Read the docs
Red Hat Security Advisory

RHSA-2026:30089

Red Hat AI Inference Server 3.3.5 (CUDA)

Released 2026-06-25 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 21 records

TI-2026-36017 CVE-2026-48746 · GHSA-94f4-hr76-p5j6

vLLM: OpenAI auth bypass

Priority HIGH 78

vLLM is an inference and serving engine for large language models (LLMs).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01152 Published 2026-06-22 Partial fix · 0.22.0 CWE-444
Priority HIGH 67

vLLM is an inference and serving engine for large language models (LLMs).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18287 Published 2026-02-02 Partial fix · 0.14.1 CWE-532
Priority MEDIUM 42

Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00579 Published 2026-04-13 Partial fix · 3.10.21, 3.11.16 +4 CWE-416
Priority LOW 38

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (pres…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00573 Published 2026-04-02 Partial fix · 10.3 CWE-281
Priority LOW 36

A flaw was found in Poppler's Splash backend.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00252 Published 2026-06-01 Fixed in 24.02.0-7.el10_2.2, 24.02.0-7.el10_0.1 +16 CWE-190