Security Feed

See the latest insights and analysis from our MDR team.
RSS for Slack
CVE-2026-90553
By Roy Kalfon | 
15 September 2026

CVE-2026-90553 – vLLM LlavaOnevision2 loader ignores `trust_remote_code`, enabling model-based RCE

vLLM `

Full Feed
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS