Sunday, April 26, 2026 · 3 of 5

1. LMDeploy CVE-2026-33626 exploited 13 hours after disclosure

   SSRF in the vision-language image loader; Sysdig honeypots saw active port-scanning of cloud metadata, Redis, and MySQL behind the model server.

   Apr 22