Exploit for Authentication Bypass Using an Alternate Path or Channel in Nvidia Triton_Inference_Server

CVE-2026-24207 / 24206 — NVIDIA Triton Inference Server SageMa...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Nvidia Triton_Inference_Server

CVE-2026-24207 / 24206 — NVIDIA Triton Inference Server SageMa...

Critical: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (CUDA)

Red Hat AI Inference Server 3.3.5 CUDA is now available. Red Hat® AI Inference Server...

Critical: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (ROCm)

Red Hat AI Inference Server 3.3.5 ROCm is now available. Red Hat® AI Inference Server...

Critical: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (Spyre)

Red Hat AI Inference Server 3.3.5 Spyre is now available. Red Hat® AI Inference Server...

Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.5 (CUDA)

Red Hat AI Inference Server Model Optimization Tools 3.3.5 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...

Your AI Cost Model Stops at the Token Price. The Bill Doesn't.

Your AI cost model stops at the token price, but the bill doesn't. Discover why almost 80% of production AI spend sits in inference and how to optimize your setup...

CVE-2026-54235

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.23.1rc0, ll temperature validation gates use comparison operators , which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagat...

CVE-2026-53923

vLLM is an inference and serving engine for large language models LLMs. From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels csrc/quantization/gguf/ggufkernel.cu causes partial tensor processing. The output tensor is allocated at full size via...

CVE-2026-54235 vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.23.1rc0, ll temperature validation gates use comparison operators , which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagat...

mlopspython-inference (>=67580760626172675.0.0, <=757069802391466481559610331145) potentially affected by CVE-2026-12479 via keras (2.12.0rc0)

keras PYPI version 2.12.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - mlopspython-inference =67580760626172675.0.0, =757069802391466481559610331145 Source cves: CVE-2026-12479 Source advisory: OSV:GHSA-GH82-F9X8-5FRX...

CITADEL: CSI-Based Jamming Detection and Open-Set Classification for IIoT Networks

Radio frequency jamming poses a critical threat to the availability of wireless Industrial Internet of Things IIoT networks. Existing detection and classification techniques are poorly suited to this setting: coarse signal-strength and cross-layer features lack information richness, while raw I/Q...

pharia-inference-sdk (0.1.0), solace-agent-mesh (>=1.8.0, <=1.28.4) potentially affected by CVE-2026-55865 via python-liquid (>=2.0.2, <=2.2.0)

python-liquid PYPI version =2.0.2, =1.8.0, =1.28.4 Source cves: CVE-2026-55865 Source advisory: SNYK:PYTHON-PYTHONLIQUID-17458912...

pharia-inference-sdk (0.1.0), solace-agent-mesh (>=1.8.0, <=1.28.4) potentially affected by CVE-2026-55865 via python-liquid (>=2.0.2, <=2.2.0)

python-liquid PYPI version =2.0.2, =1.8.0, =1.28.4 Source cves: CVE-2026-55865 Source advisory: GHSA-VQ2F-VCC9-J8MV...

pharia-inference-sdk (0.1.0), solace-agent-mesh (>=1.8.0, <=1.28.4) potentially affected by CVE-2026-55865 via python-liquid (>=2.0.2, <=2.2.0)

python-liquid PYPI version =2.0.2, =1.8.0, =1.28.4 Source cves: CVE-2026-55865 Source advisory: OSV:GHSA-VQ2F-VCC9-J8MV...

pharia-data-sdk (>=0.1.1, <=0.1.6), pharia-inference-sdk (>=0.1.2, <=0.1.6) +1 more potentially affected by CVE-2026-55865 via python-liquid (1.9.4)

python-liquid PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on python-liquid and may be impacted: - pharia-data-sdk =0.1.1, =0.1.2, =0.1.0, =0.1.7 Source cves: CVE-2026-55865 Source advisory: OSV:GHSA-VQ2F-VCC9-J8MV...

CVE-2026-53805

NVIDIA Spatial Intelligence Lab's SIL GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-model endpoints deserialize raw HTTP request bodies using Python's pickle.loads without authentication or input validation...

CVE-2026-53805 NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API

NVIDIA Spatial Intelligence Lab's SIL GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-model endpoints deserialize raw HTTP request bodies using Python's pickle.loads without authentication or input validation...

CVE-2026-53805

CVE-2026-53805 affects NVIDIA Spatial Intelligence Lab’s GEN3C. It describes an unauthenticated remote code execution vulnerability in the inference API server, exploitable via /request-inference and /seed-model endpoints that deserialize raw HTTP bodies with Python pickle.loads() without authent...

EUVD-2026-37762

NVIDIA Spatial Intelligence Lab's SIL GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-model endpoints deserialize raw HTTP request bodies using Python's pickle.loads without authentication or input validation...