CVE-2025-62327: Insufficiently Protected Credentials

In HCL DevOps Deploy 8.1.2.0 through 8.1.2.3, a user with LLM configuration privileges may be able to recover a credential previously saved for performing authenticated LLM Queries...

SUSE CVE-2025-62155

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.9.6, a recently patched SSRF vulnerability contains a bypass method that can bypass the existing security fix and still allow SSRF to occur. Because the existing fix only applie...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-UY8W3F)

Not disclosed. Details are not yet publicly disclosed...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-N2WC5R)

Not disclosed. Details are not yet publicly disclosed...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-5N92VR)

Not disclosed. Details are not yet publicly disclosed...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-E9HBB6)

Not disclosed. Details are not yet publicly disclosed...

vLLM: undisclosed vulnerability (ZAI-2026-GPUW55)

Not disclosed. Details are not yet publicly disclosed...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-1FJWA2)

Not disclosed. Details are not yet publicly disclosed...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-QDD5RZ)

Not disclosed. Details are not yet publicly disclosed...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-RNU71A)

Not disclosed. Details are not yet publicly disclosed...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-7JW9UI)

Not disclosed. Details are not yet publicly disclosed...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-WPKN8F)

Not disclosed. Details are not yet publicly disclosed...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-WQ5SVR)

Not disclosed. Details are not yet publicly disclosed...

TensorRT-LLM: undisclosed vulnerability (ZAI-2026-2JPI59)

Not disclosed. Details are not yet publicly disclosed...

Beyond Single Bugs: Benchmarking Large Language Models for Multi-Vulnerability Detection

Large Language Models LLMs have demonstrated significant potential in automated software security, particularly in vulnerability detection. However, existing benchmarks primarily focus on isolated, single-vulnerability samples or function-level classification, failing to reflect the complexity of...

CoTDeceptor:Adversarial Code Obfuscation against CoT-Enhanced LLM Code Agents

LLM-based code agentse.g., ChatGPT Codex are increasingly deployed as detector for code review and security auditing tasks. Although CoT-enhanced LLM vulnerability detectors are believed to provide improved robustness against obfuscated malicious code, we find that their reasoning chains and...

CVE-2025-14148

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token...

CVE-2025-14148

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token...

CVE-2025-14148 IBM DevOps Deploy is susceptible to a Insufficiently Protected Credentials vulnerability

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token...

CVE-2025-14148

CVE-2025-14148 affects IBM UCD - IBM DevOps Deploy versions 8.1 through 8.1.2.3. An authenticated user with LLM integration configuration privileges can recover a previously saved LLM API Token, exposing credentials. Root cause identified as insufficiently protected credentials (CWE-522). CVSSv3....