[{"data":1,"prerenderedAt":51},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-126397":3},{"l":4,"details":25,"weitere":28,"indexierbar":10,"updated":50},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"epss":18,"slug":21,"bereich":22,"schweregrad":23,"art":24,"produktLabel":8},"CVE-2026-126397","gemeldet","","vLLM","2026-11-13",false,[12],"CWE-400",{"version":14,"score":15,"severity":16,"vector":17},"4.0",8.7,"HIGH","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"score":19,"percentile":20},0.00655,0.51952,"cve-2026-126397","dev","hoch","Unkontrollierter Ressourcenverbrauch",{"description":26,"refs":27},"vLLM from 0.10.1 before 0.31.0 forwards a request-controlled mm_processor_kwargs.max_patches value to the Hugging Face processor for Cohere2 Vision models without a server-side upper bound, causing quadratic CPU work during multimodal preprocessing. Remote clients can send small image chat-completion requests with large, varying max_patches values to bypass the LRU cache, exhaust preprocessing workers, and deny service to other clients.",[],[29,36,45],{"cve":30,"status":6,"produktLabel":31,"vendor":7,"product":31,"art":32,"bereich":22,"schweregrad":33,"score":34,"epss":35,"added":9,"ransomware":10},"CVE-2026-128027","FrankenPHP Docker images","Schwachstelle","kritisch",9.3,0.00857,{"cve":37,"status":6,"produktLabel":38,"vendor":39,"product":40,"art":41,"bereich":22,"schweregrad":33,"score":42,"epss":43,"added":44,"ransomware":10},"CVE-2026-120779","Microsoft Visual Studio Code","Microsoft","Visual Studio Code","Einschleusen von Programmcode (Code Injection)",9.6,0.0064,"2026-11-10",{"cve":46,"status":6,"produktLabel":38,"vendor":39,"product":40,"art":47,"bereich":22,"schweregrad":23,"score":48,"epss":49,"added":44,"ransomware":10},"CVE-2026-119975","Einschleusen von Skripten in Webseiten (Cross-Site Scripting)",8.8,0.00882,"2026-11-14T11:41:59.691Z",1794656591636]