CVE-2026-33626: How attackers exploited LMDeploy LLM Inference Engines in 12 hours

CVE-2026-33626 in LMDeploy was exploited within 12 hours of disclosure, enabling attackers to use a vision-LLM endpoint for SSRF-based internal network scanning, cloud metadata access, and service enumeration.