CVE ID :CVE-2026-3490 Published : June 17, 2026, 3:05 p.m. | 2 hours, 4 minutes ago Description :picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE calls. Remote attackers...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-3490 - picklescan - Universal Blocklist Bypass via pkgutil.resolve_name

VERWANDTEARTIKEL

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

27-Year-Old OpenBSD Vulnerability Allows Attackers to Bypass PAP Authentication Entirely

USN-8442-1: kitty vulnerabilities

U.S. CISA adds Widget Factory Joomla Content Editor flaw to its Known Exploited Vulnerabilities catalog

CVE-2026-53874 - picklescan - Arbitrary Code Execution via Obfuscated eval Call

CVE-2026-53872 - picklescan - Arbitrary File Read via Unsafe Pickle Deserialization