CVE-2026-85180Suited to automated attack · CISA
Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
CVSS score
8.7
EPSS probability
%0.5
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.7
CVE-2026-65315
Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser
O
Patch verifiedEPSS %1
9.8
CVE-2025-63389
Missing authentication in Ollama
O
Patch status unknownEPSS %1
8.7
CVE-2025-15514
Ollama Multi-Modal Model Image Processing NULL Pointer Dereference
O
Patch verifiedEPSS %1
7.5
CVE-2026-5757
Out-of-bounds read in Ollama
O
Patch status unknownEPSS %1
7.5
CVE-2026-15685
Vulnerability in Ollama
O
Patch status unknownEPSS %1
6.9
CVE-2026-103663
Path Traversal leading to Remote Code Execution in Ollama
O
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-85180"