https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T21:52:31.383789+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-103760 CVE-2026-103760 — Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write 2026-10-03T21:52:31.384711+00:00

Affected: kvcache-ai Mooncake

Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated remote attackers to block the handshake daemon by never reading replies. Attackers can send a Metadata request to the handshake RPC port and stall SocketHandShakePlugin's single listener thread in writeFully(), breaking all subsequent handshakes, metadata fetches, notify and probe requests.