CVE-2026-56340

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

June 20, 2026

Last Seen

June 21, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-56340: High-Risk Denial of Service Vulnerability in vLLM70.5

A critical vulnerability, CVE-2026-56340, affects vLLM versions 0.10.2 to 0.12.x, which lack sparse tensor validation in multimodal embeddings processing. Attackers can exploit this flaw by submitting malformed tensor indices to cause denial of service through crashes or resource exhaustion. The vul...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

CVE-2026-56340: High-Risk Denial of Service Vulnerability in vLLM

Jun 21·2 sources

Related Articles (2)

CVE-2026-56340: vLLM - Denial of Service via Unvalidated Multimodal Embeddings [HIGH] CVSS 8.8 Exploit Intelligence — Recent CVEs / 8h vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests with malformed (negative or out-of-bounds) tensor indices, when the pro

exploit-intel.com·Jun 21

CVE-2026-56340 - Exploits & Severity

Related Entities

DDoS Denial of Service Cwe-787 - Out-of-bounds Write PyTorch VLLM