https://poc.intelseclab.com/tags/model-loading/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-24207-triton-sagemaker-auth-bypass-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-24207-triton-sagemaker-auth-bypass-rce/Critical severity (CVSS 9.8) — network · CVE-2026-24207 (sibling: CVE-2026-24206, Vertex AI, analysis only). Status: Weaponized. Affects: NVIDIA Triton Inference Server. Tags: nvidia-triton, sagemaker, auth-bypass, rce, cwe-288, ml-inference, model-loading, pre-auth.networkCriticalnvidia-tritonsagemakerauth-bypassrcecwe-288ml-inferencemodel-loadingpre-authhttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-22807-vllm-trust-remote-code-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-22807-vllm-trust-remote-code-bypass/High severity — misc · CVE-2026-22807. Status: PoC. Affects: AI inference/model-loading frameworks that resolve custom model classes via auto_map before validating trust_remote_code (pattern seen in vLLM/Transformers-style loaders). Tags: vllm, huggingface, trust-remote-code, toctou, model-loading, supply-chain, python, code-execution.miscHighvllmhuggingfacetrust-remote-codetoctoumodel-loadingsupply-chainpythoncode-execution