All Detections

vLLM Spawning Unix Shells - CVE-2026-22778

avatar
Ibrahim Saud@tektrix
updated Jun 20, 2026004

Detects vLLM processes spawning interactive Unix shells, a strong indicator of remote code execution, potentially exploiting CVE-2026-22778.

Microsoft Sentinel (KQL)