CVE ID :CVE-2025-71362 Published : July 4, 2026, 1:23 a.m. | 1 hour, 50 minutes ago Description :picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2025-71362 - picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran

VERWANDTEARTIKEL

CVE-2026-57149

CVE-2026-55247

New “Bad Epoll” 0-Day Vulnerability Allows Root Access on Linux Servers and Android Devices

CVE-2025-71375 - picklescan - Undetected Remote Code Execution via _operator.methodcaller

CVE-2025-71380 - n8n - Arbitrary Command Execution via Execute Command Node

CVE-2025-71369 - picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers