{"vulnerability": "cve-2026-90553", "sightings": [{"uuid": "9cae77c9-4452-4e8d-ac6f-bf21b590c0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdaiumtdh2z", "content": "\ud83d\udfe0 CVE-2026-90553 - High (7.8)\n\nvLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90553/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T13:59:58.194921Z"}, {"uuid": "cf750f75-149f-4a9f-a344-bc859732a610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmey7k4i22", "content": "vLLM CVE-2026-90553 (CVSS 8.5) allows RCE via LlavaOnevision2 loader; update to vLLM 0.28.0 now and sandbox model loading. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T07:26:28.826977Z"}, {"uuid": "547bf1cf-3441-4d9e-a10a-59749260f34d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmfcqqud2g", "content": "vLLM CVE-2026-90553 (CVSS 8.5) allows RCE via the LlavaOnevision2 processor when trust_remote_code is ignored \u2014 update to v0.28.0. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T07:26:40.286282Z"}, {"uuid": "d2cc6e00-4177-43bc-bde1-c5b4bc983119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmfvwrx42i", "content": "vLLM CVE-2026-90553 (RCE) lets a malicious model run code in the vLLM process; patch to vLLM 0.28.0 now or disable remote processors: https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T07:27:00.072089Z"}, {"uuid": "306d4a3b-9a3e-4f6c-92f5-48618a66e5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmgdoup424", "content": "CVE-2026-90553 vLLM (<0.28.0) allows malicious models to execute code despite trust_remote_code \u2014 upgrade to v0.28.0 now (CVSS 8.5). https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T07:27:14.552388Z"}]}