CVE-2026-71486

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v1/completions/derender and /v1/chat/completions/derender endpoints accept caller-supplied GenerateResponse objects whose generateresponses, choices, tokenids, promptlogprobs, logprobs.content, toplogprobs, a...

CVE-2026-71486 vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v1/completions/derender and /v1/chat/completions/derender endpoints accept caller-supplied GenerateResponse objects whose generateresponses, choices, tokenids, promptlogprobs, logprobs.content, toplogprobs, a...

MINI-W8CP-WW84-HM34

Bulletin has no description...

MINI-5RP5-MJ84-GFR7

Bulletin has no description...

MINI-RJ2C-FQVG-M47V

Bulletin has no description...

MINI-CCCF-R95F-P74M

Bulletin has no description...

MINI-RHQQ-JRG5-GQXC

Bulletin has no description...

MINI-M4F4-Q4V9-V5R8

Bulletin has no description...

MINI-G5JV-5XVH-GXM4

Bulletin has no description...

MINI-V7R3-WQM8-QWVQ

Bulletin has no description...

Security Bulletin: IBM Financial Transaction Manager v4.0.6.0 is impacted by multiple vulnerabilities in RedHat Universal Base Image

Summary IBM Financial Transaction Manager v4.0.6.0 has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-5914 DESCRIPTION: A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves a...

MINI-R4P5-H6PM-QWFC

Bulletin has no description...

MINI-FXJ3-W3J2-X7J3

Bulletin has no description...

MINI-6H7R-C37Q-GMJ5

Bulletin has no description...

MINI-HHRG-QP8J-884C

Bulletin has no description...

MINI-2Q75-VCRM-MF34

Bulletin has no description...

MINI-3MXM-CCP3-HVQJ

Bulletin has no description...

MINI-H263-F4P6-C6QF

Bulletin has no description...

MINI-RP3X-QWP7-M6MG

Bulletin has no description...

CVE-2026-72678

A flaw was found in Elasticsearch. An authenticated user with read privileges can submit a crafted request that causes the node to attempt an excessively large memory allocation due to unvalidated user input. This memory exhaustion leads to a fatal error, terminating the Elasticsearch node proces...