vLLM Video URL Multimodal Request (CVE-2026-22778)
Monitors web or API gateway logs for POST requests directed at vulnerable vLLM multimodal endpoints containing the 'video_url' parameter. This is the entry point for the CVE-2026-22778 exploit chain.
Microsoft Sentinel (KQL)

