CVE-2026-47625

NVIDIA Triton Inference Server for Linux contains a missing authorization flaw (CWE-862) that can be exploited over the network without authentication. A successful attack may result in information disclosure, data tampering, and denial of service , with a CVSS v3.1 score of 7.5 (High) driven pri...

CVE-2026-16497

NVIDIA Triton Inference Server for Linux is affected by an excessive iteration flaw (CWE-834) that allows a network-based, unauthenticated attacker to cause denial of service . The vulnerability affects versions 0.0 through 26.06 . NVIDIA rates it CVSS 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/U...

CVE-2026-16497

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-16497

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

EUVD-2026-72937

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-16497: Excessive Iteration

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

PT-2026-87139

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47625: Missing Authorization

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

PT-2026-87142

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

Security Bulletin: Triton Inference Server - September 2026

NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, clone or update this software to Triton Inference Server r26.07 or later from the NVIDIA Triton Inference Server GitHub repo. Go to NVIDIA Product Security. Details NVIDIA has released a software...

GHSA-XRQW-3RRV-VX5W vulnerabilities

Vulnerabilities for packages: open-webui, text-generation-inference...

CVE-2026-9856 vulnerabilities

Vulnerabilities for packages: open-webui, text-generation-inference...

EventSpec: Defining and Detecting Event-Semantic Issues in Blockchain Ecosystems

In recent years, smart contracts have become the backbone of decentralized applications DApps, and off-chain systems such as bridges, wallets, and indexers rely heavily on event logs to track contract execution and state changes. However, the Ethereum Virtual Machine EVM does not validate or...

EUVD-2026-71802

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki’s public Bazar entry-listing APIs are vulnerable to unauthenticated SQL injection in numeric query / queries filters. For Bazar fields whose value structure is numeric, YesWiki escapes the attacker-controlled filter value bu...

evoke-vllm (>=0.1.0, <=0.1.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2025-62164 +1 more via vllm (>=0.21.0, <=0.25.1)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.2.2 Source cves: CVE-2025-62164, CVE-2026-73557 Source advisory: GHSA-PR7F-P5MW-FC87...

evoke-vllm (>=0.1.0, <=0.1.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2026-73557 via vllm (>=0.21.0, <=0.25.1)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.2.2 Source cves: CVE-2026-73557 Source advisory: OSV:GHSA-PR7F-P5MW-FC87...

BIT-ELASTICSEARCH-2026-78607 Missing Authorization in Elasticsearch Leading to Information Disclosure

Missing Authorization CWE-862 in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse CAPEC-122. A user holding only inference execution privileges could cause outbound inference traffic to be directed to a destination of their choosing and could cause...

Elasticsearch 8.x < 8.19.19 / 9.0.x < 9.3.8 / 9.4.x < 9.4.4 / 9.5.x < 9.5.1 Information Disclosure (ESA-2026-143)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.19, or 9.0.x prior to 9.3.8, or 9.4.x prior to 9.4.4, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-143 advisory. - Missing Authorization CWE-862 in the...

PT-2026-85127

Missing Authorization CWE-862 in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse CAPEC-122. A user holding only inference execution privileges could cause outbound inference traffic to be directed to a destination of their choosing and could cause...

netsentryx — Updated!

NetSentryx PRO 🛡️ AI-Driven, High-Performance Real-Time Network Observability & Threat Detection Engine NetSentryx PRO is a next-generation, event-driven network monitoring and threat intelligence platform. Combining rule-based signatures with a PyTorch Deep Autoencoder, it provides sub-10ms packe...