Beveiligingsadvies

CVE-2026-53872

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-17 15:05:02

Laatst bijgewerkt 2026-06-17 17:36:17

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

picklescan before 0.0.35 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to read arbitrary server files by chaining io.FileIO and urllib.request.urlopen. Attackers can bypass RCE-focused blocklists to exfiltrate sensitive data like /etc/passwd to external servers.

← Alle CVE's bekijken Bekijk op cve.org ↗