Critical Alert 3 Active Exploits Detected Today

CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability →
CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability →
CVE-2026-72898 Metabase SQL Injection Vulnerability →
Powered by CVE Watchtower
×
August 13, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-5757NVD

Vulnerability Summary

Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.
Severity Level
HIGH(7.5)
Published Date
Jun 26, 2026
Last Modified
Jun 29, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.55%Probability
Root Weakness (CWE)
The software reads data past the end, or before the beginning, of the intended buffer.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityNone
AvailabilityNone