CVE ID :CVE-2026-53874 Published : June 17, 2026, 3:05 p.m. | 2 hours, 4 minutes ago Description :picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute arbitrary code by hiding eval calls nested under callable objects via getattr....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-53874 - picklescan - Arbitrary Code Execution via Obfuscated eval Call

VERWANDTEARTIKEL

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

27-Year-Old OpenBSD Vulnerability Allows Attackers to Bypass PAP Authentication Entirely

USN-8442-1: kitty vulnerabilities

U.S. CISA adds Widget Factory Joomla Content Editor flaw to its Known Exploited Vulnerabilities catalog

CVE-2026-53872 - picklescan - Arbitrary File Read via Unsafe Pickle Deserialization

CVE-2026-53873 - picklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass