UpstreamscvelistV5 00:11ZCISA KEV 00:16ZVulnrichment 00:11ZNVD 00:11ZEPSS 00:16Zdaily run 06:05 UTC · next hourly 01:15

Thu 5 Nov 2026

Today

120 new ≥ 9.0 · 11 actionable · gpustack clear

PriorityVulnerabilityCVSSEPSSSignals

gpustack2 vulnerabilitiesMax CVSS 9.8Priority 35KEV 0

35

CVE-2026-102895

gpustack gpustack · GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin

9.80.3%

31

CVE-2026-102894

gpustack gpustack · GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover

9.10.3%

CVSS ×30KEV +30EPSS ×20exploit +10 · SSVC +10how the score works