Known Vulnerabilities for VLLM by Na
Listed below are 10 of the newest known vulnerabilities associated with "VLLM" by "Na".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-90555 json | vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated ... | Not Provided | 2026-09-12 | 2026-09-12 |
| CVE-2026-90554 json | vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video inpu... | Not Provided | 2026-09-12 | 2026-09-12 |
| CVE-2026-90553 json | vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the tr... | Not Provided | 2026-09-12 | 2026-09-12 |
| CVE-2026-78684 json | vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode pat... | Not Provided | 2026-08-25 | 2026-08-27 |
| CVE-2026-73560 json | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in vllm... | Not Provided | 2026-08-17 | 2026-08-18 |
| CVE-2026-73559 json | vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.26.0, the /v1/completions CompletionRe... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-73558 json | vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-73557 json | vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safe_load_prompt_embeds in vl... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-73556 json | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the structured_outputs.regex parameter in... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-73555 json | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validation_exception_handler in vllm/... | Not Provided | 2026-08-13 | 2026-08-14 |