CVE-2024-9052Critical· 9.8▾ MidnightRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
vllm <= 0.8.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114050Medium· 6.5vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine
CVE-2026-114055High· 7.5vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs
CVE-2026-105760Medium· 5.3vLLM is an inference and serving engine for large language models
CVE-2026-105757Medium· 6.5vLLM is an inference and serving engine for large language models
CVE-2026-105758Medium· 5.3vLLM is an inference and serving engine for large language models
CVE-2026-105754Medium· 6.5vLLM is an inference and serving engine for large language models