CVE detail
CVE-2026-10814
A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file internal/metastore/kv/rootcoord/kv_catalog.go of the component Grantee ID Hash Handler. The manipulation leads to use of weak hash. The attack needs to be performed locally. The attack's complexity is rated as high. It is stated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 3d932f1c3e065351c4440c27abe1e6479752544d. Applying a patch is the recommended action to fix this issue.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 22.0 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
8 source links · newest first
- https://vuldb.com/vuln/368262/ctivuldb.com
No excerpt available.
Exploitvuldb.comJun 4, 2026, 4:16 PM - https://vuldb.com/vuln/368262vuldb.com
No excerpt available.
Exploitvuldb.comJun 4, 2026, 4:16 PM - https://vuldb.com/submit/831645vuldb.com
No excerpt available.
Exploitvuldb.comJun 4, 2026, 4:16 PM - https://vuldb.com/cve/CVE-2026-10814vuldb.com
No excerpt available.
Exploitvuldb.comJun 4, 2026, 4:16 PM No excerpt available.
Exploitgithub.comJun 4, 2026, 4:16 PMNo excerpt available.
Exploitgithub.comJun 4, 2026, 4:16 PMNo excerpt available.
Exploitgithub.comJun 4, 2026, 4:16 PM- https://github.com/milvus-io/milvus/github.com
No excerpt available.
Exploitgithub.comJun 4, 2026, 4:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-15605CVSS 2.3 · Low
A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download in the library wandb/sdk/lib/hashutil.py of the component…
- CVE-2026-14742CVSS 1.3 · Low
A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of the file libs/langgraph/langgraph/_internal/_cache.py of the…
- CVE-2026-14738CVSS 2.9 · Low
A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image_cache_key of the file src/exo/worker/engines/mlx/vision.py of the component Vi…
- CVE-2026-14630CVSS 1.3 · Low
A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerability is the function get_conversation_history of the file 08_agentic_system/me…
- CVE-2026-13510CVSS 2.9 · Low
A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of th…
- CVE-2026-13482CVSS 2.9 · Low
A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function username.encode of the file sky/users/server.py of the component User ID Handler. The…