AI
Product
AI Inference Server
On CISA KEVExploited in the wild
5
CVEs
1
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add AI Inference Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48710 In wildKEV | 6.5 | May 26 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks Affected: 3.3.0 through 3.3.5 |
| CVE-2026-4775 | 7.8 | Mar 24 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing Affected: 3.2.0 before 3.2.2; 3.3.0 before 3.3.5 |
| CVE-2023-52356 | 7.5 | Jan 25 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API Affected: 3.2.0 before 3.2.2; 3.3.0 |
| CVE-2026-39979 | 6.5 | Apr 13 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: 3.2.0 before 3.2.2; 3.3.0 before 3.3.5 |
| CVE-2025-6920 | 5.3 | Jul 1 | A flaw was found in the authentication enforcement mechanism of a model inference API in ai-inference-server Affected: All versions, or not specified |
Showing 5