Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: deserialization Clear
ID Title
CVE-2026-48397 Unsafe Deserialization in deserialization (CVE-2026-48397)
vulnerability in deserialization (CVE-2026-48397). Successful exploitation can lead to full system takeover.
CVE-2026-70321 Unsafe Deserialization in deserialization (CVE-2026-70321)
vulnerability in deserialization (CVE-2026-70321). Successful exploitation can lead to full system takeover.
CVE-2026-66808 Unsafe Deserialization in deserialization (CVE-2026-66808)
vulnerability in deserialization (CVE-2026-66808). Successful exploitation can lead to full system takeover.
CVE-2026-66805 Unsafe Deserialization in deserialization (CVE-2026-66805)
vulnerability in deserialization (CVE-2026-66805). Successful exploitation can lead to full system takeover.
CVE-2026-65815 Unsafe Deserialization in deserialization (CVE-2026-65815)
vulnerability in deserialization (CVE-2026-65815). Successful exploitation can lead to full system takeover.
CVE-2026-65665 Unsafe Deserialization in deserialization (CVE-2026-65665)
vulnerability in deserialization (CVE-2026-65665). Successful exploitation can lead to full system takeover.
CVE-2026-65663 Unsafe Deserialization in deserialization (CVE-2026-65663)
vulnerability in deserialization (CVE-2026-65663). Successful exploitation can lead to full system takeover.
CVE-2026-65658 Unsafe Deserialization in deserialization (CVE-2026-65658)
vulnerability in deserialization (CVE-2026-65658). Successful exploitation can lead to full system takeover.
CVE-2026-64901 Unsafe Deserialization in deserialization (CVE-2026-64901)
vulnerability in deserialization (CVE-2026-64901). Successful exploitation can lead to full system takeover.
CVE-2026-63516 Unsafe Deserialization in deserialization (CVE-2026-63516)
vulnerability in deserialization (CVE-2026-63516). Confidential information can be exposed externally.
CVE-2026-63514 Unsafe Deserialization in deserialization (CVE-2026-63514)
vulnerability in deserialization (CVE-2026-63514). Successful exploitation can lead to full system takeover.
CVE-2026-62912 Unsafe Deserialization in deserialization (CVE-2026-62912)
vulnerability in deserialization (CVE-2026-62912). Risk of unauthorized operations or information disclosure.
CVE-2026-17061 Unsafe Deserialization in deserialization (CVE-2026-17061)
vulnerability in deserialization (CVE-2026-17061). Successful exploitation can lead to full system takeover.
CVE-2026-15555 Unsafe Deserialization in deserialization (CVE-2026-15555)
vulnerability in deserialization (CVE-2026-15555). Successful exploitation can lead to full system takeover.
CVE-2026-18948 Unsafe Deserialization in deserialization (CVE-2026-18948)
vulnerability in deserialization (CVE-2026-18948). Successful exploitation can lead to full system takeover.
CVE-2026-19363 Information Disclosure in deserialization (CVE-2026-19363)
vulnerability in deserialization (CVE-2026-19363). Risk of unauthorized operations or information disclosure.
CVE-2026-71560 Out-of-Bounds Read in c (CVE-2026-71560)
vulnerability in c (CVE-2026-71560). Data can be tampered with by attackers.
CVE-2026-71559 Unsafe Deserialization in apache (CVE-2026-71559)
vulnerability in apache (CVE-2026-71559). Risk of unauthorized operations or information disclosure.
CVE-2026-71558 Unsafe Deserialization in c (CVE-2026-71558)
vulnerability in c (CVE-2026-71558). Successful exploitation can lead to full system takeover.
CVE-2026-16258 Unsafe Deserialization in wordpress (CVE-2026-16258)
vulnerability in wordpress (CVE-2026-16258). Successful exploitation can lead to full system takeover.
CVE-2026-50515 Unsafe Deserialization in deserialization (CVE-2026-50515)
vulnerability in deserialization (CVE-2026-50515). Successful exploitation can lead to full system takeover.
CVE-2026-66909 Unsafe Deserialization in apache (CVE-2026-66909)
vulnerability in apache (CVE-2026-66909). Successful exploitation can lead to full system takeover.
CVE-2026-70426 Unsafe Deserialization in deserialization (CVE-2026-70426)
vulnerability in deserialization (CVE-2026-70426). Successful exploitation can lead to full system takeover.
CVE-2026-71281 Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines...
Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines...
CVE-2026-61484 Unsafe Deserialization in apache (CVE-2026-61484)
vulnerability in apache (CVE-2026-61484). Successful exploitation can lead to full system takeover.
CVE-2026-47623 Unsafe Deserialization in dos (CVE-2026-47623)
vulnerability in dos (CVE-2026-47623). Risk of unauthorized operations or information disclosure.
