assisted Greybox Fuzzing for Structured Input Programs

Fuzzing has become a widely adopted technique for vulnerability discovery, yet it remains ineffective for structured-input programs due to strict syntactic constraints and limited semantic awareness. Traditional greybox fuzzers rely on mutation-based strategies and coarse-grained coverage feedbac...

6AI score

SaveExploits0