CVE-2024-11040

highrejectedpriority · track · 10exploit · PoCEU

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

— EPSS

no CVSS · high

Is it mine?

1 products

Check your exposure

Who says so?

2 sources

cnnvd · enisa_euvd

Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-8939. Notes: All CVE users should reference CVE-2024-8939 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.

01

cvss

Technical severity, 0–10. One row per scoring source.

higha sovereign source's own severity rating (no CVSS score)

02

weaknesses

The CWE weakness classes this flaw belongs to.

No weakness (CWE) mapping recorded.

03

exploits (1)

Public proof-of-concept and weaponised exploit code.

gothburz/CVE-2024-11040vllm-project vllm version 0.5.2.2 is vulnerable to Denial of Service attacks.PoC · poc_in_github

04

affected products (1)

Products and version ranges known to be affected.

vllm-project vllm-project/vllm≤ unspecified ≤latestenisa_euvdEU

05

also known as (3)

Other names and identifiers for this entity.

06

sources

Which sources assert this record, and when.

cnnvd enisa_euvd NVD CVE.org

published 2025-03-20modified 2025-04-15

07

references (2) cnnvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.