CVE-2026-15920 Vulnerability in django (CVE-2026-15920)
vulnerability in django (CVE-2026-15920). Risk of unauthorized operations or information disclosure. Exploitable via ``URLField``.
CVE-2026-69098 Unsafe Deserialization in c (CVE-2026-69098)
vulnerability in c (CVE-2026-69098). Successful exploitation can lead to full system takeover.
CVE-2026-18642 Unsafe Deserialization in deserialization (CVE-2026-18642)
vulnerability in deserialization (CVE-2026-18642). Successful exploitation can lead to full system takeover.
CVE-2025-15672 Unsafe Deserialization in wordpress (CVE-2025-15672)
vulnerability in wordpress (CVE-2025-15672). Successful exploitation can lead to full system takeover.
CVE-2026-3245 Unsafe Deserialization in deserialization (CVE-2026-3245)
vulnerability in deserialization (CVE-2026-3245). Successful exploitation can lead to full system takeover.
CVE-2026-16062 Unsafe Deserialization in wordpress (CVE-2026-16062)
vulnerability in wordpress (CVE-2026-16062). Successful exploitation can lead to full system takeover.
CVE-2026-68771 Unsafe Deserialization in deserialization (CVE-2026-68771)
vulnerability in deserialization (CVE-2026-68771). Successful exploitation can lead to full system takeover. Exploitable via `POST /upload/image`.
CVE-2026-15976 Unsafe Deserialization in deserialization (CVE-2026-15976)
vulnerability in deserialization (CVE-2026-15976). Successful exploitation can lead to full system takeover.
CVE-2026-12118 Unsafe Deserialization in deserialization (CVE-2026-12118)
vulnerability in deserialization (CVE-2026-12118). Successful exploitation can lead to full system takeover.
CVE-2026-54365 Vulnerability in deserialization (CVE-2026-54365)
vulnerability in deserialization (CVE-2026-54365). Data can be tampered with by attackers.
CVE-2026-57859 Unsafe Deserialization in deserialization (CVE-2026-57859)
vulnerability in deserialization (CVE-2026-57859). Successful exploitation can lead to full system takeover.
CVE-2026-1360 Unsafe Deserialization in wordpress (CVE-2026-1360)
vulnerability in wordpress (CVE-2026-1360). Successful exploitation can lead to full system takeover. Exploitable via ``allowed_classes``.
CVE-2026-14974 Unsafe Deserialization in deserialization (CVE-2026-14974)
vulnerability in deserialization (CVE-2026-14974). Successful exploitation can lead to full system takeover.
CVE-2026-14512 Unsafe Deserialization in c (CVE-2026-14512)
vulnerability in c (CVE-2026-14512). Successful exploitation can lead to full system takeover.
CVE-2026-66713 Unsafe Deserialization in apache (CVE-2026-66713)
vulnerability in apache (CVE-2026-66713). Successful exploitation can lead to full system takeover.
CVE-2026-11756 Unsafe Deserialization in deserialization (CVE-2026-11756)
vulnerability in deserialization (CVE-2026-11756). Successful exploitation can lead to full system takeover.
CVE-2026-65617 Unsafe Deserialization in deserialization (CVE-2026-65617)
vulnerability in deserialization (CVE-2026-65617). Successful exploitation can lead to full system takeover.
CVE-2026-17572 Out-of-Bounds Read in dos (CVE-2026-17572)
vulnerability in dos (CVE-2026-17572). Risk of unauthorized operations or information disclosure.
CVE-2026-15962 Unsafe Deserialization in wordpress (CVE-2026-15962)
vulnerability in wordpress (CVE-2026-15962). Successful exploitation can lead to full system takeover.
CVE-2026-59940 Unsafe Deserialization in seroval (CVE-2026-59940)
vulnerability in seroval (CVE-2026-59940). Successful exploitation can lead to full system takeover. Exploitable via ``seroval``. Mitigation: upgrade to `1.5.3` or later.
CVE-2026-50517 Unsafe Deserialization in deserialization (CVE-2026-50517)
vulnerability in deserialization (CVE-2026-50517). Successful exploitation can lead to full system takeover.
CVE-2026-21655 Unsafe Deserialization in deserialization (CVE-2026-21655)
vulnerability in deserialization (CVE-2026-21655). Risk of unauthorized operations or information disclosure.
CVE-2026-13190 Unsafe Deserialization in deserialization (CVE-2026-13190)
vulnerability in deserialization (CVE-2026-13190). Successful exploitation can lead to full system takeover.
CVE-2026-13186 Path Traversal in path-traversal (CVE-2026-13186)
path traversal in path-traversal (CVE-2026-13186). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →