CVE ID :CVE-2025-71348 Published : June 21, 2026, 1:26 p.m. | 1 hour, 43 minutes ago Description :picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2025-71348 - picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass

VERWANDTEARTIKEL

CVE-2026-56397 - SiYuan - Remote Code Execution via Malicious Bazaar Package Metadata and README

CVE-2026-56396 - phpMyFAQ - Privilege Escalation via Missing Authorization in editUser() and updateUserRights()

CVE-2026-56382 - Craft CMS - Remote Code Execution via Missing Config Sanitization in FieldsController

CVE-2026-56253 - Capgo - Unauthenticated Organization Member Email Disclosure via get_org_members RPC

CVE-2026-56265 - Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

CVE-2026-56242 - Capgo - Unauthenticated API Key Validity Oracle and User Identity Disclosure via get_identity_apikey_only RPC