Cyber Risks November 12, 2026 · SANS Internet Storm Center

Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)

CVE-2026-102895 is a trivial authentication-bypass vulnerability. GPUStack is also an attractive target. It is open-source software that manages clusters of GPUs, which are typically used to run AI workloads. All versions of GPUStack prior to 2.2.0, which was released at the end of June. This vulnerability was not made public until the end of July, and the CVE was assigned on November 4th.

Read the original at SANS Internet Storm Center ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2026-102895

Related

CISA Adds Four Known Exploited Vulnerabilities to Catalog Cyber Risks · Nov 09, 2026

CVE-2026-102895: GPUStack Improper Authentication Vulnerability Known Exploited Vulnerabilities · Nov 09, 2026

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026