{"vulnerability": "CVE-2026-5423", "sightings": [{"uuid": "067561b5-26e8-4366-8962-897563efbbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54230", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo5jzaofah2d", "content": "CVE-2026-54230 - Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites\nCVE ID : CVE-2026-54230\n \n Published : June 13, 2026, 3:16 a.m. | 2\u00a0hours, 6\u00a0minutes ago\n \n Description : A symlink following vulnerability was found in t...", "creation_timestamp": "2026-06-13T05:37:50.304477Z"}, {"uuid": "af3f636f-5689-4551-ba0b-8235b4a1ec67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54230", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3modhaiduso2d", "content": "CVE-2026-54230 - Arbitrary file overwrite via symlink attack in libreport's ABRT event scripts. CVSS 7.0. Unpatched. Restrict access or monitor immediately. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-54230/", "creation_timestamp": "2026-06-15T14:04:10.665699Z"}, {"uuid": "e2635773-1b48-435d-ad5d-fa3cf7f2d6b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml", "content": "", "creation_timestamp": "2026-06-21T23:10:21.000000Z"}, {"uuid": "8ec85c40-3502-4d3d-9227-06079c19c3ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow4qv4vqu2m", "content": "CVE-2026-54233 - vLLM: OOM Denial of Service via Audio Decompression Bomb\nCVE ID : CVE-2026-54233\n \n Published : June 22, 2026, 10:10 p.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, vL...", "creation_timestamp": "2026-06-23T00:17:06.537015Z"}, {"uuid": "705fbb10-2fc9-4b64-bbd9-c4470bbcf8a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow5iusltg2q", "content": "CVE-2026-54236 - vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router\nCVE ID : CVE-2026-54236\n \n Published : June 22, 2026, 10:09 p.m. | 1\u00a0hour, 34\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language models (LLMs...", "creation_timestamp": "2026-06-23T00:30:29.607620Z"}, {"uuid": "28cf54cc-98ec-4d59-ad2d-18216c88f96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow5sapd2523", "content": "CVE-2026-54235 - vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels\nCVE ID : CVE-2026-54235\n \n Published : June 22, 2026, 9:59 p.m. | 1\u00a0hour, 45\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language m...", "creation_timestamp": "2026-06-23T00:35:43.885162Z"}, {"uuid": "0ac74372-4a3e-4d93-b7f1-2c80157629d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow7gveg3u2j", "content": "CVE-2026-54232 - vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile\nCVE ID : CVE-2026-54232\n \n Published : June 22, 2026, 10:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, th...", "creation_timestamp": "2026-06-23T01:05:10.436634Z"}, {"uuid": "03c0a40a-b11b-4f2f-9c50-20cd3a85e30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml", "content": "", "creation_timestamp": "2026-06-24T15:00:05.375630Z"}, {"uuid": "41603fc1-8248-4596-916e-0698e7de8c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml", "content": "", "creation_timestamp": "2026-06-25T00:00:04.604049Z"}, {"uuid": "5022fc94-944b-4f38-96f2-b70b049f02f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5423", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msq7juqo632n", "content": "CVE-2026-5423 is an authentication bypass in @neo4j/graphql that lets unauthenticated clients forge JWT claims and read subscription data.\n\n#Neo4j #GraphQL #CVE20265423 #AuthenticationBypass #JWT #InfoSec", "creation_timestamp": "2026-08-10T13:31:39.047920Z"}, {"uuid": "c8c3e578-5d8f-43de-8512-caf11abcbc22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54231", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3vg2wcb2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54231: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 ABRT \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D5241133-1112-4DFE-BCB6-4FB91AAFA13D", "creation_timestamp": "2026-06-29T18:16:58.149287Z"}, {"uuid": "f95973c2-3c3d-469f-9a07-a889592e116f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54230", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3z7euek2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54230 \u0432 ABRT: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E6418709-2B33-490A-8E17-AFB0D0BDB9FF", "creation_timestamp": "2026-06-29T18:19:05.416162Z"}, {"uuid": "a348304b-7ed4-4a42-90ed-f656f30f04eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54232", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mplgiawmxa2x", "content": "\ud83d\udccc CVE-2026-54232 - vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion... https://www.cyberhub.blog/cves/CVE-2026-54232", "creation_timestamp": "2026-07-01T11:37:07.689047Z"}, {"uuid": "9516d3bc-8a8f-4974-a559-7921e8e3bd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54234", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2rebevqb2j", "content": "CVE-2026-54234 - High-severity DoS in vLLM. Multi-request speculative decoding triggers out-of-vocabulary token crash. CVSS 7.5. No patch yet - update to v0.24.0+ immediately. #CVE #vLLM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54234/", "creation_timestamp": "2026-07-07T14:01:40.315362Z"}, {"uuid": "2e230281-64e5-43aa-9e9b-751d37fd468b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54234", "type": "published-proof-of-concept", "source": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8wr5-jm2h-8r4f", "content": "", "creation_timestamp": "2026-07-17T18:35:04.519974Z"}]}