vLLM – Authentication Bypass via Host Header Manipulation (CVE-2026-48746)

Scope: vLLM AI Inference Deployments, All Vulnerable Versions

Severity: High

Read More

Claude Code – Indirect Prompt Injection and WebFetch Data Exfiltration (CVE-2026-54316)

Scope: Anthropic Claude Code Developer Tool, All Vulnerable Versions

Severity: High

Read More

n8n – Credential Vault Exfiltration via Endpoint Abuse (CVE-2026-56348)

Scope: n8n Workflow Automation Platform, All Vulnerable Versions

Severity: High

Read More

CPython configparser – Configuration Injection via Carriage Return (CVE-2026-0864)

Scope: CPython, All Versions Prior to 3.15.0

Severity: Medium

Read More

Dell AIOps Collector Hard-Coded Default Credentials Allow Unauthorized Filesystem Access (CVE-2026-32652)

Scope: Dell AIOps Collector Versions Prior to 1.18.3 (Fresh Installations Only)

Severity: High

Read More

Cisco Identity Services Engine Authenticated Remote Code Execution and Root Privilege Escalation (CVE-2026-20181 / CVE-2026-20190)

cope: Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), All Versions Prior to Fixed Releases

Severity: Red

Read More