CVE-2026-116180

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 25, 2026

Last Seen

October 25, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Impact Denial of Service Vulnerability in vLLM Project64.5

A denial of service vulnerability (CVE-2026-116180) has been identified in vLLM versions 0.8.5 to 0.31.0. The flaw arises from the LogprobsTensors.empty_cpu() function, which allocates an uninitialized int32 tensor, causing the EngineCore to crash when specific API requests are made. This affects mu...