Intelligence View

⚡ tsecurity.de Intelligence

ZDI-26-814: (0Day) Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this…

Sicherheitslücken (CVE) ZDI: Published Advisories 28.10.2026, 06:00 Uhr 1 Min. Lesezeit KRITIS / Energie

BeitragSeite↗ Quelle (ZDI: Published Advisories)

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118615. Weiterlesen: ZDI-26-814: (0Day) Ultralytics torch_safe_load Command Injection Remo…

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege

IoC Intelligence

1 Indikatoren · Defanged · STIX 2.1

CVE-2026-118615

CTI Threat Relationship Graph

Akteure · Techniken · Beziehungen

3 Knoten · 2 Relationen

CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC

Exploit & Remediation Lifecycle

PoC · Ausnutzung · Patch-Stufen

CVE-2026-118615

Entdeckung & Meldung

Schwachstelle identifiziert & registriert

Sicherheits-Advisory

Offizielle Warnung & CVE-Zuweisung

Exploit / PoC

Bislang kein öffentlicher Exploit

In-the-Wild Ausnutzung

Keine Massenausnutzung gemeldet

Patch & Schutzmaßnahmen

Noch kein offizieller Patch dokumentiert

Exploit Weaponization & PoC Radar

Nur belegte Faktoren · kein Score-Theater

LOW · Index 0/100

Exploit-DB

Kein EDB-Eintrag

Interaktion

Interaktion nötig

Authentifizierung

Erforderlich

Compliance, SLA & Vendor Adherence

Advisory-Prüfung · Score-Einordnung · Fristen

Advisory Radar

Hersteller-Sicherheitsmeldungen & Patch-Status

In herstellerseitiger Prüfung

Handlungsempfehlung für Administratoren

Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.

Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):

Keine herstellerspezifischen Bulletins in der Primärquelle hinterlegt.

🚀 Auf tsecurity.de entdecken

Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir

Community Rating & Social Proof

⭐ Leser-Wertung

–

Ø / 5.0

Hiçbir okuyucu henüz yorum yok

Bu sayfa yararlı mıydı?

🚀 Auf tsecurity.de entdecken

İlgili Story Cluster & Kaynaklar (vector AI)

19 Kaynaklar

Apple Unveils Its First Touch-Screen MacBook Pro

18 diğer kaynaklar

Engadgetvor 31 Min.Apple's first touchscreen MacBook Pro feels both familiar and radically improved WIREDvor 59 Min.The Inside Story of Why Apple Finally Brought a Touch Display to the Mac TechCrunchvor 48 Min.Apple launches its new touchscreen MacBook Pro The Vergevor 1 Std.Apple announces its first touchscreen MacBook Pro The Vergevor 57 Min.Hands-on with Apple’s touchscreen MacBook Pro The Vergevor 55 Min.Watch Apple’s reveal video for the touchscreen MacBook Pro

+12

Analiz açın

14 Kaynaklar

CVE-2026-29136 | SEPPmail Secure Email Gateway up to 15.0.2 Notification cross site scripting

13 diğer kaynaklar

VulDB Updatesvor 1 Std.CVE-2026-29131 | SEPPmail Secure Email Gateway up to 15.0.2 ldap injection VulDB Updatesvor 1 Std.CVE-2026-29135 | SEPPmail Secure Email Gateway up to 15.0.2 password-tag input validation VulDB Updatesvor 1 Std.CVE-2026-29133 | SEPPmail Secure Email Gateway up to 15.0.2 PGP Key input validation VulDB Updatesvor 1 Std.CVE-2026-29134 | SEPPmail Secure Email Gateway up to 15.0.2 GINA Webdomain Metadata reliance on untrusted inputs in a security decision VulDB Updatesvor 1 Std.CVE-2026-29132 | SEPPmail Secure Email Gateway up to 15.0.2 missing authentication VulDB Updatesvor 1 Std.CVE-2026-29140 | SEPPmail Secure Email Gateway up to 15.0.2 Certificate certificate validation

Analiz açın

13 Kaynaklar

CVE-2026-34749 | payloadcms payload up to 3.79.0 cross-site request forgery (GHSA-p6mr-xf3r-ghq4)

12 diğer kaynaklar

VulDB Updatesvor 3 Std.CVE-2026-34748 | payloadcms payload up to 3.77.x cross site scripting (GHSA-mmxc-95ch-2j7c) VulDB Updatesvor 3 Std.CVE-2026-34747 | payloadcms payload up to 3.79.0 sql injection (GHSA-7xxh-373w-35vg) VulDB Updatesvor 3 Std.CVE-2026-34559 | ci4-cms-erp ci4ms 0.28.5.0 tag name cross site scripting (GHSA-4333-387x-w245) VulDB Updatesvor 2 Std.CVE-2026-34566 | ci4-cms-erp ci4ms 0.28.5.0 cross site scripting (GHSA-458r-h248-29c5) VulDB Updatesvor 2 Std.CVE-2026-34571 | ci4-cms-erp ci4ms 0.28.5.0 Administrative Interface cross site scripting (GHSA-fc4p-p49v-r948) VulDB Updatesvor 2 Std.CVE-2026-34569 | ci4-cms-erp ci4ms 0.28.5.0 category title cross site scripting (GHSA-fhrf-q333-82fm)

Analiz açın

◀ VORHERIGER BEITRAG 1 Min

Hackers Use Signed ChatGPT and Claude Binaries to Deploy Yoba Malware

Malware / Trojaner / Viren

NÄCHSTER BEITRAG 1 Min

Anthropic’s seven founders tighten grip ahead of blockbuster IPO

AI & KI NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

🕒 tsecurity.de Such-Trends & Chronologie

ZDI-26-814: (0Day) Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability

Cyber Threat Intelligence & Forensik

Compliance, SLA & Vendor Adherence

Hersteller-Sicherheitsmeldungen & Patch-Status

Jetzt Bewertung abgeben

İlgili Story Cluster & Kaynaklar (vector AI)

ZDI-26-814: (0Day) Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability

Cyber Threat Intelligence & Forensik

Compliance, SLA & Vendor Adherence

Hersteller-Sicherheitsmeldungen & Patch-Status

Jetzt Bewertung abgeben

İlgili Story Cluster & Kaynaklar (vector AI)

Mehr aus dieser Kategorie