CVE-2026-123203

The NEURON (CoreNEURON) simulator, versions through 9.0.2 , is vulnerable to a stack-based buffer overflow (CWE-121). The root cause occurs when nrniv-core loads a crafted model dataset containing over-long version or mechanism-name tokens within the bbcore_mech.dat, globals.dat, or files.dat fil...

EUVD-2026-117648

NEURON CoreNEURON through 9.0.2 contains a stack buffer overflow vulnerability that allows attackers to corrupt stack memory by supplying over-long tokens in a crafted model dataset. Attackers can place oversized version or mechanism-name tokens in bbcoremech.dat, globals.dat, or files.dat loaded...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (Neuron)

Red Hat AI Base Images 3.5.5 Neuron is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (Neuron)

Red Hat AI Base Images 3.4.6 Neuron is now available. Red Hat® AI Base Images...

Analyzing and Mitigating Poisoning Attacks on Flow-Based Intrusion Detection

Although Artificial Intelligence AI-based Intrusion Detection Systems IDSs are increasingly deployed in operational networks, their dependence on large-scale training data introduces a critical vulnerability to stealthy poisoning attacks. We demonstrate that latent backdoors can be successfully...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.4 (Neuron)

Red Hat AI Base Images 3.4.4 Neuron is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.5 (Neuron)

Red Hat AI Base Images 3.3.5 Neuron is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.3 (Neuron)

Red Hat AI Base Images 3.4.3 Neuron is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.4 (Neuron)

Red Hat AI Base Images 3.3.4 Neuron is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (Neuron)

Red Hat AI Base Images 3.3.3 Neuron is now available. Red Hat® AI Base Images...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-9856 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

exciton (>=2.5.3, <=2.9.3), invokeai (>=4.1.0, <=4.2.3) +2 more potentially affected by CVE-2026-69112 via accelerate (0.29.2)

accelerate PYPI version 0.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - exciton =2.5.3, =4.1.0, =0.0.23, =0.2.2 - recis-gpu 1.0.0.dev1 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

exciton (>=2.5.3, <=2.9.3), invokeai (>=4.1.0, <=4.2.3) +2 more potentially affected by CVE-2026-69112 via accelerate (0.29.2)

accelerate PYPI version 0.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - exciton =2.5.3, =4.1.0, =0.0.23, =0.2.2 - recis-gpu 1.0.0.dev1 Source cves: CVE-2026-69112 Source advisory: OSV:GHSA-4J2P-28Q2-5M79...

SparSEEty: Extracting Tokens from Sparsity-Exploiting LLM Serving Systems Via Deterministic Side Channels

Modern large language models LLMs exhibit activation sparsity, wherein only a subset of their neurons is activated for given input tokens. Researchers have leveraged this property to optimize LLM serving systems by omitting weight accesses and computations pertaining to inactive neurons...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-9856 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

Which Neurons Detect Malicious Code? A Probing Study of LLM Security Knowledge

Background. Large language models LLMs have become increasingly capable of understanding and generating source code, leading to their widespread adoption in software engineering tasks such as code completion, repair, and vulnerability detection. However, despite their strong empirical performance...

Neuron Golem OEE MES path traversal vulnerability

Neuron Golem OEE MES is a manufacturing execution system and equipment integrated efficiency management platform developed by the Polish company Neuron. The Neuron Golem OEE MES has a path traversal vulnerability, which stems from a path traversal flaw. This vulnerability could allow attackers...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-5241 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-2290...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-4372 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G72...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-4372 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...