CVE-2026-52903 - YAML safe_load production fallback to unsafe_load enables RCE via deserialization
CVE ID :CVE-2026-52903 Published : Oct. 12, 2026, 1:17 p.m. | 14 minutes ago Description :A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to YAML.unsafe_load in production when a...