| CVE-2026-115918 |
vLLM is an inference and serving engine for large language models
|
6.5
Medium
|
Oct 26, 2026 |
| CVE-2026-115917 |
vLLM is an inference and serving engine for large language models
|
3.4
Low
|
Oct 26, 2026 |
| CVE-2026-115916 |
vLLM is an inference and serving engine for large language models
|
6.5
Medium
|
Oct 26, 2026 |
| CVE-2026-115915 |
vLLM is an inference and serving engine for large language models
|
8.1
High
|
Oct 26, 2026 |
| CVE-2026-115914 |
vLLM is an inference and serving engine for large language models
|
6.5
Medium
|
Oct 26, 2026 |
| CVE-2026-115913 |
vLLM is an inference and serving engine for large language models
|
6.5
Medium
|
Oct 26, 2026 |
| CVE-2026-115912 |
vLLM is an inference and serving engine for large language models
|
7.5
High
|
Oct 26, 2026 |
| CVE-2026-115911 |
vLLM is an inference and serving engine for large language models
|
6.5
Medium
|
Oct 26, 2026 |
| CVE-2026-116180 |
vLLM from 0.8.5 before 0.31.0 has a denial of service flaw
|
8.3
High
|
Oct 25, 2026 |
| CVE-2026-116181 |
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash…
|
7.1
High
|
Oct 25, 2026 |
| CVE-2026-116179 |
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the…
|
8.7
High
|
Oct 25, 2026 |
| CVE-2026-116177 |
vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated…
|
8.7
High
|
Oct 25, 2026 |
| CVE-2026-116178 |
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the…
|
8.2
High
|
Oct 25, 2026 |
| CVE-2026-116176 |
vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector
|
8.8
High
|
Oct 25, 2026 |
| CVE-2026-116174 |
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and…
|
8.2
High
|
Oct 25, 2026 |
| CVE-2026-116175 |
vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path…
|
7.1
High
|
Oct 25, 2026 |
| CVE-2026-116173 |
vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate…
|
8.2
High
|
Oct 25, 2026 |
| CVE-2026-116172 |
vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n
|
8.2
High
|
Oct 25, 2026 |
| CVE-2026-114055 |
vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients…
|
8.7
High
|
Oct 21, 2026 |
| CVE-2026-114054 |
vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache…
|
7.1
High
|
Oct 21, 2026 |
| CVE-2026-114052 |
vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a…
|
8.7
High
|
Oct 21, 2026 |
| CVE-2026-114053 |
vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers…
|
9.2
Critical
|
Oct 21, 2026 |
| CVE-2026-114051 |
vLLM before 0.31.0 skips the…
|
7.1
High
|
Oct 21, 2026 |
| CVE-2026-114050 |
vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on…
|
7.1
High
|
Oct 21, 2026 |
| CVE-2026-114049 |
vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain…
|
6.3
Medium
|
Oct 21, 2026 |