CVE-2026-49950 - Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool
CVE ID :CVE-2026-49950 Published : Oct. 13, 2026, 9:17 p.m. | 15 minutes ago Description :Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel....