KV
Vendor
kvcache-ai
15
CVEs
0
On KEV
10
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-106041 | MO Mooncake kvcache-ai | 6.5 | Oct 6 | Mooncake Store through 0.3.13.post1 Missing Authorization via NotifyOffloadSuccess RPC |
| CVE-2026-106040 | MO Mooncake kvcache-ai | 8.2 | Oct 6 | Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC |
| CVE-2026-106039 | MO Mooncake kvcache-ai | 6.5 | Oct 6 | Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPC |
| CVE-2026-106038 | MO Mooncake kvcache-ai | 8.2 | Oct 6 | Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCs |
| CVE-2026-106037 | MO Mooncake kvcache-ai | 9.8 | Oct 6 | Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service |
| CVE-2026-104433 | MO Mooncake kvcache-ai | 7.5 | Oct 2 | Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString |
| CVE-2026-103765 | MO Mooncake kvcache-ai | 9.4 | Oct 1 | Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server |
| CVE-2026-103764 | MO Mooncake kvcache-ai | 9.8 | Oct 1 | Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport |
| CVE-2026-103761 | MO Mooncake kvcache-ai | 7.5 | Oct 1 | Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue |
| CVE-2026-103760 | MO Mooncake kvcache-ai | 5.9 | Oct 1 | Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write |
| CVE-2026-96764 | MO mooncake kvcache-ai | 4.3 | Sep 24 | kvcache-ai mooncake Regular Expression GetReplicaListByRegex allocation of resources |
| CVE-2026-96763 | MO mooncake kvcache-ai | 5.4 | Sep 24 | kvcache-ai mooncake MountSegment Request Processing segment.cpp access control |
| CVE-2026-96762 | MO mooncake kvcache-ai | 7.3 | Sep 23 | kvcache-ai mooncake RPC Path UnmountSegment authorization |
| CVE-2026-63767 | KT ktransformers kvcache-ai | 9.8 | Jul 20 | ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ |
| CVE-2026-26210 | KT ktransformers kvcache-ai | 9.8 | Apr 23 | KTransformers Unsafe Deserialization RCE via balance_serve |