> CVE-2026-5757

« BACK_TO_HOME
PUBLISHED
2026-06-26 16:16
MODIFIED
2026-06-26 16:16
EPSS (Prob. Exploit)
0.74%
Top 45.6%
DATA SOURCES:
NVD 🔗 2026-06-26 FIRST EPSS 🔗 2026-11-01 GITHUB 🔗 2026-10-29 OSV 🔗 2026-11-02

> DESCRIPTION

Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-5426-92w4-wvhv MODERATE

plone.app.dexterity has a Denial of Service due to excessive title or description length

AFFECTED PACKAGES:
PIP / plone.app.dexterity
<= 3.2.2
Fixed in: 3.2.3
PIP / plone.app.dexterity
>= 4.0.0, <= 4.1.2
Fixed in: 4.1.3
PIP / plone.app.dexterity
= 5.0.0
Fixed in: 5.0.1

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine

AFFECTED PACKAGES:
Unknown / Unknown
360 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
26/06/2026 16:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 4 months ago

> REFERENCES

https://kb.cert.org/vuls/id/518910
https://ollama.com
https://www.kb.cert.org/vuls/id/518910
« BACK_TO_HOME