Kvcache-ai
10 CVEs tracked since 2026. Since Oct 2026, none of them reached CISA KEV.
Kvcache-ai CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-10 | 10 | 0 |
Products
The products that kept showing up in Kvcache-ai's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Kvcache-ai.
- CVE-2026-106040Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC8.2
- CVE-2026-106041Mooncake Store through 0.3.13.post1 Missing Authorization via NotifyOffloadSuccess RPC6.5
- CVE-2026-106039Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPC6.5
- CVE-2026-106038Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCs8.2
- CVE-2026-106037Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service9.8
- CVE-2026-104433Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString7.5
- CVE-2026-103765Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server9.4
- CVE-2026-103764Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport9.8
- CVE-2026-103761Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue7.5
- CVE-2026-103760Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write5.9
- CVE-2026-96764kvcache-ai mooncake Regular Expression GetReplicaListByRegex allocation of resources4.3
- CVE-2026-96763kvcache-ai mooncake MountSegment Request Processing segment.cpp access control5.4
- CVE-2026-96762kvcache-ai mooncake RPC Path UnmountSegment authorization7.3
- CVE-2026-63767ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ9.8
- CVE-2026-26210KTransformers Unsafe Deserialization RCE via balance_serve9.8
The record
- Peak rank
- #158 in Oct 2026
- Busiest month shown
- Oct 2026, 10 CVEs
- Months with a KEV entry
- 0 since Oct 2026
- Monthly snapshots
- 1 since 2026