{"data":{"id":"9476f42f-6381-496a-819c-0aa34d2d82c0","title":"CVE-2026-9540: A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component…","summary":"CVE-2026-9540 affects vllm-project vllm 0.19.0 and lies in unspecified processing of the OpenAI-compatible Serving Path. Remote manipulation of this component leads to denial of service, and the exploit is publicly available. The CVSS 4.0 base score from CNA VulDB is 5.5 (MEDIUM), and the weakness is CWE-404, Improper Resource Shutdown or Release.","solution":"The pull request to fix this issue awaits acceptance. No fixed version is stated.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-9540","publishedAt":"2026-05-26T14:16:45.803Z","cveId":"CVE-2026-9540","cweIds":["CWE-404"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["vllm@<= 0.19.0"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM","vllm-project vllm 0.19.0"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vllm-project vllm denial of service in OpenAI-compatible serving path","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00724,"epssCheckedAt":"2026-10-14T12:12:42.648Z","kevDateAdded":null,"advisoryAliases":["GHSA-98f3-hwg4-4rf7"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:08.131Z","patchAvailable":null,"disclosureDate":"2026-05-26T14:16:45.803Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}