Threats Tagged 'cve-2026-42311'
View all threats tagged with 'cve-2026-42311'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-42311'
Click on any threat for detailed analysis and mitigation recommendations
Red Hat AI Inference Join the discussion | GCVE Database | 09/23/2026, 17:13:26 UTC Added: 09/22/2026, 02:04:23 UTC |
Red Hat® AI Inference Server Join the discussion | GCVE Database | 08/31/2026, 13:42:22 UTC Added: 05/26/2026, 20:58:34 UTC |
CVE-2026-34753 is a server-side request forgery (SSRF) vulnerability found in the vLLM component of Red Hat AI Inference Server 3.4.4. It allows an attacker who can control batch input JSON to make arbitrary HTTP/HTTPS requests from the server, potentially accessing internal services such as cloud metadata endpoints or internal HTTP APIs. No official fix or patch is currently available from Red Hat for this vulnerability. The vulnerability has a Red Hat CVSS score of 5.4 (medium severity) but is assessed here as high severity due to the potential for information disclosure and further system compromise. Join the discussion | GCVE Database | 08/20/2026, 07:57:23 UTC Added: 08/20/2026, 14:08:45 UTC |
Red Hat AI Inference Join the discussion | GCVE Database | 08/20/2026, 07:57:23 UTC Added: 08/20/2026, 14:08:45 UTC |
0 This security update for python-Pillow addresses multiple vulnerabilities including arbitrary code execution via malicious PSD file processing, and several issues involving excessive memory allocation triggered by crafted font and image files. These vulnerabilities could lead to denial of service or code execution. The update fixes five distinct CVEs related to memory allocation and decompression bomb protection bypass. No specific affected versions are provided in the data. Join the discussion | GCVE Database | 07/10/2026, 09:38:55 UTC Added: 09/17/2026, 01:59:10 UTC |
Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0. Join the discussion | CVE Database V5 | 05/12/2026, 08:54:05 UTC Added: 05/09/2026, 05:22:50 UTC |
Red Hat® AI Inference Server Join the discussion | GCVE Database | 05/11/2026, 15:49:50 UTC Added: 05/27/2026, 21:15:26 UTC |
Showing 1 to 7 of 7 results