CVE-2026-124318 - Treeio through 2.0 Insecure Deserialization RCE via Admin-Editable Pickle Fields
CVE ID :CVE-2026-124318 Published : 7. November 2026 15:17 | 1 Stunde, 56 Minuten ago Description :Treeio through 2.0 contains an insecure deserialization vulnerability in UpdateRecord.get_format_strings and ModuleSetting.loads that allows staff users to execute code via unverified pickle...