{"schema":"vulnpedia.research/1","cve":"CVE-2026-116177","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-mm38-5g96-7j6x","tags":["vendor-advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-25T13:20:17.160Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-25T13:20:17.160Z","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-mm38-5g96-7j6x"},{"source":"nvd","sourceId":"CVE-2026-116177","modified":"2026-10-25T14:16:57.317","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-mm38-5g96-7j6x"},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-mm38-5g96-7j6x"}]},{"url":"https://www.vulncheck.com/advisories/vllm-0.10.2-before-0.25.0-dos-via-nemotron-vl-processor-decompression-bomb-guard-bypass","tags":["third-party-advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-25T13:20:17.160Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-25T13:20:17.160Z","url":"https://www.vulncheck.com/advisories/vllm-0.10.2-before-0.25.0-dos-via-nemotron-vl-processor-decompression-bomb-guard-bypass"},{"source":"nvd","sourceId":"CVE-2026-116177","modified":"2026-10-25T14:16:57.317","url":"https://www.vulncheck.com/advisories/vllm-0.10.2-before-0.25.0-dos-via-nemotron-vl-processor-decompression-bomb-guard-bypass"},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://www.vulncheck.com/advisories/vllm-0.10.2-before-0.25.0-dos-via-nemotron-vl-processor-decompression-bomb-guard-bypass"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-116177","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-116177"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2560435","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2560435"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-116177","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-116177"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116177","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116177"}]},{"source":"euvd","sourceId":"EUVD-2026-109438","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109438","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-109438","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109438"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii-fast/vllm-cpu-rhel9","product":"rhaii-fast/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cpu-rhel9@sha256:2e80ddd99b494b543e3b8dbb9ebff9534d8b72370858ac4eb65283563a6e196a?repository_url=registry.redhat.io/rhaii-fast/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii-fast/vllm-cuda-rhel9","product":"rhaii-fast/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cuda-rhel9@sha256:032d0e6ec60fd9356e4baacd299ce392eefa904e2a65a092c0f3691b3bd68429?repository_url=registry.redhat.io/rhaii-fast/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii-fast/vllm-gaudi-rhel9","product":"rhaii-fast/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-gaudi-rhel9@sha256:2763de8c9440c91acdcb3640f8378b6a35395592f835c8499cc0e70ee68d0397?repository_url=registry.redhat.io/rhaii-fast/vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii-fast/vllm-neuron-rhel9","product":"rhaii-fast/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-neuron-rhel9@sha256:2123ce6126c0b9399eb4f50016cef29faf48db8508b33d7d4418a99f0dbe8f8f?repository_url=registry.redhat.io/rhaii-fast/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii-fast/vllm-omni-cuda-rhel9","product":"rhaii-fast/vllm-omni-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-omni-cuda-rhel9@sha256:b3da826af410b69c2c6126f85c8ad01d46a87e2443df3a8325a0a95ddf82eb8d?repository_url=registry.redhat.io/rhaii-fast/vllm-omni-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii-fast/vllm-rocm-rhel9","product":"rhaii-fast/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-rocm-rhel9@sha256:629cb91485a91d6043867b9cbae7b5c16a73fb8570f3ebd5e611fc74962c3deb?repository_url=registry.redhat.io/rhaii-fast/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii-fast/vllm-spyre-rhel9","product":"rhaii-fast/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-spyre-rhel9@sha256:888cf46ee153054d83b4dd362ebc2ad45562824e83f2cd4a3ebac2a19d207828?repository_url=registry.redhat.io/rhaii-fast/vllm-spyre-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii-fast/vllm-tpu-rhel9","product":"rhaii-fast/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-tpu-rhel9@sha256:beae84a9d32cf6de10ce5e25ae91fd5058b49c82f30a394ce6ee8c896df72e81?repository_url=registry.redhat.io/rhaii-fast/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","product":"rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cpu-rhel9@sha256:bcd8563d0888d97cb346557d77f823ba8480daa84695e2bfb9e2e1827117fb39?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","product":"rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cuda-rhel9@sha256:8d8180e8c11b6ab6344ad42ef80ed03e35815d2fcd835b3b4ec931c64b934461?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii/vllm-gaudi-rhel9","product":"rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-gaudi-rhel9@sha256:ba46859d4cb085c111a27bc665c15e5f826320e86c03b940f7a28f40df79ad22?repository_url=registry.redhat.io/rhaii/vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii/vllm-neuron-rhel9","product":"rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-neuron-rhel9@sha256:b6e8f608e38ca2cd9ea682a51e9d84dc624171281bd59f600b7eb1fe9f508be2?repository_url=registry.redhat.io/rhaii/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii/vllm-rocm-rhel9","product":"rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii/vllm-spyre-rhel9","product":"rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-spyre-rhel9@sha256:06d05633adc879bab2f1e3e7b3b394873304f4dd520e0f2a0b84da344e9bda30?repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_ai_inference_server:rhaii/vllm-tpu-rhel9","product":"rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-tpu-rhel9@sha256:3cdf404f9f3fdda5460ccd26fdcf26e83094ac2c2cdc40ed4bf32501c6e331d8?repository_url=registry.redhat.io/rhaii/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","product":"rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-aws-cuda-rhel9@sha256:06b1e9b7df858121b6f339a5e78de93307be96c191a1c3e6df50cfeffaf9df15?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9","product":"rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-azure-cuda-rhel9@sha256:698d9e34aaf479d0149ea75b841dacbe0117ba2e3718a7088ac98ea6b081792e?repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-rocm-rhel9","product":"rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-azure-rocm-rhel9@sha256:87723c21f48eb371968e2d68346953f2a03a3cf643a967801b84696ee3e1f1e8?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","product":"rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-cuda-rhel9@sha256:e0fbb896811ab54d183e23612030072b946674824bad697bf2b3f68362651662?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-gaudi-rhel9@sha256:e1057b59ca1be9501332abf97230855e85c7df858356be0da9dce230ea7e98e1?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","product":"rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-gcp-cuda-rhel9@sha256:c1a193fa047eedbbf52be0b1d0f5d52e3e572d144a871f7c9322a34ba5abd92f?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9","product":"rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-rocm-rhel9@sha256:8fe5203e86917e5f829bd64b831cad31536d23a213b4bfe31e652577ad0faf2e?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-agent-rhel9","product":"rhoai/odh-kserve-agent-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-agent-rhel9@sha256:224998a4fd210ae1cbaa34a8764590adb2c1000073d90be80c8c1e18c32228de?repository_url=registry.redhat.io/rhoai/odh-kserve-agent-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-controller-rhel9","product":"rhoai/odh-kserve-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-controller-rhel9@sha256:988adc9396c792943cce6335c6aff8693650a9ed0ab9c5fcf1617f26f980357b?repository_url=registry.redhat.io/rhoai/odh-kserve-controller-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-router-rhel9","product":"rhoai/odh-kserve-router-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-router-rhel9@sha256:f270659c56daef0189f06a91c36aac47283d76d9a8aaef29faa9c2f8a7c09ed2?repository_url=registry.redhat.io/rhoai/odh-kserve-router-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-storage-initializer-rhel9","product":"rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9@sha256:5ced0f4f30d995e9dc3a82b9565cd692bb446deb496c8e5bc5b26d27595682d9?repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-llm-d-kv-cache-rhel9","product":"rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-llm-d-kv-cache-rhel9@sha256:cb5eedeefd2578cd9bd8637250bbe299c84539f57b4ead75d630ed9f833a6ef2?repository_url=registry.redhat.io/rhoai/odh-llm-d-kv-cache-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","product":"rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-th-torch-cuda-py312-rhel9@sha256:4d62d21bf2ad4d4ce28f9e123d9ee0585da64d59cf3c40d3d0b7d29328ddaef4?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-cuda-rhel9","product":"rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-vllm-cuda-rhel9@sha256:d6e6d515afa2f16ddff7d2384859eeaf7ad240f8f5021e0d51835b98d3f2ffd2?repository_url=registry.redhat.io/rhoai/odh-vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-rocm-rhel9","product":"rhoai/odh-vllm-rocm-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-vllm-rocm-rhel9@sha256:41b6d3cd097cf8b66e839a5a6026ed252252740470ecb1c32c87618fc82702e2?repository_url=registry.redhat.io/rhoai/odh-vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]},{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9","product":"rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-vllm-gaudi-rhel9@sha256:87eec3862eb6ddef445f89dcf6fd89add7ef202ea7c563b1ee7347537fb3e250?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-116177","modified":"2026-10-26T05:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116177.json"}]}],"vendorCoverage":{"total":31,"shown":31,"omitted":0,"source":"redhat"}}