Total
2963 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-56057 | 2026-06-26 | N/A | 9.8 CRITICAL | ||
| Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions. | |||||
| CVE-2026-56031 | 2026-06-26 | N/A | 8.1 HIGH | ||
| Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions. | |||||
| CVE-2025-71340 | 2026-06-26 | N/A | 8.1 HIGH | ||
| picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers can embed undetected code in pickle files that executes arbitrary commands when the file is loaded via pickle.load(), enabling supply chain attacks on PyTorch models and saved Python objects. This is fixed in version 0.0.30. | |||||
| CVE-2026-56032 | 2026-06-26 | N/A | 9.8 CRITICAL | ||
| Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions. | |||||
| CVE-2025-71348 | 1 Mmaitre314 | 1 Picklescan | 2026-06-26 | N/A | 8.1 HIGH |
| picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding arbitrary code that evades detection but executes during pickle.load, enabling remote code execution in supply chain attacks. | |||||
| CVE-2025-71357 | 1 Mmaitre314 | 1 Picklescan | 2026-06-26 | N/A | 8.1 HIGH |
| picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims. | |||||
| CVE-2025-71378 | 1 Mmaitre314 | 1 Picklescan | 2026-06-26 | N/A | 8.1 HIGH |
| picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load(). | |||||
| CVE-2026-56053 | 2026-06-26 | N/A | 8.8 HIGH | ||
| Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions. | |||||
| CVE-2025-2251 | 2026-06-26 | N/A | 6.2 MEDIUM | ||
| A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication. | |||||
| CVE-2026-39253 | 2026-06-25 | N/A | 8.1 HIGH | ||
| An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll and Pivotal.Engine.Client.Services.Conversion.dll components. | |||||
| CVE-2026-46607 | 2026-06-25 | N/A | 7.8 HIGH | ||
| Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load() to read a version-check cache file stored at a predictable, world-accessible path (~/.cache/glances/glances-version.db or $XDG_CACHE_HOME/glances/glances-version.db). No integrity check, signature verification, or format validation is performed before deserialization. An attacker with write access to that path — through any of several realistic local or container-level scenarios — can plant a malicious pickle file and achieve arbitrary code execution as the OS user running Glances the next time it starts with version checking enabled (the default). This vulnerability is fixed in 4.5.5. | |||||
| CVE-2026-10043 | 2026-06-25 | N/A | 7.8 HIGH | ||
| MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MosaicML Composer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of checkpoints. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27990. | |||||
| CVE-2026-41862 | 2026-06-25 | N/A | 8.8 HIGH | ||
| Spring Statemachine's Kryo-based persistence backends (JPA, MongoDB, Redis and ZooKeeper) deserialise persisted state-machine contexts without enforcing a class allowlist (CWE-502, deserialisation of untrusted data), which can lead to remote code execution inside the application JVM. Affected versions: Spring Statemachine 4.0.0 through 4.0.1 Spring Statemachine 3.2.0 through 3.2.4 | |||||
| CVE-2026-48517 | 1 Messagepack | 1 Messagepack | 2026-06-25 | N/A | 7.5 HIGH |
| MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePack-CSharp's typeless deserialization includes MessagePackSerializerOptions.ThrowIfDeserializingTypeIsDisallowed(Type) as a safety check for dangerous types. The default implementation checks the outer type name, but it does not recursively inspect array element types or generic type arguments. As a result, a type that would be blocked directly can be wrapped inside an array or constructed generic type and pass the outer type check. The formatter machinery can then materialize formatters for the inner blocked type. This vulnerability is fixed in 2.5.301 and 3.1.7. | |||||
| CVE-2025-71354 | 2026-06-25 | N/A | 8.1 HIGH | ||
| picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.debugobj.ObjectTreeItem.SetText function in reduce methods. Attackers can craft pickle files with embedded code that bypasses picklescan detection and executes arbitrary commands when pickle.load() is called. | |||||
| CVE-2025-11739 | 1 Schneider-electric | 2 Ecostruxure Power Monitoring Expert, Ecostruxure Power Operation | 2026-06-24 | N/A | 7.8 HIGH |
| CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization. | |||||
| CVE-2026-56304 | 1 Mmaitre314 | 1 Picklescan | 2026-06-24 | N/A | 6.5 MEDIUM |
| picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.FileHandler class instantiation. Attackers can exploit this by crafting malicious pickle payloads to bypass RCE blocklists and create lock files or other filesystem artifacts, potentially causing denial of service or application disruption. | |||||
| CVE-2026-48775 | 1 Langchain | 1 Langgraph-checkpoint | 2026-06-24 | N/A | 6.8 MEDIUM |
| LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. Under conditions where someone could modify checkpoint bytes at rest in the backing store, the deserialization path could reconstruct objects beyond what the application expects, which could in turn result in code execution at checkpoint load time. This is a defense-in-depth issue. The affected behavior is reachable only when checkpoint bytes at rest in the backing store can be modified by an unauthorized party. In most deployments that prerequisite already implies a serious incident; the additional concern is turning "checkpoint-store write access" into code execution in the application runtime. This issue has been fixed in version 4.1.1. | |||||
| CVE-2026-1286 | 1 Schneider-electric | 1 Ecostruxure Foxboro Dcs Control Software | 2026-06-24 | N/A | 6.5 MEDIUM |
| CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an admin authenticated user opens a malicious project file. | |||||
| CVE-2025-27511 | 1 Osgeo | 1 Geoserver | 2026-06-24 | N/A | 7.2 HIGH |
| GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url leading to to Remote Code Execution (RCE). Version 2.27.0 fixes the issue. | |||||