NVD disclosure day

Published threat advisories for March 9, 2026

CVE-2026-25960

vLLM SSRF Protection Bypass Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A Server-Side Request Forgery (SSRF) vulnerability in vLLM, an LLM serving engine, can be bypassed due to inconsistent URL parsing, potentially allowing attackers to access internal network resources or execute arbitrary code.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2026-3823

Atop EHG2408 Stack Buffer Overflow Allows Remote Code Execution.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A stack-based buffer overflow vulnerability exists in Atop Technologies EHG2408 series switches, permitting unauthenticated remote attackers to execute arbitrary code. This could allow attackers to control program execution flow on affected devices.

NVD modified: NVD date unavailable